From 6c954f96b86dac859d4bee61c68d87964c8cd377 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 25 Mar 2019 17:39:17 -0700 Subject: [PATCH 01/34] info prot --- ...ormation-protection-in-windows-overview.md | 23 +++++++++++++++---- 1 file changed, 18 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md index 976dfff7e4..870dab0be9 100644 --- a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md +++ b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md @@ -14,7 +14,6 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: conceptual -ms.date: 12/05/2018 --- # Information protection in Windows overview @@ -38,14 +37,28 @@ Windows Defender ATP applies two methods to discover and protect data: ## Data discovery -Windows Defender ATP automatically discovers files with sensitivity labels on Windows devices when the feature is enabled. You can enable the Azure Information Protection integration feature from Windows Defender Security Center. For more information, see [Configure advanced features](advanced-features-windows-defender-advanced-threat-protection.md#azure-information-protection). +Windows Defender ATP automatically discovers files with sensitivity labels and files that contain sensitive information types. +Sensitivity labels classify and help protect sensitive content. + + +Sensitive information types in the Office 365 data loss prevention (DLP) implementation fall under two categories: +- Default +- Custom + +Default sensitive information types include information such as bank account numbers, social security numbers, or national IDs. For more information, see [What the sensitive information type look for](https://docs.microsoft.com/office365/securitycompliance/what-the-sensitive-information-types-look-for). + +Custom types are ones that you define and is designed to protect a different type of sensitive information (for example, employee IDs or project numbers). For more information see, [Create a custom sensitive information type](https://docs.microsoft.com/en-us/office365/securitycompliance/create-a-custom-sensitive-information-type). + + + +When a file is created or edited on a Windows device, Windows Defender ATP scans the content to evaluate if it contains sensitive information. + +Turn on the Azure Information Protection integration so that when a file that contains sensitive information is discovered by Windows Defender ATP though labels or information types, it is automatically forwarded to Azure Information Protection from the device. ![Image of settings page with Azure Information Protection](images/atp-settings-aip.png) -After enabling the Azure Information Protection integration, data discovery signals are immediately forwarded to Azure Information Protection from the device. When a labeled file is created or modified on a Windows device, Windows Defender ATP automatically reports the signal to Azure Information Protection. - -The reported signals can be viewed on the Azure Information Protection - Data discovery dashboard. +The reported signals can be viewed on the Azure Information Protection – Data discovery dashboard. ### Azure Information Protection - Data discovery dashboard This dashboard presents a summarized discovery information of data discovered by both Windows Defender ATP and Azure Information Protection. Data from Windows Defender ATP is marked with Location Type - Endpoint. From 6afaaaaebf60a2e857cdc57239ffc3270212f4c2 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 1 May 2019 17:51:58 -0700 Subject: [PATCH 02/34] add auto labeling content --- ...nformation-protection-in-windows-config.md | 20 ++++++++++++-- ...ormation-protection-in-windows-overview.md | 26 +++++++++++++++---- 2 files changed, 39 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md index a8696ec1d9..092c8798c9 100644 --- a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md +++ b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md @@ -14,7 +14,6 @@ manager: dansimp audience: ITPro ms.collection: M365-security-compliance ms.topic: article -ms.date: 12/05/2018 --- # Configure information protection in Windows @@ -32,7 +31,7 @@ Learn how you can use Windows Defender ATP to expand the coverage of Windows Inf - Your tenant needs to be onboarded to Azure Information Protection analytics, for more information see, [Configure a Log Analytics workspace for the reports](https://docs.microsoft.comazure/information-protection/reports-aip#configure-a-log-analytics-workspace-for-the-reports) -## Configuration steps +## Configure endpoint data loss prevention 1. Define a WIP policy and assign it to the relevant devices. For more information, see [Protect your enterprise data using Windows Information Protection (WIP)](https://docs.microsoft.com/windows/security/information-protection/windows-information-protection/protect-enterprise-data-using-wip). If WIP is already configured on the relevant devices, skip this step. 2. Define which labels need to get WIP protection in Office 365 Security and Compliance. @@ -50,5 +49,22 @@ After completing these steps Windows Defender ATP will automatically identify la >- The Windows Defender ATP configuration is pulled every 15 minutes. Allow up to 30 minutes for the new policy to take effect and ensure that the endpoint is online. Otherwise, it will not receive the policy. >- Data forwarded to Azure Information Protection is stored in the same location as your other Azure Information Protection data. + +## Configure auto labeling +1. In Office 365 Security & Compliance, go to **Classifications > Labels**. + +2. Create a new label or edit an existing one. + + +3. Set a policy for Data classification: + + 1. Go through the label creation wizard. + 2. When you reach the Auto labeling page, turn on auto labeling toggle on. + 3. Add a new auto-labeling rule with the conditions that you require. + 4. Validate that ‘When content matches these conditions’ setting is set to ‘Automatically apply the label’. + + + + ## Related topic - [Information protection in Windows overview](information-protection-in-windows-overview.md) \ No newline at end of file diff --git a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md index 870dab0be9..8c87317f15 100644 --- a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md +++ b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md @@ -31,12 +31,13 @@ Windows Defender ATP is seamlessly integrated in Microsoft Threat Protection to > Read our blog post about how [Windows Defender ATP integrates with Microsoft Information Protection to discover, protect, and monitor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). -Windows Defender ATP applies two methods to discover and protect data: +Windows Defender ATP applies the following methods to discover, classify, and protect data: - **Data discovery** - Identify sensitive data on Windows devices at risk +- **Data classification** - Automatically classify data based on common Microsoft Information Protection (MIP) policies managed in Office 365 Security & Compliance Center. Auto-classification allows you to protect sensitive data even if the end user hasn’t manually classified it. - **Data protection** - Windows Information Protection (WIP) as outcome of Azure Information Protection label -## Data discovery +## Data discovery and data classification Windows Defender ATP automatically discovers files with sensitivity labels and files that contain sensitive information types. Sensitivity labels classify and help protect sensitive content. @@ -51,7 +52,6 @@ Default sensitive information types include information such as bank account num Custom types are ones that you define and is designed to protect a different type of sensitive information (for example, employee IDs or project numbers). For more information see, [Create a custom sensitive information type](https://docs.microsoft.com/en-us/office365/securitycompliance/create-a-custom-sensitive-information-type). - When a file is created or edited on a Windows device, Windows Defender ATP scans the content to evaluate if it contains sensitive information. Turn on the Azure Information Protection integration so that when a file that contains sensitive information is discovered by Windows Defender ATP though labels or information types, it is automatically forwarded to Azure Information Protection from the device. @@ -96,10 +96,15 @@ InformationProtectionLogs_CL ## Data protection -For data to be protected, they must first be identified through labels. Sensitivity labels are created in Office Security and Compliance (SCC). Windows Defender ATP then uses the labels to identify endpoints that need Windows Information Protection (WIP) applied on them. +### Endpoint data loss prevention +For data to be protected, they must first be identified through labels. -When you create sensitivity labels, you can set the information protection functionalities that will be applied on the file. The setting that applies to Windows Defender ATP is the Data loss prevention. You'll need to turn on the Data loss prevention and select Enable Windows end point protection (DLP for devices). +Sensitivity labels are created in Office 365 Security & Compliance Center. Windows Defender ATP then uses the labels to identify endpoints that need Windows Information Protection (WIP) applied on them. + +When you create sensitivity labels, you can set the information protection functionalities that will be applied on the file. The setting that applies to Windows Defender ATP is the Endpoint data loss prevention. + +For the endpoint data loss prevention, you'll need to turn on the Endpoint Data loss prevention and select Enable Windows end point protection (DLP for devices). ![Image of Office 365 Security and Compliance sensitivity label](images/office-scc-label.png) @@ -108,6 +113,17 @@ Once, the policy is set and published, Windows Defender ATP automatically enable This functionality expands the coverage of WIP to protect files based on their label, regardless of their origin. +For more information, see [Configure information protection in Windows](information-protection-in-windows-config.md). + +## Auto labeling + +Auto labeling is another way to protect data and can also be configured in Office 365 Security & Compliance Center. When Windows Defender ATP scans the content of a file in a Windows device and finds that it contains sensitive information, it will automatically apply a label to it even if the user hasn't manually classified it. + +> [!NOTE] +> Auto-labeling is supported in Office apps only when the Azure Information Protection unified labeling client is installed. When sensitive content is detected in email or documents matching the conditions you choose, a label can automatically be applied or a message can be shown to users recommending they apply it themselves. + + + For more information, see [Configure information protection in Windows](information-protection-in-windows-config.md). From 87a472e9d90efad9c2e61a21fafba545decb4e2e Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 1 May 2019 18:01:45 -0700 Subject: [PATCH 03/34] Update information-protection-in-windows-overview.md --- .../information-protection-in-windows-overview.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md index 8c87317f15..9d98ef9db0 100644 --- a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md +++ b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-overview.md @@ -60,7 +60,7 @@ Turn on the Azure Information Protection integration so that when a file that co The reported signals can be viewed on the Azure Information Protection – Data discovery dashboard. -### Azure Information Protection - Data discovery dashboard +## Azure Information Protection - Data discovery dashboard This dashboard presents a summarized discovery information of data discovered by both Windows Defender ATP and Azure Information Protection. Data from Windows Defender ATP is marked with Location Type - Endpoint. ![Image of Azure Information Protection - Data discovery](images/azure-data-discovery.png) @@ -68,13 +68,15 @@ This dashboard presents a summarized discovery information of data discovered by Notice the Device Risk column on the right, this device risk is derived directly from Windows Defender ATP, indicating the risk level of the security device where the file was discovered, based on the active security threats detected by Windows Defender ATP. -Clicking the device risk level will redirect you to the device page in Windows Defender ATP, where you can get a comprehensive view of the device security status and its active alerts. - +Click on a device to view a list of files observed on this device, with their sensitivity labels and information types. >[!NOTE] ->Windows Defender ATP does not currently report the Information Types. +>Please allow approximately 15-20 minutes for the Azure Information Protection Dashboard Discovery to reflect discovered files. -### Log Analytics + + + +## Log Analytics Data discovery based on Windows Defender ATP is also available in [Azure Log Analytics](https://docs.microsoft.com/azure/log-analytics/log-analytics-overview), where you can perform complex queries over the raw data. For more information on Azure Information Protection analytics, see [Central reporting for Azure Information Protection](https://docs.microsoft.com/azure/information-protection/reports-aip). From 629e5413e04f63ca6f37b8ef1d325c5d649b0368 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 1 May 2019 18:05:55 -0700 Subject: [PATCH 04/34] Update information-protection-in-windows-config.md space --- .../information-protection-in-windows-config.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md index 092c8798c9..4be3024686 100644 --- a/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md +++ b/windows/security/threat-protection/windows-defender-atp/information-protection-in-windows-config.md @@ -66,5 +66,6 @@ After completing these steps Windows Defender ATP will automatically identify la + ## Related topic - [Information protection in Windows overview](information-protection-in-windows-overview.md) \ No newline at end of file From 9178e4ce729b15b09e800c8c4e43e737fe806cc6 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 10 May 2019 09:52:59 -0700 Subject: [PATCH 05/34] Added 19H1 new policy doc and policy --- .../policy-configuration-service-provider.md | 9 ++ .../mdm/policy-csp-servicecontrolmanager.md | 115 ++++++++++++++++++ 2 files changed, 124 insertions(+) create mode 100644 windows/client-management/mdm/policy-csp-servicecontrolmanager.md diff --git a/windows/client-management/mdm/policy-configuration-service-provider.md b/windows/client-management/mdm/policy-configuration-service-provider.md index a27926a537..58bba60460 100644 --- a/windows/client-management/mdm/policy-configuration-service-provider.md +++ b/windows/client-management/mdm/policy-configuration-service-provider.md @@ -2927,6 +2927,13 @@ The following diagram shows the Policy configuration service provider in tree fo +### ServiceControlManager policies +
+
+ ServiceControlManager/SvchostProcessMitigation +
+
+ ### Settings policies
@@ -4112,6 +4119,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [RemoteShell/SpecifyMaxProcesses](./policy-csp-remoteshell.md#remoteshell-specifymaxprocesses) - [RemoteShell/SpecifyMaxRemoteShells](./policy-csp-remoteshell.md#remoteshell-specifymaxremoteshells) - [RemoteShell/SpecifyShellTimeout](./policy-csp-remoteshell.md#remoteshell-specifyshelltimeout) +- [ServiceControlManager/SvchostProcessMitigation](./policy-csp-servicecontrolmanager.md#servicecontrolmanager-svchostprocessmitigation) - [Storage/EnhancedStorageDevices](./policy-csp-storage.md#storage-enhancedstoragedevices) - [System/BootStartDriverInitialization](./policy-csp-system.md#system-bootstartdriverinitialization) - [System/DisableSystemRestore](./policy-csp-system.md#system-disablesystemrestore) @@ -4833,6 +4841,7 @@ The following diagram shows the Policy configuration service provider in tree fo - [Search/PreventIndexingLowDiskSpaceMB](./policy-csp-search.md#search-preventindexinglowdiskspacemb) - [Search/PreventRemoteQueries](./policy-csp-search.md#search-preventremotequeries) - [Security/ClearTPMIfNotReady](./policy-csp-security.md#security-cleartpmifnotready) +- [ServiceControlManager/SvchostProcessMitigation](./policy-csp-servicecontrolmanager.md#servicecontrolmanager-svchostprocessmitigation) - [Settings/AllowOnlineTips](./policy-csp-settings.md#settings-allowonlinetips) - [Settings/ConfigureTaskbarCalendar](./policy-csp-settings.md#settings-configuretaskbarcalendar) - [Settings/PageVisibilityList](./policy-csp-settings.md#settings-pagevisibilitylist) diff --git a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md new file mode 100644 index 0000000000..a2558d44fc --- /dev/null +++ b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md @@ -0,0 +1,115 @@ +--- +title: Policy CSP - ServiceControlManager +description: Policy CSP - ServiceControlManager +ms.author: Heidi.Lohr +ms.topic: article +ms.prod: w10 +ms.technology: windows +author: Heidilohr +ms.date: 05/10/2019 +--- + +# Policy CSP - ServiceControlManager + +> [!WARNING] +> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. + + +
+ + +## ServiceControlManager policies + +
+
+ ServiceControlManager/SvchostProcessMitigation +
+
+ +
+ + +**ServiceControlManager/SvchostProcessMitigation** + + + + + + + + + + + + + + + + + + + + + +
HomeProBusinessEnterpriseEducationMobileMobile Enterprise
cross markcross markcheck mark6check mark6check mark6
+ + + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * Device + +
+ + + +This policy setting enables process mitigation options on svchost.exe processes. + +If you enable this policy setting, built-in system services hosted in svchost.exe processes will have stricter security policies enabled on them. + +This includes Microsoft to sign a policy requiring all binaries loaded on SVCHOST processes and a policy disallowing dynamically generated code. + +If you disable or do not configure this policy setting, the stricter security settings will not be applied. + + +> [!TIP] +> This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see [Understanding ADMX-backed policies](./understanding-admx-backed-policies.md). + +> You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to [Enabling a policy](./understanding-admx-backed-policies.md#enabling-a-policy). + +> The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see [CDATA Sections](http://www.w3.org/TR/REC-xml/#sec-cdata-sect). + + +ADMX Info: +- GP English name: *Enable svchost.exe mitigation options* +- GP name: *SvchostProcessMitigationEnable* +- GP path: *System/Service Control Manager Settings/Security Settings* +- GP ADMX file name: *ServiceControlManager.admx* + + + +Supported values: +- disabled - Do not add ACG/CIG enforcement and other process mitigation/code integrity policies to SVCHOST processes. +- enabled - Add ACG/CIG enforcement and other process mitigation/code integrity policies to SVCHOST processes. + + + + + + + + + + + +
+ +Footnotes: + +- 1 - Added in Windows 10, version 1607. +- 2 - Added in Windows 10, version 1703. +- 3 - Added in Windows 10, version 1709. +- 4 - Added in Windows 10, version 1803. +- 5 - Added in Windows 10, version 1809. +- 6 - Added in Windows 10, version 1903. \ No newline at end of file From 5f13583ff5b73766b3cf8ae44a172f4cf1b48936 Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Tue, 14 May 2019 10:44:54 -0500 Subject: [PATCH 06/34] Update user-roles-windows-defender-advanced-threat-protection.md --- ...-roles-windows-defender-advanced-threat-protection.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md index ab60042a21..c68c954776 100644 --- a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md @@ -59,6 +59,10 @@ The following steps guide you on how to create roles in Windows Defender Securit After creating roles, you'll need to create a machine group and provide access to the machine group by assigning it to a role that you just created. +>[!NOTE] +>The Windows Defender ATP administrator (default) role has administrator permissions. The administrator permissions cannot be assigned >to any other role. On>groups assigned the Windows Defender ATP administrator role have access to all machine groups. + + ## Edit roles 1. Select the role you'd like to edit. @@ -76,6 +80,7 @@ After creating roles, you'll need to create a machine group and provide access t 2. Click the drop-down button and select **Delete role**. -##Related topic + +## Related topic - [User basic permissions to access the portal](basic-permissions-windows-defender-advanced-threat-protection.md) -- [Create and manage machine groups](machine-groups-windows-defender-advanced-threat-protection.md) \ No newline at end of file +- [Create and manage machine groups](machine-groups-windows-defender-advanced-threat-protection.md) From 9d4c6f334383da0079c3ca9ac277acbb521a3600 Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Tue, 14 May 2019 10:49:36 -0500 Subject: [PATCH 07/34] Update user-roles-windows-defender-advanced-threat-protection.md --- .../user-roles-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md index c68c954776..70a52291c3 100644 --- a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md @@ -60,7 +60,7 @@ After creating roles, you'll need to create a machine group and provide access t >[!NOTE] ->The Windows Defender ATP administrator (default) role has administrator permissions. The administrator permissions cannot be assigned >to any other role. On>groups assigned the Windows Defender ATP administrator role have access to all machine groups. +>The Windows Defender ATP administrator (default) role has administrator permissions. The administrator permissions cannot be assigned to any other role. On groups assigned the Windows Defender ATP administrator role have access to all machine groups. ## Edit roles From 959f88dbd27966614e2401cbea3fdfec98a035b0 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 17 May 2019 12:50:09 -0700 Subject: [PATCH 08/34] Updated SKU --- .../client-management/mdm/policy-csp-servicecontrolmanager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md index a2558d44fc..ec32296079 100644 --- a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md +++ b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md @@ -44,7 +44,7 @@ ms.date: 05/10/2019 cross mark - cross mark + check mark6 check mark6 check mark6 check mark6 From 5480ba46fe2edcc6eac8281bb918b6a8e805eeda Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 17 May 2019 14:52:36 -0700 Subject: [PATCH 09/34] Update SKU --- .../client-management/mdm/policy-csp-servicecontrolmanager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md index ec32296079..a2558d44fc 100644 --- a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md +++ b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md @@ -44,7 +44,7 @@ ms.date: 05/10/2019 cross mark - check mark6 + cross mark check mark6 check mark6 check mark6 From 7e5a521e9daf4492560ad8268a507d2d0679214a Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Fri, 17 May 2019 15:21:38 -0700 Subject: [PATCH 10/34] Added dev comment --- .../client-management/mdm/policy-csp-servicecontrolmanager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md index a2558d44fc..b879cef048 100644 --- a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md +++ b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md @@ -68,7 +68,7 @@ This policy setting enables process mitigation options on svchost.exe processes. If you enable this policy setting, built-in system services hosted in svchost.exe processes will have stricter security policies enabled on them. -This includes Microsoft to sign a policy requiring all binaries loaded on SVCHOST processes and a policy disallowing dynamically generated code. +This includes a policy requiring all binaries loaded in these processes to be signed by Microsoft, as well as a policy disallowing dynamically-generated code. If you disable or do not configure this policy setting, the stricter security settings will not be applied. From f2e71a516fce68a70d6cece5dfe667168e4c9ea5 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 May 2019 17:43:49 -0700 Subject: [PATCH 11/34] add topic for sensitivity labels --- .../information-protection-investigation.md | 35 +++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md new file mode 100644 index 0000000000..562c89d6e7 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md @@ -0,0 +1,35 @@ +--- +title: Use sensitivity labels to investigate incidents +description: Learn how to use sensitivity labels to prioritize and investigate incidents +keywords: information, protection, data, loss, prevention,labels, dlp, incident, investigate, investigation +search.product: eADQiWindows 10XVcnh +ms.prod: w10 +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: macapara +author: mjcaparas +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +--- + +# Use sensitivity labels to investigate incidents + +**Applies to:** + +- [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) + +A typical advanced persistent threat lifecycle involves data exfiltration. In a security incident, it's important to have the ability to prioritize investigations where sensitive files may be involved so that corporate data and information are protected. + +Microsoft Defender ATP helps to make the prioritization of security incidents where sensitive information are involved easier with the use of sensitivity labels. + +1. In Microsoft Defender Security Center, select **Incidents**. + +2. Scroll to the right to see the **Data sensitivity** column. This column reflects sensitivity labels that have been observed on machines related to the incidents providing an indication of whether sensitive files may be impacted by the incident. + +3. Open the incident page to further investigate. + +4. Select the **Machines** tab to identify machines storing files with sensitivity labels. \ No newline at end of file From 10a330b68ef24d7b476f2cea4f006cb04818f680 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 May 2019 21:53:12 -0700 Subject: [PATCH 12/34] content for ip --- .../images/data-sensitivity-column.png | Bin 0 -> 9808 bytes .../images/incident-page.png | Bin 0 -> 15591 bytes .../images/investigate-machines-tab.png | Bin 0 -> 36121 bytes .../information-protection-investigation.md | 26 +++++++++++++++--- 4 files changed, 22 insertions(+), 4 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/data-sensitivity-column.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/incident-page.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/investigate-machines-tab.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/data-sensitivity-column.png b/windows/security/threat-protection/microsoft-defender-atp/images/data-sensitivity-column.png new file mode 100644 index 0000000000000000000000000000000000000000..d979d3e3675bbc97b56774d12c1927b53d51445c GIT binary patch literal 9808 zcmb7qWl&s8xAx$J4`CP_21p2m2?Pki8Ek+6L53XM-QC@TThIgv7D9r%y9Edm+$97E z?hbS3obUT_t8TsbeeaK6U0v1Hd-v|O*Lt33b)<@tEHMEM0RR9Xek~`BME6JN_8o|e zw)D{UOLT|ff|Qj6l#S5+K@YGkB;H5>0G08CcSbnqF}|ammJ0wt((`x2NZ}x%1puD> zel0EW)>D5!YfD2%qyFHK(W7lC{xZf1zQ{ZBv3~Q-xt^w}$m@1t-iX=!v(-zuVxw-H%+t?Nv<4Qr^B-d`RhfC^C)CvLN+QGY zlE8mP!IzM9sy9w>`SF)CMo|iaD($!mnbx9SG*om&ir%62Z4qh;u2r6)g2kF0*RIL) zFi6#c?Z(bQZbkWf?JTin-Z#HY@)y4o_8+4Fv2k(7>RM~RRUym{wA8uZzr$)@O};PZ zm+HPIOJz;Z<)#ZEkJ`%fQQTlLwW?D!w+$ZsG12ojcOvGrvX3YIL;9!4pFg(ZJ6$7e zOWmvLh1inik@XAmdJi#^cFx8zebJXh?#HJ`=T7$)yD!!DR(aKQFDsq?B$yitP=CHj zJKt~=_|n*za)T6{i@S)Uz@gu-c|SEX#Jp|+7gRF&)ei2%zI=E5z3X^Fz!{qMfAUZ$`?X#6{lU$IT00 z>EM}7P@f2un(jKPnOjD*(7QV~30WCJ74$ux_L^XLpB$07HQjF21xy*~4QrhnW{(#IyPEJ^(7d>wT=UtHNMX=mqKe$3sbLC#lKrz)k! z+l#j~^Cs%bc5;y{>38w*%PDx9lrrto%k(#i%}cM6+5o#(ZSvlfJexKUWck_oX_jcu(}A|K)^o>Z&a3;aOElUUc*AsrmxwKMSC zTes)Q3^c3(lnxHHDjufdBSH1a>;6WSf@~mKL!0b868*Xb-DEntf=|^cG#{UvT3Hr) z+9y1EP^uEp1+P7joi=}8BF}4*_4qQrR+POA_43o3TyvhFiWVR{OPpCjFes;IKIi&l zw9lb`P*5fgzZ?~D6A-paj~}`;`_p8iX>C$}_MYPh;i3jZ{b$R!bsydjVvA&cN`>IX zf;A+n`lT*Lpl{+fzVL%T^=S}q9R6XVMd6(vvB~9ATiaNF0yRtUPUKJiG|lZCH*(Ku zp1o&yEc-2`%Wuil;WFy4kH$89J@#r9&C&YP^<%4!$-RpbzZThb>mUT!J_GYRNvbdD zFRCb4pZd69otr*wWD(Fh3yb47P;~KY61JV3+$o^b8Bb_V5yd;eocINfK0`JaX4|ek zu5XR5FS4r1Sy-kvS9>AJX(8Nu6TBx;qspAdrC)jT9f7s62P4w9tsgL}MLvVef7j&V z;!h~$kg$S$U`bxRSDR$q&*${v<(pfL40=t_r2VCoMbX5Tu9?34%iIBzfe&wVQ%Km1 zV&@(k3e`ApfPZrF%GtHwDp**2U|KQzLE_|yH~tu9#WN;BFOq;KlnH*#TCj2^vt;TL z&OWkkZ&7Yx{uO|1U{Uz@ z@w+I@@4+b_4bz?t=I54nBihQ`Pu%go6hAzPj?~M|eJQBf&~^nSjS;kVsIJ(hHa*s2 z=jV~$Uu>-Y1Jkji#lg~>Tt6D*>*vLH*0uv5`D{;pQy(P0r~+idR;|b!J)k`ya?K4( z%!cLhOQq@zbKE=Lv$0vq7^7p@@$=A$1q7r>R!AKxB>5-e;~u@(j;#$8k5FK8Nhv!U z=hV7Dwr(wSCk4*amAQw;NL z+b-C149~QCvuCaSWqe+O+P$_}ch95Y}ci(cm{W_>ajlThvN9`w%ng5IH|Gq8HJR>4!(oeEWMQ46Ys;)^!v`e{Ctg#M=E{ah)t&> zjhpv6w=zvO@mh3;CbnnyzQso#J2kFs%(BJ4X=$TB?^pO%$z4_sbJ0HA|h8xLn15|N zgTx~yOnKN7`6S3d1&dy0949ZUX^-j%8y@flEb4Jzd z>`JBay~ul%NWus(R)vIxf2*lNqM~qok5(n-D^1?Hnl~>gkur!R?7w;Q#`SPnl!l55 zBvGbQA15RvWXc#g<^(GNuQQAKUa4G|fMy$<@__}~r5Zjy!lio6shLVeB`lM}@1H7v zsjN)2Uu=+AsCS?wyF5RSj9~Hz27Fo6?!qluZ%0xT@7{dQZGlcgr8LAk>}^cB*$*^ zIMhFW6|?o3Ek&g=P&rHJNfsEssNe1{D(ZbE2ira0o%wED8POZm8;0|0GrU5((@>=+ zc7%k3s!k8d}F6jkMgEm-~^vB9p;yISt(r~xlj!=t`i&alg3QaMO zgUn3A@&av9qF#}=uvKv=G{6Z1Dh~!=bY%^j6JA@cs?&10ff&H2z2V`wTK&97`JV>4LTX6Ex9!$zEa%1-uG2` zgkF793a2Dl?(PsZ#uIPGt%AYvWYA6Wc|aQs_nBd#bfeOj-=k^0;^;Y=dn5H=tv!n` znCkK{_br_$*ah#~zo)ym{js94wJx-^6E!n@`^GVT;_s!>cFyl{{SFR;kXTj!bCa9RanHF6??L zJItkR+-?t@EHoxh!yk5P&#&3OkIm*IZ9a_@+6`$WUaoLh z_Rw>Q6>1HNc88&Zs3Xsvm$qZxiHuLGYh( z;tkt(!1TDYCsQ>1)VZ!RC0c5O_&60Y4KoogerMa`NF9(2WM8}!8g8J>)ZxQNg8VIH zpoJ08)C8rn?dFLdzkRR(&sSu1(R#FSDnSsA`yOE3*2pIKgSPzYH)61Ewbn&S9PeNe zPN(OJfy6SY`hyt8iJN!Zx7=mMfX_!B@YK3%jgs848#`pbL8b{f{{bfFNh7-8p>}Cu zW4_y$V+r38Y5oDKD8EWJXTKz(Op3yZ*&_gP_e8^RwmU#D%ybsR=EOw9-RaU3e5n2+ zc|VO)5*ZbJ2DM{Wj{nVTWX;=e=Uvb+Tf#oWu=FvDk<8q!(HsS+j|eGtaX+`G81Q0w zVS!^eA|-a1LQXcMPJ96pE~-^IyPY$CHnKXo$tnKQPqQiePzv%a`upu+iU`oQXm~}ge&0H)`te4$9} z;CF`Ha!iNh&XN*6??~vAOuj`rXO(9Lj#sLAFv$P8f(PWbp^?#jGTuR{aN}Liv>Q3` zqL(z52jg+ueR7jqPPnbo@j@97A$?c+X#0FRR{}Xc z7KyXy{oUy(vm%lHkyyeQ5j9)F9?`y36vdq*J*KQR1(7<4vxTT(VQSMTdDqtrXIQ-$ zHTayy-A#4<4B^G`vFTo1NK|ZsGzXda9D<$ZH#dOkBQ97MdY|Tiyg7CudwoOV;A2KM z!{6U8-cd0UsYc1>wMNs3Ix*@@*}UD<=TkF9aqqM{X_R3Yt=TySmwJD`DBK&GZq2*O zP+*o{6#iixd*>S(UZO?jG3`YwSSm`WhoBlI&85CO(-8yhzoPYB0OrL%uI z((6<)dwNbudm738B1n;yW&fQ|jEJ%&`9){5_>D?_t6U@I8deLXc(YL$(}8uK?$+&J z7zWL6=EBXL;J4+=kTpq9kV;wcUpCQ|I$KM7%daAj98tjL_CI*ab4~3V z-uF=5%U)V=Weu?R&Th|u>m8;C5~IMpy_VuCi*c%skX+A#*_eUqCq z_DdR~XiFyb7R9ciJc+v01~F-Jv)!mur+uR4KcIl9=T7TqPj<{^Xj5zJ&2tvjN>~|b zMI9wK+bX87Ipc??nED0|LcpeJv=Bb0&8kI02FwyvMfa1-E{|m@M`vP)JiM4(fs|6n z|0H-g`mYZ8DP-AcieF^y9!K`j0cbaRzjNwi?|SEXPv&I1bLp^=3l|Myb~gOc)g7&u zLQMV7uwT=vZ4)e~$X~lpeT_$G;BKlV?g?A@{$iv<<5ESM0vx}WzmRVZi7vQ*7ol+L z{AlMz_yaR!fk;Dp`56~VesiuNyrp>gEF|-A3j>>L>CX0^$sb6)>v>Hf>>a+|Kl;7W zXn1$VF5~{$Yn+m|EdK<>Aq}o8`B&W-mNDSHs|#l4~5n!$6H27)yXEK7c|qFXNT{orrYJ zfnBHd@r1t_%MZ(UnA>~2b52Cc{ontcd(qe#o&MW0imfupjY*>UN85`!ZdkeWww&|# z{PPF=vy0X_a-DC#HLiv&Ni%Et%2y}*gcC**XtGz%W;w7|&5o-4FGyk2UF> zdVII_J}Hm_!Oi&05W&s;ugxkBrok-B!KrV+VG)}P8dm_BqCv%gHIt!UAsN@#(nWWz zcZnt|I6%_qPiGNj*Q^m$kw*=HjHh6;zflMtDMJCH|CNMf!Ti3v_t9#Qt*oaOjOFZE z@W+7DAN-GyQvgX>fJdkiqQx>a8L^4mleS!A^}Z*qOno;jp;E3i7+&e%ru5Q1qU?%eTfvN8HD**+|mawK0c)eKNNe)WLLG=T>vPuk}Nh`Mu+ zjDw~h>i!b9a(AX&LD5o#1>0MefCf<<`cL++cvh>yWIFydUbjC+Qzq&PGA#xzgt6dbX{qRX1n*h?1t~ zmlJ*`!7+2mv*3E#3~GR6r7>KZG{GIa3$Z18t#;<8UpQI#Y-!x;rt<|eZC4a^3vUa-mW zg-8&MVsYmtCSuOffsXY5A))!*k`3EmKpersH>)h z>qGZDQU!A?V7_)pcDIXw^F{=ArEFc8++$|Dmpjq>pqIFeruKnpL2r4{4~@eS%!L|1 z4*O`+N%4CWP5+!Y7tLHZ+;*p5%OaLpfYcD&EZQ>OINr@cz`>Ie5HiJ(QHcL%srXpM zhyY%hMeX?FBCIhHDzB+sLm5KJ^A@^`DMI#`Tk00-SO7&>Qxtsa><9z%9`PjjNpAJa z7oz{$;p;Icj2H53fMY@B(_dg^_ETw^c>v7voDQJCD55HN2P5}$%lQ#IM+-$@bwQ>ajU z-Eq~8@wcoIpe2X)&zx?n@jNqs!UsdNi?S8{M=pt8Rk0T{`}PT6p7MkCt1$RUbh7o2 zffs4@Q)G4sQ>Er5&YY+!74+tN#AJY)feFRHYJ#y&GBF4=7FhMDg<6J!`%~=fK%bba zCtY+5@f1PVAoHslGJS|4w42KTw6P3S%#kk~?DL;?tQz!Htqe@`TfIGOPg5k))6+|G z1I!Ut(02|m%+EiTIoX-|W=8!9i-q$g<|o;FRY6i}h6>^#+E=z;<{QQUmAPb-^j4+- z>1bcMFT9v@4hwZ}=7WAg&3j_Q)5$Jr)UWTZPn}D+JJ<(v3XL(OLecVyF&|k2y%sgp zI07<_$1Gz_f$h$}XsKyx$|m05|LU=v6f3-dRs!VeYQLfURc4jR(6K8pOycRsAA?fT z<^)6nN0MXyL`X_b-2{u^AbgBNvf=yLN|Te8i^CPJeT`)KzvGk~z=JY4?6(9irY8O4 zOP-5vOeVr^UBg5uHju$MyjD{Ck*Tn_c}Sy`=2v{v58`>Rh~$Lb_YyGhG9WRqXwEbR z*z?f1E$e~=37s|PZf6z~EExA^&_8}bl}ZVLK>tvd5FxF*QbNB)2y&N@=_+b60cOYq z!=UyX;NbIKH%C~>MX65x*Xb~sq*oE76WE$M1!@vy`Dl$uJ}Z$GcN7DQW*&nSYwMFA zU|&Z636bkfutITi6b?}$wS(!n*6|5$NAQRr8IFxfL$3e>#M3@bwSAEN*4Q!Ox$w~zaV?5=4TS14{l8Ak|0-=i!T9y=T)W0H zVJBfwcjT8 z1&j6;ogJuPaDjlvlqB!Iy%M-TG&46&!ZdJzj;_F258E{?CAhbDQ(?byM)f%55i)3%FK|LdCG10%u4R=?t@h;hiS^ZSQzix z=H%N*;YA0^>aDd`Vh{52jr&V3^<1c%^K&n@HZudrAnnZg^IMb4PCoxi;u-0zShNfg znIO9uHoJBBH%C{*0&d5R5HYb3V)%OnUyTju2FBoQk9|`wP4XNBv@3O10^=Cs`wJ&b zsE>1vYNyK$xMnhFqiR2N7>1s4$$X_UwGdylFf|niU6$%JcHjCU9f>Yjj)X^~Wbm*X zW&6Udi9X)4n&I62vDUiu>sY85&SFq!Z}29^nX&cPlU_W&&k2xvNZBP|?zkDOt=i{P z9cBk*UFPH@T^i&h9p-awF#L|=plD+}pkHnX3AU*pw%zTfv&6_~rXWiybxt-WLip+Dcxpfc)9VZemwEeA%modXv6%r-ea z)OlM;e_UqX!%+Re{Y*T;%b+*;+iEKZi0euH2T74ushC z2ANb8r>ysnAWbhN8c7bwuhwY?TWt-=0?=~9F%_L7oQNblz`tuNfOUVj^g5&bo&rId z1!np++x0+^>~#~Ir)xpiyn!7v@==ks@I5nv;N)Sk)h7+DgYL<`3;PSP#TSSpqmHF% zS-7GqgMs@*gs_Gz5qnRrU1LOJeDh3BpE`l_tAZUTqa$pCFvaq=l!rPz;`ir(v368wm z@X{hJyNyHEA52)X!OlCO8y0IO9j~+76QtNt!<)>Mb6C7NBdEOG}XIpYO;c@ z*7yOup&@(kx`UJm{vUboDxeLWo3E}F;ohvqBgcTm7FWFkvfn~xUgDjV-EkyQXx+j2 z{7rJpz-?n0TX&ff%_;`l{c0o~|EzUdr}6ATlEhQ@J35_Zp|V?1dAL94rDhWPb8siQ z8gWLu0Ti%3W@q1#*fqp}UOdX6=4wwU!?x$I%kBOpFuGx_HBO7!JjsYzTm@ia zmtL69NB=Hk!{bixuD|GsLpL;aC+hbI-L2{?7IsZNZXY#o;`MlUiN;qG5+**;JQLt| z`fz#L;)7NLZ>%pWQ%VZAJIS5PuOd&wT;g&HThO9qV>ra=JC;aQLW@=t7cz3op;^C;}zQOro7W` z%(S{w-`ccZ2wKW5-Bj}O$viw6q@&_Wjj`$e+2t1Yq_5Vf@fb-60iSoY8ZCv`w3B<# z9Tjd03huDDKsdWpehzb>Ab5?a|11-*b}y4pfk z57~_q>krv8HNayw{S~WFUrp6t-&n4_Ee^P+bQ>P7qO3w&-+9CmXnG0r^1ft7`T%QY3@hiSA)3%sHn_f@(r;Lv=v^E;eDuH8JpL|n(CYs`usg7F z_ARj1QmZ2vuBin^mjR8%{vDSi#Aa66JoQq;cF-6`7o=pcWuz0afwT5KA=!j^0y6pI z>+=q$vT=TtPy#a_pJrcG6l+9RzHQ+F^f$6?60P+G3}(jQn8HiNk`SN z1H+;fi98vo20%&>JIPxWkTt}}jEs<03ta(1%41HW?_N<4S>2!j0nE!adS2`3TVR0K M2qoz~Cxu3go#t9P&6>$je#Ba{>*kr4Iz0vuYv z?{60QE>k@F*)Fl_8|r#`ITgI>np3YETV1sT2lhB$2tOfy^1siXKCJODsHnL2?AhwN z@6zl^NKXD5YSgV=1k!DFd^|#k8V-?#`=8peGz^CgyP%3%bm+FWksCzf zzP+y9G{4=mDxEl>Ty3dKO9x|o!ootOr&Zc&NF?7m*)9GDyn zdzXTO0{igCV_8)V@XrNScAU}e*u*#1BuIkXmZpp~t95%*00F71fSZ)8f{3*#0SFc1UOa7hWnt`r#f!DA+(-atWy zB$?+dve5~d-rZjo30pNuvi>>ag@bI-qtrZU4^j$lpP$Uvv0t`2U%%`9`v)e3+WjZ=1F@ELVJ- zD04a3c_zplJP}fWQ?H4nSkfF|JzUhdguFa7g7ci??TK>d?dtU9l%yoOG_3y*AhHai ziPNFV7uUE4VLccQ2s!x-b2D1{7f_e}qsNbpp9f|1a@F4xrmToWeLz?+<|)%2B|Sv5 zqtMLIfeX6+@O@yHdfI7g`zl5z6AHL?97!~HE+jET)Mc_tl#KF~bk6f{x;>^JGt3Z8 z-cpCh(8ls`acTg;t?dal=zJwn@bN=|6#`+_zC)0Sx-jBiPF%4X`E~hCBzcTk39&9a zD`(1XwKxc87nK6~`Y;-i54+0GpBob1Msz^xjye{_Su zedG(x$ii&PkrRpS@{qRtGdmG!C$cf?OqLGn=~1=y^o)hyhT1{xJxZ-EP9Lmj(jMm@&?@5*TG=m2hx_cG({1)LR^_{x5O^=|3jfAfJQkl8Hc- z$2AN0ok^~(-<7p*Ur2p@h%5x3@f^C}c>Nyl&?%Sxk#PV}+ry{{1RJp_zqRlzkM@Tx zy@)5@Ou^{W0XO2Kq6v08P8j7ytx84Sn4-3V7t%ZMIKL(h$3bpr*~>M))Nu=|0}ZiMz{NY({I-eaB6 zHyyl0Z+%)O9Wyu?&YipzvHPqn4{L0zPeI@9Mt?A*oQe@Ka)WV$9Agx*Dim6eQ&ePD zkhFJtW+^h=nv1eEOs`L8?UEF)F?$`(xyt)={3{_vJ@PutFGBP1-(8f)ePOF+*mgS> z5$HYbVddBx%^*GIdwk8MO+KFoSH;Kw9hXs85BOG807uKEgm8L0t6r^cAI z2Nk%1z;uk8ODQC{O6F-jrM-C8i;^>ag!5#(d`EE=OLh5 zOchjZ(H@ICDY$(jCxf-Q=`m?1RA$LYZ}z){J1rj*_nbz0l}rdIk}15~++)?v_?acW zd-eYK_Pr>rY5bjQOx%~6^+@7Sh}3$g24b$g_9}I3AnK({>2)Kc!ac7MNp9UjI~aF& z!fomvWq01Vtel8NJ%1I}#x<`RaC5>>sm~Lc_xcap#|MB7F1E_C?k$e<*uE7gRZceu zu1chiTtj8FpJ!(6+ey&*5!?4gChPhaI=Y0im6SA}q|H29(ptBbfv%-&-0zrwnZnv9 z;;_YyTolF$2_$jHT;wdBfE3pnDOr?qEU|5^g1q=N6QBHZ?9!|)TV=g$T2XTT0qn!Eq7~km`uxnor4%s|j)kN^ zcWcnBWgeP9lo##ZbQzE%1_o&k0lbR9+IWpWL&Bybz!_R=wBQ$_bsG6#PC%2HD{ zY3L4aRm6vYwgWu85E+5U%syA%1dd*uhY{a14mriLf?PaFZ#_UFt89UXZPAs?Wd?^- zjAGExOZ?0W2VEQ)$zPUeasU}VHn!EnKh5*)U)TFi5B)6{J9(Y4QL~S(j+7L&x3m9w zhCFH`(u{qnOCg>ZKdeHSL4Rh|(u1!AegE%Ah@#ZdUn5C>`h3#Nw7@D2E34cUZM<9l z2Q4=_s-mL8TTN{tUsFJ_$$eqpw9svgGEFrSQ{GjWt1|hzhHy;!p6)D-V=d>CkXl+16!PbJ{lon_BCt#=5@rl;&a-MXj`qe^7MK3TpSeJK% zwA;6(0F%Wi8Da-tYp-T1UZ`FT2l1dUC~ZU8-Ay?lSTw09#NctGNWNTEO2&%XgHH&u z#bT4e1S@y!nl>rZQqanXo1ZSfA_Ycv7otgroXQ+c15<}F6q6%Ti71uc^mCG=uDW7L z-%s4KJ2QR`MG_6rB=_O@JXpxCFzUNwG{Kt6=YJhwn-gJGAtTTIu2kQ&9tVn&ic{P+Pl-mk|AJFsx5s4axs7_>_NXc7qKB?;i>VW! zcZD9y^!wzL;AEKvnwY}--i=MHf(cR5HHfH-3cEat^N;3oCzX`=K~d~pUq*lqc<+ze zVhK6X0}QGUkfm#+_bfuywTz>2;9QaUw`ebWv8$4oZ&pQNuAOPgMzzC}!9?f*Lo8NYnnw z^OSqKu!)Em7vz5Xrg`AfA>7M6GlW?`7j*{yI)Ll3F4X^ITPD{TJ|3ZdwF_~i>e~^& zZ}9;{ZFD025?eO*Yy`RSNY(a`US`KW(_PUwlW~4WjY74lN_eZpI)qT{%yPEzGzjXm zOuJH$3F3I}V&AM3ee3De9ZO$hzM5&?=xR6m-p(%U1oB!6RMM2U!qkeaUTomdr%YiAgo(GI*=Sp5kyk)k1MrcAQ2 zE~45KrWyYHqSS=_jh7L>I0d_mmQKP5h)DnDcB3+;Ggpq(_aw)QMJ+)=RSLI@y+~VI zB_iTQ1VKFdvLlOfqiH@HkSgQ0TL!)@viK+3^lgrwu3~i1@j#7ouD&muJqqA4_Z3zx~#~c~XO0ecj$IM(F z6Cr>>Wj$IeG_#89%9{@NTu!nCG@)rfTfVZnF4NI<<1=^J}w~))vL` zhH(`cQN|eea7l%_-rAFiBZfl|(`e}ENpKm-X#Y>!`vI3WT}N&rN8TKyetwg)2pWB@ zYK>)E&QPOV7M%f1%oBIMe&%UBoH!%VPf^3nWIqQ@($RiHSmfXgFY&0q)`5^Pzi9D? z!hfbG=@0(&Uk-!I0inR2D4?D&3Z0y}eHk;j)Rt>e^{v~*+oSqhi95X=2;yy*4>#8j z?dSeH+{aAh0_8X{zcnb$qlcd0$Q@K0W~6V}&3pN!Z>8Fto1@8*BR7!mUh;zaO|X;Y zon&*wAK8KZRsM;SpM7J|nI!fQ1;~#R?>P#(gTNaFJ2EoCYr=ZW5>l@81f1`^(_U^q zm0oPVl->xvcHOQGyi*!@JG@U*Lf)Z09-kd2T$6kPl9QoL^}poifWSG_!G%4shZ?Pw zci+)ZOX8yj$RGIu{$CY)=^WKbgDcNy*Qp%(lPDk8A z$OxeFm|~u0;=_tVv5t}+Gc%y@ltXM#9Vn;{bNL2ev)X@Q`ik7S{jQQAFNJ&Ap~B4) zr#l>)FGz+0PiQ$Fk;l;-VWoD?T=CbI7fNyc9TQC{;^$_W!|$Y54=gI_zFyOezExa~ zy4oo^Vzw_?>MPSsCw%?Exj7O0dSSnIsQIPep>rFBg3{i+O#BoNzrjBX{p}L5Yax8s zN(dp(t~`+Ermjda3vv7snI5~M-|9sUh~Y=ke6)Xh#?Ka*b(~O@k-nDt49Mg$@7S(* z)IwL15Yn#I>aj$OJO#cn+U?&<-JSPqzA?T~)%NrJDTV9u-NN7FF|>drpw(oGUFbiD z$>^L6IrMtG`YV~XUh`eV2j@oj{H#1}m}4Oa#~ox~p~t@QmaP4)dHD7X16UX1s^VVt zf(e53NMq#w++ePe`u-KmZZJd{P(gDpd7-p=81v>4u!R@%K+L&cf%V}V8?4U`mM{Xdb#! zIkq%gHZMNLde8)7?|cMkk4gp_kdjRrOmlyp(yX)4qYlnOqkb{?nr0p3n5aDQ3mU`z z*#}GkY=km-6L{hA54n9I?OVIzAp(0W9)`BOl1B}9qVWfSB+n)J$w-R5!Se%z&)$@T zOACS#AR{;QsA+)48C0 zFK~vAM003H%^f)Zy6P+Bh6u_0m@QLa@{ienA(pZl1yyltrjL(c-sI44(58ot3&V9t*Ia=jYGxX9)Wg7}<=EK3Yb+Pb7z|TMF=^5%>t~-lTWc zVpZzHwTt~1Wa;~@ZrU7>Jo>bze|lWd zttt_te0_7LuL_ywA9nVcG+7$ss8z&d>kiq@T)<@Yp;Y*iW5^I(s+hVh~a5_R)< z%jo1(tx;S*{Pxbfn{%MxhM(Pz(|SXEaT7{s$Cqdu1%hw@Mei+}*PC68;NBpbKW~JJ z+J%B#N>tm%eXsr4CS3Za1~6MT(l!4UsLgonkdAkZ0-pfTcv30@7_-b}uEA1lCIH~# z!q>Tp$>Wj($zycQBJR}23-#_=U6^KpMY(s1s(n8Lbh$SwOqL7 zsw|^iOn2(sa3%KIj*I;Zy?04R+)kNV1{nn2wMyMiqC2$9vRCTVloqTA@5koaJX2Rj zo9$X2;c^OK9aH0ZFvvgrwxQ*(u8NAf;=LYF2}3b@pJ$+2q@mw@t^GeMT^Iy<)dT`D zjRZmNzBzqvjP@#l_T(6c^5z_DB?9tmYJv>mMEIwSlD<*qv|`D*W{%tu6vr6ED|{?- zWIm_3miVg{QSjaEab`@VWgc<3eM7Ucp0O(#pf8d3QxP&$c13rYCgN5$qXnT;gky_z zy{n$i%rAtF>SrO9d_-pjSllr?4Zbv{?n(&9b^XmLcSTV~ zRv~Razr~3z|7Ynv`v*Be2D$b0@3|>pxPQT*39%U?X!J|tHz=QscjRNNS)V4@ZzPL` zg}duP@RT$6B#b$&5=pDhxtnk@Gyu`a#zyxZB2ly)y0dMh;vk9auYsp*{rs@}86e6i zlZptHVSkEq0!O#aMAk8OHJwsjUvd>?0C927O;79GprW$EVZe)Ot0e0#C`(80Yq$|q zf-wv>qcAV9Bhlcu6`r~mo7<%D+5K+*qu1rM6>k&AAcIWrUE0Unk}JobF}3m+;04u9 z*i(!Y9)+071=hd)%%j9unBDq~_mJ;mKax&as=e|3I}jaei&2ka>H1BfBwoa9O}O!q z^$jUEfE)jG0CUV|vNUB^N{gw90q9U^%LKD#5bCJ_V!ixI-X4PsFy45wd(6h>@spSz z#AYDx8*SD!OM}`qUYEZ!w8ypME2p#{WaLgOHBEN4vZ-ejFJX7- z`Wxn`vX;oFo{k$pgR6*C64e1eP;6{$Nw%$1N2n&VK#{#+bV22BahwB9?rio>#lO*F zMl)(6O#?G={jM-ZT_fdGW!KKBD&BENcZC9dre>u7HCLCPC6*eT)f}+u`mP}eSk=2` zk;m3_PeEL<#G6~M9Mi4? ztog-`FV=k`s#g^)4ox`}#j6EG6bu5{J@f>dRDDCceYuiQ_rKMTR51SOEynsp=gmY) zMH~UJf4AbNhTR879%i5Rd2K6VWmtL6?j;31tv8$KqvghezRdQwaZB5^2?a1+8T4zu zWJZe`rwdDnTc+Lp8gw1I_~XI)4seX_hCEDrstboi_H~6R z)Dy+i3j!~mrJz^h3Zi_sc%a)#0*_!REli@q)G$ACM%>~ZQUTfhC;hln*~fM*$?Z-% zzt1bwqmVU->E8AMsILPrT|ZLBTtde zbbiv9i?X;y)Iox7PLj%KROaBT%Y6|=x#{;Oy|&JchN|@mndjZZD3zgi@eT#uQl8Y> zqO|oI6Mf;_ZqOGeVw&QR?o>9)O;WTTCO%1`5*{iq_(yuWi<{w*OD;eX9?rMJmtu$C z)!$P^Bj{9#G?Fk5Ig4c9F+pAwROy6r}25c|>p$8)Wo#KJc4deyoB7qg3M8Y25(QE=H~CM_JGs;}{?Ez~EeN zx22gOzdYQ%T||$0oSdZDFp@_RGZVZ)3wm=mz_0rh+qzHgnPFhU($ooAIm>~y-`gr) zoI#5$|LJ}3TrJ?g!W%RY$s}BM{wt(iDWLUS5$T`9H!l;?&~!<9iqu^rbaOiTO_!Kf zZHsGZ;dK})aU5K1xbi<-pP$~`W3~K_pZ-HA%^kf%@K!-FzU#s#_d{>j>XK_l|2sBL zi}Qzx#cVz1Z1p<43^_<8CW=q>C|mq)>AtP@b`yH&MQvv2Xwt8eWXR3HFB5VJQE=Wz6Ls36iEkQ}Np&+*-!)7Tcs1hk~u|NW=~=~@lW-KVSSBj0urtJ^s? z3;6&G!a!mJCOSp+&P!B5^Yr1J*C0G^@9ESXn&r#ehO1kQ^Dd~H5ZH|7$6J_l*bI-- z5jSEVVPg3$eO%ks`QSSXxz6+ZTuAdEtFf;^nfLD}OM<9-`T6=M)`UHv&^G@MN5CK$!9_NEye4zV$Z>D z0n;rmw!6x%U@fNVI27)-96i{ARoUZJe=UXQK4;_2)8o`}hpc8|r@!_--977=KDmbR zL?-9HU>_VaPF5%(yv(xtHgGvU)xpJn`~(38*$86hYaZ@d-W>1U&S=wt9GpEH@l?Jx5dit@_z0; z>?=hvnf!srYrm<(H4}R!$!WVM>i>7?lFsdzyd-8&6Acq7Tme;Dz;kIMcOvk?Lr*jN zlrz$q4opKr{9hMI5|1wS(_ey%yy8%7c@GxyX838Q=9;Czs1f&ZhQ*4|F22-iuEOP( z?bfJ3fyiJL+Dyr&d)3Im#+Z#TmU(bsS2+R!%a&v#6Xb7+=fbl>yqctypxL{`mcS=p z5z?irIp((~Z@kBguhAPO%)xpEK{?<}5^d5h(#5x=F>l=S?dtw?dBV^xGUUvDEZ;kl z5>KI_tDgw6hnMUVbjW;fQPC!a3%!H4hoV^9)fX7m> zcv@UaG(iV=tVYTkCGBMF?aifD>d;@2HSjWt=o*-R>qiNG(tom5G&Fwqr2lus5ly*Z;FGo>5dj0zuuvf;!y=~1xhgyMHBsU2rZ1{V zUTGgEYwQmk2gGT)&eaDZ-_b4u*0s6Do6)2NEmwZ9-U_;OY6fMRt! z_m5Gv5nOC9$pH#+aD5l4>WwDtMtF#^HgrmmlDO>Tbp)#3Kn zo`Eqx6W^Q@2MJb(pj>HGxgnYGyuzsE>HqW;MYJ(Mq(5?^4>9O-wMEw*hpEEeGXW%Z zhpk5`5%<8UZo&D|R69-`)qCv|vU_v`qc&a;Xst9Uz)TP z%2)%!HARqcR635@Fg+yc3PMrgw@&`9Xu~HQk>(VdII#AkVwDf?+pM* zNWUNlf{8eeZBml!+*(}u#dmI)D`r2|Oa)u0biZpcxe&MB+0>9xsIYuKUuabimqW^# zxWlM&=6mD@&>E;2a(h1);Dy#-+lhQzn`CroHGH#=YglGi5Uv89r604BwO_zQ8p5;3 zSR6Xctg{-ZUZIn4us>l$A^IdM_g{}o5Wi`tOe8EGh#Q9E>CO$;I*YjU)_pFRx^ z>Ig+SNF^`xcl%svw}X`sE2=YxD67mX@#e?0cSUG+WP4=&bMH3^QcrgjIWe(Z2UNMa z0xo=N*r@Mte#zaY3RBJ@lWxDQGw#w@L)`*T?BKMb@r4Dcup;c8Gj{~;JiM$Y7O+82 ztL*$|!e&+gxS8b%g}Mgox0-VJ;+^}1-cz)A;q-PjYQAh`U{eP|1=rRvEpaDB?P;GW zh_i|!W`WZiSFA(9q}~n=5#EYktX*Zh|{t=}}oKY@$YWX*0x+V&( zb|0)Dq1B+3Z2PK#k~xbaGUcp#HMP*)2L7j)NXxA1nNv?hOfIXg(`2%2S+FH%xD_vt z!iH5)HBZ#)ZG;xUp-+V>=LUv1pD(Wu0=VToDxuQ-bHDYnwik_qx zsz%0@5z83z;I?dD!s45_%Ig~c+=WtAvNbS5w{Jx9?b3lHgt`(cHdn*)UMXw;+LSxy zm)2x^(Ci<@+1|x~5W2iXSD6YPRk;K{A!HLFf873ae*}{)yuF(B0o^@XdMcK5S(~t~ zLWFi%__`xxtv14#mEh0TVk%xT82GdtdU8EbCUFSkuqPIWpj& zz26*F$nw3q>989abm@wUA#VyqW}oM^3NRxD+XFWZNIojtGo$iQr`tiU|T3^kNh?{{7}v`g}X;D0A$_?Du9PCwc#S^9NF))Ggv%K@|N@F@fMi*^Ii_a+YC;-S$d2 zjn~Ot-jJ;ZbPhvhy{>W$kM%@U&H1IC1xubr?CzB|{r;}fcQ3f3!n8Uy{g@2dwDRhB zinJeq?*liFF0R6={kh=CP?d7COpCT}n3+MY`J`Jk99N)BAc=+^ne>_!9Rc4Q4EcjP^9Opr2bu@t-wo--p?p!ea z&j$F*N2)=QYjk*$Jh;hR)PlDY-aX^KU1?!bgP+A!SaLaWrRNU>)F=jhqWTo6SI39X zQh{FY3=_d-CRe8>H*F-v$-3+Uu`|yC;#Svh48w~5VUQ1K8fI1${oiqfp5%HR?c~Ah zho|u+Ug+c1|D{)+Mcg;~MP?YKOZNXC2$}z#i~j%0qW{y?eq%=LyS8m#KmNUc+`ev2 zv1%jx{9{6XWBtgDyYJ8|Sao zdJKK`=Eg(YAr(BZT$oq&#$1K$cl>>9+AJN+QRO@ojdoP6j$HV>+AV9n#4Hoz!&3t; zDwGZM1^jFX=(FOcU#wv`9KEs+zRM186d6ZXgvBS}g_JF;4Gf5b-GyP}+(@7!(52|@ zhOaV7LPpWy6vHJ|d@#OiQx~Y-e-nJ722-dg@l}PyP>@_FHc(t*4Wws7aaO9MpoZs4 z!M?gB(7V@@B+l<*+=BniA>&Tklu8{s1J=;5B6DRgd&W-#vYMI5%lqwv)NA5CYH0eo z!u)}A!jeCq=g)gK%hq&jJN+)M)(qGt#z&GOhM6Z~|HrpIDQe$wY`l9(AmFmY@EQ$8 zyNBq$&~sg1Xvvo(a|+C6pqMMg&jV-AM$UBtGxl_I0TMtZx@p#)sME5&h|hmr{2>Lf z4qDj_Nn#2#?+)cp05L}D(yf}GJXM}U3|-NQ^uLNb|K2GqYgTv|EM6dS-3L+t3Srq1 zHKN(lGjxJoD6VGRi5XE}{Fwd;cs5pTF{R#K`+82uj()`9_47<3c4&H)YqpRdL3I+& zBOF}MpNNDbq-$KH@d>vs{U_(8XR|-HV8LUSHCKubis+Pn=z_;o`(7q!( zk(T7+saR`DjnqM*t4dKO1KyJDd%w`E7KiPn;^~VsKFJyO zp1{m-%+}O(Myep&ofTzLfB5ao9A_1se`Z9TKO`c(lt`SQJ?=guY zX#+NP0#|H92WTs&X2va0&J_44w)f3#D|-sXsL`?O$;7jkg>{KcCa zw@xt7gmQd^(?*8@}tz zXl2GlqNH?I(=PilPehG<+@xJVOZgsL)(J&N5@+k*#;;E==MHY|M%IsXo)=JW^@{=j z5XE7awQo(MNx;Dl4IDzZ4C7T^;gnFGgo?8x!3IL(&1L<)4BvO>b(Nb#?{p5s*W3rUxLR8z4N(2fN&2)uk)e~v=jXZRK3uKLaspbj9l zM2;S<|4eIjR=Qiumn!)ufH<|S8A~{(qZ_ z;HSi@rN^91+UQdu#5>wkKHO=@Uk^e_9Ilu%mOFN%6UZO*|{q(fN#h0Y;bB*4hfy@4N4n)xt6y3)g0hi8`kRfuEt@HBJYhe zvxfeikn2KbubelZ$AuOx$C>&5Mhsj(bm3Ku_cqaaBDqM{{7qEo$O3$ zc?S9v1%u~J=akjv>81TsgD#-IEyoFY38*RNp8zZoc>1pWHd&GY;+uNqSt&rpaH10o z5MMbwN>bdfS9thSZSd%`bh+HPdm!-?TFa4NPN3*H|szx z>+g@bLP`dBmI$Ztn9<&YNGKabU#Tb*F;N+e8a?iykp=TA&m};Gry+|R`R*!!h~Ew0 z?Ufg=lo#FQ9tHzqjOI>nNlGI6Sg#1Kn%sln~FC-BoB{m^J%X|*l- zaFzXqw;K7po1&@iY74g6(=hn^=@b3;%IA@K9q~$=HK%VRAb=7j9WGLiz7zn*=}`Z z__D&o6OPysNazIAa)Odog&I+a74gx>-m7B7V}BiqhyglF)0tbq#A9WIywy{S>nnyz zyp8=K7)!DTcW#82xATkRw2acIqb{0}Rf9h>0F_%^1qh&_L!5Os^q@xK!hsoH%Jk8r zB}n24AH{zxR!;yjF`c}msi#m~clg8_dfA`aQBUN;rf`{&{=`K^E35eXA!dWmd>D%E z6%#jq?_&7y*kN)9_tQm;AMBDBJPOL2uq$$@*O3*4?WWO=_*R)W^`bhs=9u%rjptq% zp_+|Sh#kQTfjH53i#uZ(JG9680nMz$e;SU+NMM$Aa(^DYNZ>tZNvG=G$SDX56ogHh z02P5m_LAl%AXhx;w74DPXiJmtJsSURLCinWV#by6XYkWz^>U+iE;I1(34}#-=^Ivu zw=bSrlS1I}|C13q_ZJaM_{s_axw(i>P(ZpGayN~Ig&tVQ*eg==ja}^qR#}J6a#jT-{mW3kFYpG5q97tQ zsgny(5NCMq;u&ZK{b>oF8vAg#@8>tyLwEVA)^P(%Bj%v2f8pZTF0 z-k9u~%!T}0yqxwO4gpifopN*Ne5Lw%@WWLoYLkWvzJ2g%fK`6e{eqn*iGan8x#3I*Ib48P^b9<8b;p#h*Yuxa1??)> z%3<^r?qiOxAD0)sQosY73{Yrnb3bH2(dnrHZ(|}>Dx$+Gppgj4Ra8ZRHnWo=#dQ;z zI0OJX1F~F}xziY!_4(Mrm4lG3-98kL|CbN)BUN!aj%_70+-bsV-SkzB9mqMMyzf$12pTz~j} z_T~ODg|By4oeCvVU;n{J@WXS#Iw?K={I}G~{_@v&qaRD$)_Kw&U2XX&rMTGMx{~mH z=cwJT3#FV^WsQ@#&WzNHIo<*2IcHKkN?ag&y{{8TOt>xNHKI%|3+e^ObrH*0xB~{& z&SU)9B;8^HGvbeiYGldmiZ{gS*=A;;ICa*+Pa`hF3K_<$BR`Xq)+%Qs@G!#2)qReA zqw_`2HEka0bmSAS_fvtM78MzB`eO79zkt%bGiMg`^)({%k5je%ftLkZ-VRvif}Frj z!{h`H``G5w4cDwfG+^WRbqTrk6uGuo=5M#NFW zKDYdCmzflDUjpJMcX{i_>+BcI6Ncjt_?pq?jsXtn;M6bQwAeJ zLsu5kL?KlBY3G*)w>+DrU6t5-9Re{!lO;j=&++bP^VR+KR0X8FW^yJzOtEFcR&oSAI6neQ_<<+@&&?O`0(lCT1@o&u*|~!!K!dA7JQAH{8EuhegM=M`&xyP)y7U zzFjir${k$)#)*ZC3wG!e{<6lxw;Iy$!rF+e*x$|@)6ifohks+qSl-v#i;(9}Jl_5} zxyg0BgM#1~VHSvCvJuvM$GUJ=S#Vk*qVWT2h-Qd|mp3*e#7yq4CBMoJk8yVBrmCQ& z21{&x$VBw_hfi#s1os9iW`xN)xc4Y{gI~5G#rP*Ud$=up6+(2Qm{A1UX!5iq$sPhp z@_Yx7KfRc<7BilYWOp>taMPbOkP@9L%Nu^KP#4Mo+mMl1y6@NWkByMEjJF2kMJAwx2``fTocr7wp!Nx0=pC$Gqwzwb<4RWO4iX}&C z7_a^d9^?*vX%t_TRN%;{%_WYa0q6GH_eyCJ1B)=Q(v%}5PiZg3nbYjh^(NhvCTn^X z(QO+$0>CT$^s=gDbTljk*2)IJ^1NJ?$pX$~T-?G2Ff^tFW;EvOLM$E7Q=KEUNrGEr ze`aCfi@>O{L5`%29?RHK=B$=MY@&IB_3G@rav0eL#)}}T8q}mEVFvj96z{k~63~P? zPG`eh#L_4G%*wGG+YpGcz{OQiUqFI+jkA(Pa3jDv!S-R$LO0HqM@nC-!g;h5ygV6; zVPTp51v>Z7R78Rvu}UV`%+vIQt68)TSv-qB#u#57u*tfjm%G$H$x2t`Z*`w+jBHAw zy5Z0OcgKn2b`^^>Qz;-ZUgi$8TYBG@*qzkMzxcnm$In literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/investigate-machines-tab.png b/windows/security/threat-protection/microsoft-defender-atp/images/investigate-machines-tab.png new file mode 100644 index 0000000000000000000000000000000000000000..5c0d13944ec5d7aa01d60e245ad9e54f2fcf9948 GIT binary patch literal 36121 zcmeFYcTiJXA2zDTf}(tbC`D>QCzO<<2q-Avp^22(0Ffpw zAq0qs2ofMDO-Moyp(fOX^cy{%^Pcy+W#-QJ$Nj#UyJwg^dxyRDTEG5#p0yucv%a)P z^swlrO`G;yxqSY{rcK+kH*MM+yJNfXPET*-d*Nww=#5Keo65V7%nC2IdYf9AZrW6t zvWt6XoA7#P&}GNaO`9Z7{`lK`<;IDnO`9HQbRUtWMQz_P^G>f?7)BiyGT>` zL!T(`VegIk*AM?W3}8F6-@me-xs;pfB!A(bfj-Szv_Ckgyfj%;Ab#whg8?*CEWLbB zzDOPRpNUio_G{m{Aj&lW&Bp#S>_c8w>Q2=gV{N_`^8XBaegXHu^48Pe0M^dzqyG%* zE;#A=G4a4g@bEX0|4f(jW4doXr1WN*Jbd`whN3eGLX)QlDuAOF1t4houbJlN{%b&Y zK{_GH>3#1dRzT8U6EQd>T->p3@LbfI>G@CmA*$gs_kyxvlV2~Nh&<`}{LjFAXsBA# z#A9x4CUio{uJlkC%>{68YuZ0`9 z?aVHGBPs3Jcfa5oh-me<02Yu=sgt}SbZ%%MFYO%2$&d5LuO}umQhl%b-FtdL{g!Ay zihSaq$rf)rI}#jkIq8)3|1dfdgxqLrYnuS@xU%8A$KOKU;JNvK=`F#!?V|3dV%?GwHqf+LMAFfVEDW>WTQrpH+Oy4 zW3~O->Saap#4&p{;3N$}`|}*^Pq%0q9DSE1iXN}*oeNvQ<#BAIo;0lA>1Hk5f=ASQ zr5Ki32iornX?S4yYn_9Iyj|JwXq>ZhtDx49d<7Iuvy;qGauDqZDmNA z^dmt^-O6}N(#|-`(U?}(Zhmhl>l1B`n}Be%R^OnEudMqF<>D*q$gB{-RD70brp4RE zEx#;1c`!fDGK(~hdlnjssB0$I2jmf1@p>tBeG0uNnIA{g!7cANS+{vvq)HC>#+IL^ zrm}4y!&zKh>XyvHjWL_Uah7=d5xQGlX(x4k+})RMR)|+3HvwG6Gu45UDA_#tS6r>h zR;ROcv8>h*_0v@|bkF)V63Xb)+%REo;hRVWEp@iWFlbZ}P3wkDzoKurbj**088tHP z_0iBI!@XNC*qHDm%aZU?oBIto;W7AB-$h0AViV{fM9#QKP3P{;Y^RvnB5}-m)a|oW zla(PW@CdS`ONR73rORsCxGY0rN45sAn@=@=*{OX-G`5hewBkTg9hJ#f+Wol3FxwOJ z@|v>vyZh^>{^bC*K!x6d7BGJ0tUhAxJlp}_A>!6UbzVvJ-8m?jvqpo5uIiqydb`cy zWh(<5!oNO%4Z|P91X%u7&7t=GQ zC4DRE|Ij`$L7=#Xi0I*2^8eA@gN~M1+jlpKBEJIQk%~sq>~3RJv%0ehJ=wKs!W!=F+C|oM@Nd5v zuj~(b_g55X458!_nF&Kp+;J0#HORJKV;lcX>|UxpdbT@bNT4aSo~L!kkBUoGM`Z{!PI)QYuX!XItDbc`BTFozHgvJwq(}9U%MC z-!a9&HRgc!!PbVez?(7V{B5jU;z|vp*HgE(2TvvKO6kJxDY2j0{IQB6A3U!|57yjm zEUs{>#>He&ED(qUn49L;hO)<Nq^Rcwk+X#Dk?4R0etsrFGe|a7jT)9kfUlFnbYI$dN2wDMv1Z$ z&7oS?Z5bV!&@1IX%)t-Z8C~+?S4u<&WdP)l&x^#eUauaAv!uF_CQ(pSE|Z-@ieF5q zZrWE~t;W6^4{~16bOfe1F_$FK<=m(@+_Rd56QVUm;@AYf4{t2{bf~;DRS$N2hRW+^Z*pRq#99E_ESMcSw$w`Gdf;NjX~yPaJ(0mzW(~ed(^cqI#=y%$<-gEx^do(BYs6VP@4@QSEMz)y zg3*w>G4vHmP8$5o%^i)2G??-?-kvpJ)SixH!0eFu5gXqZSk<~L-HCxliq;xOstHlt zrgqDQ?|66PtVcidlGkoj6i&47{*gd!>30t-mFLV0xw_f@OKDN0FTb+bcM*<+cE-zZ z?wd$ z(3W~RB&g$Q#3|>tJIj<~x$Vg1r?sJ7c|=lvQPrS)+6Uh_w}(l_=aA~yk;Su77xp|> z^J~80(?kxnsk0j5tMfgb8eK)XS6WhMZ#wSo;wK~O{jQzrLN-$f{^<*!haO&Cwd?k(a;R_1`gTav5VEhu$K zDsExAfPO`5$)o9+rai)M{+kUQGQYibC;(W+TW%eGiP%R+7M+-X`mu2V;uzLJru0AsT zT5piRCY%*ZY>&NGv8Y=Z$#}ljxSj*4hYdkR<$PP8k4=t+~1kSZxva05z zh4XGI!kjZ_4Jj#A6<3^+7HK;^&sjAmXs!;D6G-_nRZT8#<^{%Z{>!FlWtp~bf(j;; z{s%Esn3FEjB4kT-?woC+A`ih`lZ%DEZ%Sp1JjL-Dh z1a`1{4^wi1PnVPpsj36u5b-O57{3%^W=aVrU?i=%fnpLso@9{tPn!+CGxwZL7@EiH zW0YQv(WWMW8WpYRdRBsXI?s0mGz=?Dq4|nkm4F*~9bOtH7Inv`lhdVlGUKpAZ7!ryH?-Bi2 zK*6=UK|kAKxLxRaXNSOGk&aiiS8TS(g@PRBP5wz9CUiaS(DD>>z?)O24lMes+U#*B zDv|SZvM3P0R?xQ})xx<0+Ug^A#{mZo!WP`f*;3j`AIkx>{*Tj@0-hI|+B$xW{z%}u z{ed~JF!C0H&t8`ybtAXqbI*-2jO@zwcVw@)Z|G2JGFA;@bKAsA66G)BCy89o}hRrEJUKQ@h)Ygp8 zYV{PBfIsUdRKfdvkYQcS>+T=5#P#+wk+g5un&%T^?!*K$ErOG!cHItce-j;&;w%p~ zcZ;cn>Rp36oDbNmZO3*!l)1Z1Uv0Wrp?3-Xh~J%mI{nB4&{YLZaRo1@sQm4CXSTEB zCRavr9_{=YD`B@_Z>A_OjavAnVq325J$K!PQ%J0YK-d~UydrtCK~I(ydR^DI5nJ6u zg~+H9xr3ZD`beW3bWkq%eroY~5CjJhR@Lg;5vbh2h|f-Z~|ln*cUI z_`9(9mwD_1uKP)(Fo3wfWqP6p% zmZ!H?UcuI_^V@I8s-riQ?<==n1KzCYCjf0NLC@eTcUTxBR`I(iGl5kLN1ikRNVz4Hr$y}n*Mm&XD{0) zuB+$84ui0w_MRFI1>4#RpI)&*^?~ap02_*{>Wb6y>h(6#6?K=MHO`CNP@zTK+L`T# z8tND33k}bAq-_$GGAjAhd!LtdPvO$kc88sF_2A}RXeFe|M(T=nG)t}fCmu1~FCT7GQP!Fb=my&l3j5)Cx`~R}2^+2iB(7z3$Fl6T3vbgWTMB2Q ztZ_!21d766EgGX)?tx{}xcRW|*Vx(&_lKGr0qXg?Ud6oPX3bDmzWinbtGpmrkC-1b zU7OEH@Sk@hD%jp-X-@KR^$duL8vlGIfYuV%)k=*&&^v8{`dr51D(VZQ(3uc*b@1yQ zN3?So;XO@P;w_UnMN%mixX^&0wokL(G)-j2brpgF>!MzxGD)bWBO*dIMcO^ET*mAv z+_PS(z2wqRQg$j@oY!{;gIFxr%3fLGC!p)XDXbjl#xKS z&}$iIxl%98xqgfDA;OevMLqZ4>ZeYs0OC(#uX#lWcgK21D6_p2`|0Lqg-UUz1rBP} zy~zYz8D3fq>4)ucvt=^>j2XWd&H~(h>bI$$69Rt4T`tsznk!t~GVPPpbOz}bRvP=B? zYsJFKM~E2Ie2-v-+E@v$Hq;1vf@1L_@%NvvP_tK%-~SxD%s1ppZSd>FrSwDqT4=u! zSuy(EYp9pJ^LcZ(hlC2CM5PY)A;`$3m6MPg?BPXuWzm#ubAt9)wYHX*4gLt`I6dXC5~;Vl5N!Bmx(;N@Ii9CKMf;6`=GCf(Y?_J%m-DEmlsZa zw;Md!jQUaS5CYNj)X36&e2qFAd{@Qu2L02{LI* z^Y9;#OZw~WeW;3Bl2=|}uDb_(Iv z7yn{!pEHpQP1@%z7_NbiHC-r}!Emy$aw&aaNvSUVe0>w`n@F3mDykr448AfdEp@S| zckwu&c_d=BihJ$W^?W4?)ZT0}!u9I9ETZW4Y3n|Z<81G&Jx_{-Vh-u-Hf~amDVxo< z9AB%SFORUQh*qBWh}sMf45PWPHobkIF!X&unB(X8VOV%_Tl~^dR3+VySG*8|sI%D< z0j&cXQ^!M5bEU)tgVV~$qV(vI?;rNHjn%0mzO5Ao$oE2YS~-Us3XkMW812CYPP37s zeFJF*a$l&go}AuJS$!orv-Y)^zeVM*Wc|s%T{*$>Q9|Y=$ySYmTZaysyG6c;+}=?p z?m%BLV0M~7ZeI&3RjoN7**dhbc|D7S>A($Z3UsR%T6*Ray~b@5F9}wXfR9@pfHAKJ zpje9eKmz^6Wn#ex5{UD0No!eUJ;h znM?-)GxBiFHu|o?S=MqvG5IQkh6Sl#0K!rMH(L&)d48vB=7lAo30N3K&&H^-t?_i< zs0OCR8J}7_3*>TMfha|aSsI=zo1KV1`&R>0>J@hP)u@YI-CRK}w$%yfp^;|`|MnhA z>+Hd(a-b#GZZA9C8ftn#M&n%-hwATt3=a-?WvIS?Rij%T$keX&h)|Z1xUmGxkmc-Z zZkUK$xYgmBRPxb3h8&KLw!(#3&t9UCL!Q7ErsU8jhSvS72w=q>;nOQO(V`3_%G;L^QzE9Q}M-q{`o zeKqZLBx87B3$12=h98QttEmWYD>SfK1~e=auaqhg`Gsw-=Cc6_s@0*o(ggD7+gDkg z->HVr-+;FMja{aN)+^XL1|j`b-mq@FFX>!=?A0YL}5SEcy%n zyoqu?K!5eV=<^Q;D^9&~|IcQfx(Vc=6>50h``M%vmiFN2)Bto&5p9;tGF}BYqMoD; zp;obxSF;eGU~ixr-M1TiMYFYS?pBC1l;&;pVSZ1XtA_;#Mke%Nn~(EmhD(6VD&I#Q5wkO>38jT{pb%7f9ckVDvx|2` z8yU)(LnIHaxo~CG#b|hfpf{qeVAD3<{&AT7`bGH+mZZ zw5qr6S_|0o@y$UnY{-GaEyKaPLD6G;?m21XYFdo`0YZB{92Nx@t21VTRPv4W`jEns zaC8*!YYrR#(=cN6Irm(h8G|#v#S8HqlA|XA5!Aww$kZ$Xro{_OX}s&o-(9d`1R5Cw zuMj*rE#rpLX>HSeO%pteeCDaP-^*no<-w|4GEUfp3_>I1qzL2p5~z6U#m|E|V2{7~ zlFBExd$NB3e{QF4>}ob=W3{2nrG?TVtQx}xSc|(UoOOxxe9tO)G-(`XR-syxK0S}= zhn)~twXX|jg{pRAJVw7y4OFP)x1@_~MUGC%Mb|r(4ybR*1dx8&(izfSUY=&sk22CK z-ZGo--KavyT&CJ72bfTj?&4QIu5vw;NCowv+?eJ?tkR4KYfGQJQ$w|HqC#3EtrZ4_ z$3F0CJ-51~HeVEzynWuJt_#HGE*VvcClDpC!wh7|%5Q&w4`zyp1p9=)f*R`*)x& z69-QWl;q%WZ)krS!@iRN(ukpOm+mgSQxNe7s3}#U|87_-U2JdEfjG}g6&c9vVI+Lu9cnt~1L(~1-?FZZVN40vni;9hSjBp|DTW2m_s z=TH-kM3z$BjK?CtV#DcZXabA43ZQi%P2>ax3 zKJJsAHPgD#|10;9n5qzi{()s)9S?RzHFgjb`o9-^NZ}0#YHn`qJ}9jA>ZG;5*j&7N zr`8!zl4j!bzQHzxvZWsjDZhe8Mx+^D>YoLjaRKa8@`l}t`VOsaiII&r z>oEEWGTgi&{>0x+?!P%lMJVSP5fc^bTJ{{H44Kk@%p;xzxB?Ee~5eJ!~mXc2_|c70I>BwPD0%6H=1520OBU-G}V z#Vy7U_PXpf<8K2O3f3iBDCmi|+u-U!AN*~~0&BwigdF5QhsD2H+`sSsud(7g_vC|z z|7RKUznApmoOkkXL;h)SpSt&J|LQA$dYHTS&g{RFzz;X6to{cm_&LgVM>EC0E%nEF zLG2&c{P}#ue@ylHUI>{Qpl)Pt2?kG76LWl?{HLDl`6fHg~OY z|B6OEt=h$;;RcHW6fgb17qheW=-uKzl&0URM#eD1_P-rpvF3rMD`@zl{P2q_e^aPG zUG~{~@y#~>b9aM|Y$g-{j|2;rzAG@<+hEbXdVWQ~NV077f;{Od(B)eZx~6!~^Z#MC z>f;tZa;IT*B8@m|A!2Gpe48_Jmj?>)i&gxunB#6{u`vOX*`y14?aMZ}Uswq8`9Cks zJ!`DUR|YhE+OMbYu1w`Wulg>57-txVb&_@LQ?L$wpdSW_>fPTIwg>tg^%b?}^;Rno zdf(N5Bx1a*i>5H->+BH4aTm4=RuX8CK)@XQEqIrVtHA^c;oe=g5!*;h*W;Wkk8 zdft5e5;o3KicmLcV=|)$2iIcnu&Rt6p2`i?hfbJ6&O6`D6mCk|88tm53tp9Sz}gLF zdC=H)wCRe45CZZm6~QELgK)o=(UN5xc2DCb{S!#VLesDlhIplgFFde61FoGp4`#UW zxZQ@NL_wu0ZzOCv-Ei&0MKt4eC`;F!_S&C3O(tM<)GPKqhwX^0uQ7E=d|~mQ8Y*Vu zfO(+?ru9@Mb|`Ocph-&4L=84&wVxfbKTPn*|f z1qhQDq-oX7iY%HH>PKLlSMD=h!Gku0nN>B+CDK6st3%0M{u-X=YDdZ8lkWl$Qfsra zE|C!>&KXbActvZolVRhtWniy}`~eyi7C9VBtRAG2)UgRbgt1{o=nxlT`5!}P0W#vaeE>w)J_N0)!o7T3Vxtj0;jrl{<*_KjB2$2FbDuGy9 z-Y_e?5~V)!WsMCv`Ntu3pN=hxJ0VRnaV8db&nix*Y^})HHkA?xA+$l%zTDz(obq^> zy7SU%pLo+;(-I4yv&~AtZAW6(A<%wf-FurL+W8?dxS9dbNYn|zA^g({ECCEDX{sYH zA{@=8o-^@rJaDKU2s~3iZcK}SYUiLRsk7k1!X>Z1KduA}U+i5wM??{-_WV2TL^Mjv$NDJ{q(p7OT+TT5vh^1m z8CW5AZ~<>Wb>X9VM{tQPnLeW-i38|!yw}=MCg`C>11H#Yvi*Wu_dPicpI%`b%uaJA zt5ZS&QwB6x?KAK3)>1M$gQL;r7IpVpUB0c2ciUXA6+zmm9fc;7mmiHigM%k;=Y%Kk zKVxNbdw*@}>_e;ryP2GDe^Amm41FZ6jCPGuci}GQc-v4)r6(?VSHF@tMx=Uqit~zF zGtG#-F0VSM&YQQ?qw&t>ac0zM&95mN26m-Ib#kRa{>iQSU9|<|$<9Wh)7N+A+V4)h?d_IM?J=66 zrM?z*;Kh);DA4iM zphTpm^Y{Qb`t)cK4@+0iFL=p){FHV-hClEBnm0m^Fn&KoURi&!fncW+a{-9S?GQXy z0}UW$ZaseeXu(0lGKJm&5V}sr#NkL=qj)-DpHtJ&qM(?&by5X#iDi^3f;&an>ojc- zDrIcrQ+F5IkhZy zYj7omI$b4OLTbG9+N38!u>Iaw{sP}>QO2vihNR`Adz~V$=G*O)O7tH-^M1F<#Mr68P!un=1)|p& z!$>6#uRP=E^#k7W9>;Jk9*xaSD5D{12bu@#Wt;O%oGN=IwGXx_?jC^VoFpBtH|&<@ zoa#AJs-zJhK0Uf1rk-Ar0oY=PNuo|1f)tuxZ?Nb&lkvwDIhtTW3^Mp+2qTzmOW?Q- zR7{<ntO>OM$Tk%o5fmD=Oi%maOhOCq8l|)KJm+_F;I!;g`76@T zUAJr>e51k9uhSq+fH9zi82G7Y*0U8?hO|N~h1Dx&bICr`{PXFuLp5U%W`&wJzOxHOpG zD8cr-9_A(^RsMRmB=%L4{X$K=<(J84MvNAoA|}7{YWvtAuZ@#q9>1Nq)hcbzGw6p& zR|+lqJZopIw$YV??`lI!oXU$p?KMHyKAOWiIb;6wy_8W(eT#|1Ew^3qpZ#7wNDIa$ zt>T7_Hzt-E%G8MOSNx-I?Pr!*bEp-&@U);9=WUkm7)w7RTtiD)ci|}M`(VfV*1_Ue zi(h2}w+Oc}M$3)OLFzC2Wn>fD~f9rE6*?F5*^ja?H;WK zhcX1k{;;%gp$`aa=|75mqtigczC+vpsks^FE!uBR+Q27F_)36az_&t5X570^tFAXB zTdPnCX@a3TFK`^Ubhx?#yG{4Zm4jW+>8L-ElQK;)#~XncIO*8q=@TFi1$uxU@3R+} zh8o94Z3ks~r74OIy9t&Up!Ll!NKdaJs8?CLkz*Uat=7)%H$#u4wZS8Cz4Kp(9r>RI zwOO;RB6yK8an0V=`WL<{kkjgQgDG+<@K>}iuC(R~(w_h+ADVe)Lj!HMWW zU%~V8UGFH`z$@F{P}U4K&caBtQDF&K2=OkYP02w#fARpBn1GIvxMStT%>)!l(nsH; z_L@~6KI0m*Iqgm=5Sx{CbB@Hz|Z^6{AgIB^FT!J{}Qf$ z`&dw7AlcFM=!wTnzU!?Y#*dXeD~l{m z;#Hj|c&bCHuATr*`%P6`87JS<;J1v34AcEV?=eVr%t1;wdJ;0M^0p`AE z8hiQuYs)oO_)oo3$Trl%j~2zsncPU68WQrV^Y=Y&=|}X>ddWM%&_>uRql4xmDG>I~ zenqL+!s$x>*b?qm)`l< zH%cg>>T;ACVvf7^SfOp46HgyVcAy2NZ1KOmj9kTOn<8ih}1#zR^TP7oGs~!Y90R?ucJMIQaN1 zg#LAcZq0G%ZR^!jvmJ3gV<4oV2_x^gyYH?)zxkLjXR|k2brRixIzv8r7QFhxm&f+k zzP;bS!aL6jr{5o~<*X4CSY;Ag0@~2N+S6C_1O?i$I4t*HWm3c*VccYZVunFcGmcDz z7aj&B3R#|eNQ^pyzlDj-fltwhQQvt?vS5E_#VvjbW6q|j;K{CR*O$IlmfYwxkLkqX1c9e-ptG9;|&2L>>nOLizs;Sw?6kQglb60iDt z2etK#ahh^&`9Z^^_t#ac=9|sYlegZgr@5t!bSHX?W6DBuFYa8^PI_^LQ4J8f*3N7$ ztA}RNaBD3aqn_{_>6o!2n=xW`zFgu-_5l_LmTX=W7tU zFe4Dga-#g}1m2MPz!P_Z2Sah1}M=Adw^3wqARbQN`-}CfeZ6h;v_7Vp^We-~x0ke1&>U^V- z0z|Ml)bV~{3$00>?>|YH-jkobCSpih^-hn{$PeMr;X##`9ZlZADdg)~&iOBo#Z|nV zn7MCg>qxy%6l4ULMD5^@)rKv*&@`SN_3Gz7y}Aq?$1FxYd^K{g_Jl&(*2@>(*5anU zv5D^aBhwHdnZnRJ_(caeiqZ4;x1G5zho%gfv=VeXx``uJ-v*x0mV1*b{9COtIu>q8 z=-Q>Q;Dwld+UmK%-YTXu!RX1fA%-6<%zu708>k~tF(F^4arj89=7A_{8+}g1oa01WoJL%am0+~AG9r}fOUzeEhN0Eh0 zrpnB>|FAXrJ}gWFus)E-5+^<9Mp-6R2$t^2*NwtnfS!6b8w-AC+1|w4*VzF{3p8>> zAkAJdwj?9J`=dN&(v-IKS!fAv?FBJrDV4|(f+B3TGid-jX{h-|8uhV^99BVGe`DnB zUO`;;iW<0F`+>zBoB}^Ti;f_=L1w+z5;FcTRwEYBx{KW)*A>YbYj-Yw9vY|f3AtUPO{`|?(z|qFa zNLu<~xh7f!Wm5B;!%*c7bE_`x2an7Pby7y2;+p1CAfEH&c^VlLDF;MMB~Kg<=5>Kr zt)ud7P-KvoVasaS){AjuGsT?^o(-ee7=#ImL2JO5*|lNaF-_QMbiLi37;2J#yrg37 z2=2K_KFVb}rFuEcBVwe(qyfPkSaA%$E^mU-7vH)<9sI(#01CeOp(iY4R0*E@Vb9V5 zuRDSMo_rgl85G{;)MrRhUf1UsmTg)I?xtIgJb7G?O2B<#N+64M)dac)PYsn2-_A0I{>9 zyjB89HLGJiH>QicUJ%fvDNMUVtc#O*mRp1 z*;VWHZT|W&CWvG#w>UYc2@a1z_#xzMHP@&c5;w-OJk(*FyXfV6JX&3Z_noFrWyp*_ zq|R>tA5*LNTLvS1vAFZ?H%rmG-K$LA>#;Ey9RQi4C;r6Lm-=#izU7%&p$_5mr0bA< z$8A_q{z#Jnyc|fOJsX`*RuWw-V^kET6z$0@eq3ED?mgHYnH?upje-^~NPMGJTrqs* ze`BmTmJRot)JHFv>*(i4`>oXbYm>!8fMjP_Mc+u9q2Es6CyjeHKk%(P=|W(r`pK<- zAwswig1pIizR!3HpJk>e*v4#eZ6h_c5U_%#aSTJz--Y~Ivz)Ns%y;$JvF^GDmT|ihNOv)+pa;~YqtQR0?VL?-ePzOX+xDG) zWCiN^Prxc6RnsnE^TVC<*>;T4tPTPH0tflU{Cw`oox*K{cZ|+x64actWfMv^vc0~` z2uBK#+iD!q-Uv5Ej?_FEo|STgB*@9A-`=0|-$=fJs++As?>@9^zHB&C2!p;(Aia!D zAdTcXlRw+ES7%O>=0KO~l6JPeItiWi>(yiTY`6MHkmt{Ta$J5c{4T8SxS>AQ&;-*_ zmI`_(G}IED5bTL&q-z6Sb(w56g8BT9;QYt`7kAC%n=H*hoL74E8^s`i@Dt%*r2mhT zyP5h!N0t9OYU6)5TGDWb@T2d49m8hrTmN;rDNn)kw|`y#(Y;rD^S`ct_x|taU+6rr z{MXN$dJdT>{`-1nw}QmKufyU~cmDhOocaHfulKT<+8%v4UrD0_>D?ea3 zxtI1afinMV{W@X_5^K-1^0_DuBTX{{Asp@Zim3VbF;m2px|YBU1o|Y9Mx=e2q>M^T zcj~0n1tK_C95|0Ad1%tKAe;o^`;y65v&eV^;vS1;6S-lWZ4pc4`HNTX>CPBdQW+`xg+d$QSUaq^osy%^06PLTgHqECUr zFP}Uz=LF3kN}a8WnR}Trv}P*?#RA4txxM4U$E$7HqqVK;jC|J*We0>^U7v>_I2ua{j|B^R|%H0gNCPH zEA%>xSl8LvD9f+GtHdF$&*Sw|lK|eo;Z3?Gg8zW8a2=|(BC$kH1dI82wHnt^eipsh zReo`?Qfl9NtRlACB5FRldy`| zbM=Qq1nH)VrCo%N=6y|_%@!J7*YGDGk5u-J7Ss{BN>7=`fAG8#cja@_)%HFimmGXe zvYS8WO&JyS*zM459L;%#h4d+iX3N$1q+1hYBf5U<~mK0f2{z~@i z$|KE%RF12jEX`w!;!FZSWkb|W0) zj{4^#$CG9~#Ip0DajC`P!cQ8x>vLxV*_O8!A$yRkP=S0%B(}^X;UaRMmyD+FnzIc_ zpxSm^i(dm0dy)&SFZExRHd^VkZNX1%Czc#ZnPvd7H9N9DUk)@Y)G}?~YVlE5Qv1m+ z(a!f_XBr%)Jq8$Vp;qh8<(p4$-;r(E8TsMFR$#krT$XA3pH{{3mP7turM^z=s$mpF zZzRzyY&5!cHolcX9mR1wsH<_STY-sER8`z2@mh;0D@WW#BI=8OhR1RIw${exEWvG8 z{`Yp9eH!Hz^`+N3WsVR-1e3=OZ`$->tg&LY@%-BZ$P6ZT0R}z|yB4M)&={4H8BI|k z`Yw-TR>W-RJlKl>`>x6j9nfxE?^C5^w$L*X+fJA(3isjb`|!@sZUF%#rg_TGy(5iv zk^Qd*hrzZnAT5KdOyYe>2v9XuMtV%g#f1cZiU`cd$pVY{Jq`t z{%<;JvR3pA22;qgEjR0q4gZl^tTXughZDPDJ8z0!H3weIm_1C9`r0gIA>1HoNwEmB zt~Ib{eXNia*PZ|=4qtObnh{aHpMVWXW~P0~A@UR9cA|I8sqRlZpu*sDmJ*ZE(6;q6 z{rK7C7)!33oP;%D)WaESvbS&XOe5MC2}p#=Gz|C|tB>d)qQ3F6grV$547j1t%PAtu zb6GhwCHYK5%i1Z>)DMD_(j5@c$WtU7sOIZ98< zx)$Zz_Iu2pIiKs&_$0Fy)2MAM|G1MU#}O z0NYVDcAx>`6)Ynh5AC17KZ9@!@X0;Ngl#z4x!w(Kj2q&g7(A#h-g9|1#%uj>#Tw^5 zLHCKdS3P6o#>*-fBh=*leG^xdt`V)aGQIBe4s&{$%a+^Fz1rauhj%`EFk=zOjf>u} zaJOoI1Fd8NEs4-84!BhBPk8%*gNP``d0?{be4v`1R}Cmf2?3kAb-uN%Lz^A^gqX?w zn19MeXkfM0F26HgrmZwND4R&pt-dfX3-~ccu2B0&s9r{6*$P~?QIIoeJ1)x<2LfpP znW8K_&f-^8Yy|QhgMP+(&eT0%7NX_mBY=1Y(rU74h@tb65}N;_4EIy`-$;R5I(TAF zT3(IgYC#u;|3Ue!uaZi9v7qB~Myk7JZ{ewK5)CZxWbNpHT5yP^-mJl`UK-GK*-%Mz zy=3g z5Q7~-LB$_mFP8;yN^To_jfxZPWbs~x&fWSoDdV~qWxR!w-@R9RC+;jI`N&44p=*we ztNG@%y$A()_I^ibvkTX(_<;h2YYv1a3_RVC`g32g=IF8%cY{8aH(r{4)Bwu&65cs$q_48zqho#*gS5x6qO1z1!)6>#Ab=M_vP5%QHk)mrZttl^SX54if& z2DayDTruuE%$Q!WKL1wI({OJE@R0n${h-98R;OhHIsaj!VZM)tvn+j6t+biqwngLD zJcA=VV|y8Wcw>^OaJbSXfoM(m~U3IWK-!B@Wy*98^;m^}hP@vgS?J2Nl;aKb1f1PN8MD-;OnVX8++`kMP@& z)i}X0=0@oaR1w`KDSUI^S3S>nGV)%4Qq?yRw5%v>Jet~OUh)bwGBW*JXn5(t!OV_l ze%Ehr2(T~Ykma{r@pcyPG~Nk zc%U4tmmI>hpp9|~S)_GDFp1~P5^&rg;y8x&S&6myoAT{II{&9}_L%6S zh=u&9)3teb)+*fs^nD;+fE&ce(ue6SQ$(L5oYsi=6nV98uYw8>B+ezevuYZaZmLhz z2)}(>R#CfnVOzO<+{XDzwOX4dP)FEeZ6ANP6mCCg)8((<(aw)kazmihReR2DvVq*I z1&(>^l#kJFCTlB8TV1rXi7b3%x#x!lYRb>cY?||hS3DjSPaF%6Jf!}(p93Olm7kWb za1ZZf&zrWI%G{tk%2sH7)jgKrzv=O2v%=J?Jz-C_Ti$2Kkr3HWfEDn4UAW5$z-YW? zg*nhC4fs(?Fwm5`>u&)|0AHyB?^p8z*&m7JAPPH{#g*a&;e=9VOL6^7k6rg{XRLoI zoDil(m)My&YVO-5x2Vz52K0Hl-7+T-16?=PI5uKk#6+z$>IJm@5iwufg#Or>Dw+)) zeF&)5g(}uSyCv342EaM+ykUPUo?c*}L5h6ZI9p}XX7n!Oogvq=N0{puzu!I8#_QCv z5hLUn>0j${G3XV&5UrqO#**p>nJbn>rZ=8*8S}F{b@c$gX2RjxryIm#wKNj)J%|-8 zA^0ZqySeh)_?pA=` zcvjT)q!b}Zwous(A?sMGv1BWeWEn-)5JL8)F=QKr z5eiwRWlzUO%vnAx|G z3Y`rU3P-CiEAtP!6enk;Zv`Zp7c=G4>ho#X=f(=}euV4ADTm=se9R(I!6+*$p4&D1 zCC!{%FegW{JpvXU0P*d250tpiRmgdJ=4T&N~F-kwl8=~aEK zIaNt9O?B>DTV}I)MgNTyFFwbjT~Q@L{00}z+8s>4bUjvAdvaXVtxUM$*kfDAEu9>@ z0_4m@=a09&T*|frBAAg%R_pSs{ZNd@h!Nr<8^c%2vof&L*{b)w-G5G48<`5$C@lc- zDvMYnJ>_HNb#;yxNP11eXHHn977d1|>5shhs#%b|sIZ-C?GDQ?#!dFbQ;SH;$FSpP zgoBUNM9rOC>PE@C!~QJ;AP2_-+o2&lig82k`p)IGxxM` zouR}KcC@y;V%(-O}(8)Xp3g9y+b()pcfk z&Rgqtzm>JTd6H|*?am;`m&d++`esLRr3fVdoRv2oXDj?D;|r439){)l*l-~A}z`l_kg^@H`u z{mWv#j6;tqWE`y}J@#(~(dt@)7~JSMmHfD^H!rfJw4dm`t?m2&|G(F@1o-nG$i#B^ z0gIyBRLxRKmDfzVsgaSJT}KLptTeYq5gn;Ysk+hLHWnLG#e-Lk=yt>(Ta|C#neYNQ zGl5iFbpD?l9k%*l$UP`-?$*1p;GkmdrtM+K15#W5NI|s+?jA*ts&KY?W{#~>7GC`s={;ZqNsbB_Svv{ z3D!e=x=NrVC#b7>(rx;TeJQu~RbrVM4l6{Zg5p1>gR&k#=B#zyky#j8+I%sxFX_Z{X#f;CKA;4j`Kf^w_ktROu2#@3* zoL((VE|2%(HbUmNAH_ada9E~OGle?q#-h*%m#hZ|+!r#JQq^PKR$ghcKb+Sf(Bb%nI*lQ`YXHr*7+hqT34)uQ|f!Z9q+LJNItjH(ne1N zW2MdyIN&gvW~(RHaPh{JgFAs=R&6(; zePoKOKH0&Ff}B+KK@@gpXym5N;?VD4R84ZOZNI1q-LyF^)MUW4-<=kBPDO=x7pj9D3^cy({qLnUk=ki8JTWurp#UkaA6{ErsVAhK+Nh`hp}T zWe-F(1YR?rVSFK$F%KGlkV9W`{ZZr$p|-H@M9%^Q{4)rnQ>IGnd;Brh-S*r=&3+x@ zi$0{s<)dSm8XwPD!UsOPoUs;SFp^79b;6esE#Db6o+BlKje}fLy7d02J-^m+qTIRO zMe&hL=C+Ch!=w7RnWFOXrJ*y!CG5k{T_Y}c{%mUXd&fFb4VlhIUrFh(Q3f=De8g%& zrz811Q%5ZPIA29`8cj@GVvhB#GQEMj$tp!Tij{n95+Et-o0Q?eF9D;XeH1gB{czSK z>Z;wtMGNz6^`z_B3~wg0YS%(qe1{Oj5phofHO=Urj7x*eWI7pT+#r@>@fx5@2h#P8 z!W`*@D;ELzNFzi!y0ZdS=^eWl3MUgk$$02@8>o%w6(Mr0e}JYc`7&T97l;R3+d70u zMPN<)lPscQIdj5|V=}?dPn`~!iQj_zeow zYWvErnd+e9(4Js~%!Lnra9IQ#o_?wM!FR$#Dr;rKt$Q zf|}>5Q$U_h5$i-kBPW)TpLKWCDUE_h?bUD|=2Hmh(j=1VGZJe657u4Pf5f%%6L@oby7bC~Tx`t{e6nDH_HbNE1x_h)*?TP$*t-u&uo+0ZT#5dGS{&8sI0O2r&>3~ zLE?1HWsA6R=~OwMSl-hEIdcQ>j?CtKQI1-1%*XF@_1fKU;&3mUAr&m8iYvPX2m|O; zH2mFB@bt(fCu?6(6&qsKk{Qk{Xhi4&@#dF^5Q?Wy4~t77xWCD=`UU|L-4E`N*w3lq zCa^{Stm{vhN>*@yZz~~nkO-eE;kPk4v#!CX`FyAEn=J2I;O{=S^d;k=45U>WtRkp~ z{>T9Kp(yfo`!b3JLrh~>^hd7H>^}lHILJ29QTd@7xSui(ScaH;_S}xhcA9#lW$S1k zO)9=6d&3UreAtaUSE&P)E6`!O)vtZPW7|qY>WMRrZI|yi0C<|^;i0GPtn304eLD#1 zB9gL0_M!Bsl`A!@$#gcM;@JslV_nd>r9#0rmqoN5b@gjS5wz1h*Rh!3p%h zg(T}&C2Y8Pr1(_@S833i#etNhX_Jw1?Ghj9#VkiTybxIiHmf*)FC>8y=Jrg@5Zoc{e<$WAH&;Gq#g`0I?h++ z3!?G}CZ~#5cHa_V*;RMKD0tc1_Ypf+(W!x0CBxafzGiEK;R?xAy?xgW!eh?PM@_3H z)%JMoijm1aAZ>hXlag{sSX^aNN{ePpcqwMy`J3D&=Re6^pzH#@328OzsPV3>UI*pE zDwF#9qo8F2hDfi^#rF;eGlE2;5Vkzhg88H)9IMKxz=Y>c*waN=A3Am*H?9^8{+KoF zZjOktwdDaLLxie5?xG`;dwg?-=U=J0VrMnGbP}#F5l2JEqQURv2>2Lhb-2(nZgok* z=+HN_meUTE&DpCFhsVlX+E>RRtF~41PR4>|?>UV@pAeN_@#Dw+y7=r6pqarGIf7zY z{@3i_wl?3{L?zE~1qDi`e<50v=c9~9OOFLD(TloGT=OoQW<8S=!+BxfOjl0YryG!Xirz7g*H5LYomyOlUNpV=S zTslmUM>1H!V{Jj!?E0gy3SO|O`H#DMrbX2hFq2_&sR7z(Hg-6HNY49Sx|YAG&2Co4 zNadw1oc1oj;k9$Mr7~c8mm(6x8~v1ev*fIWWv`zr{V>fbJ=u&DVEk$#sW&!0E1p%j z1=`M+9(;Cx)+3_b=-DCo@WRenlM`N#QOCdmr1zl+Ck`7`qt*tpiub@ zVZC+-H#Q6W9d^4MD`aDGh~_$hD)HLiYGvNvYb7~1`0I@NU$jy?m_eAkaqbfTc~c#W zxZ(R}f1)`K`Rb_#3Nh|9JXO0_fRGg`KIeD|fcGz*^;? z+|)Hq^<0*wp7(JRy5OkWBG_jOOtliQb7LP3%lvBr3DloqND%rG*_qkzuAu6hMBsel zZR0cK^#t6AVpopL{?arG%@Y;DP9>?x*wWEc0g;}yG<3)D6NziOLQ=uE2& z)OUs@JCl(wC;cHv(M-t9Z&~F^(%kX6m#Z3FFFTg$57o(ES^x#~GZwk05%0#H5NDc^ zm6j2G)jB&fUvbX7IWqs$HP|9Uznkey*&CNs8GU3YBEK!|7RDAbDc^~u~vD(kzCKmtdB=hCOn3du4>SxU#>h6EBj2eC+B%8|O z4zolezQ-|*%`{^)aM7Y%AF>(F-{7WSfy)GIC8A4bR;xCkhg-08T~U4mg))^qHFD+( z0YsN!x$U(IN(J^z zBa#Opwz9UTQ%LYMv%vHtRcNLP{4M^-9b4-2ymo34*rLI?H@KN!$8kX3W=2_y^KcW; zm^nHnzjuGx^d%;D8@{(!gk?e1ii5Gh?w^2jjZ-0X)a9kQjaH;^slZPoVJ$H0w$zPQ|-MdxRw zKXSfL0`mkXCVQ(q(o7Ym@S1KS{=ybBCc%jw`jnXck1xqfM??uTKT;{fWf`?bz3bp` zIXb{1H9!*Is7s#*2Q$b{?|Mc*m3uAk%M`Hb^35QLFgW!RfSp>;z#t(hN&&UM_x1c9 zzxVYwIN2g-Ioe+u02NxYq!xyuf>lAh(nYVdyBm1H171ERdsz{JX%TDvf;LYPn4h|i zwO)R;V%q!$)u42^E7}*lQ7oM%NAazEMQct89lqaBPCn#vaT_E|diD>Q#@{}b+^KPJ zhor?WEdlvms>fEQrl+PCByG9^J>U0b{w`^8tbg1jdHfJX zwSHS2{-sm8!7Un0M3GiOyVmabs^s-Us>?(#Loozm|mI5u0whaG&rFSaWV zpF*s>UlSMDbpMTUbDoyb&Y$ z#X)p*_qq}&c7dLF8xt>|zwg-bU0o`y2|~;_*RVrtis8E+aN=b3h|EtAO>*Gyu_vQ2 z4=3y#|MRa)!psScZb_w)bAyAR&rmPYFL$-Q8I|4J3& zrfVD+@E+rl-DYyxHiZ&!F;EakGjS50y33oS8O;6}tQx6T06T!sjplWbEWS zIUCcBac+>4f4S?mt~C|575*ZNrToR-y*%BW45)SZ=1%I1Sx^SId&cSiv;O@r zl-M4oujo4$xZf9AJO6)9jHZ_V0n0_Z#Gk0LP9Jel?OFDKg*;G1Q~AJMC(#rIPZv>Q z8)B`^2sm(}-KZxrfn28e;>u9X!x&e@IdLOatd zpse6wWBSFt4d{{Gs+IC>HZmn~y_gC}t>3tkDh;=9RM&y1+<^`GvNaQp_ot<#BmZ>T1HhZ--Z5pGxEF`r z3W?6oVF8);j0A zy}&?2tXv``ZgPo|@x%g4Ct9XQu8sliqh;T~bmVy=Yt+Q{l67q33+ls{IfbefNYH4h z^$_e#2J8+@?ki$fx23XRFOCdB*)Epd_$vPlEW@BpmNlmKzaZ>(x+1DQz|R1nQXI2S-&&m*>;AOz zVOu2@ZEf`&DVgQ+B?Nz@6^`C3F&42@-+{Ub6pIBYmEvUG1f(?cSqMSo0$R}8xcN@_ z^SP_0wk8$2r73z(;H`?;=#kJOr2((gr?=0@UUJ3{h%U?Znj5T@*uSLzF`7}Eucq2WFOyx6|5 zbql1(+K{3?RL4MD!8FpPeU@gy>ha(P`q<3ki8$BS`4aLF;k!U5WKTe*JvV!#-+fpi znN_7P{8v`>#%5NvO`rR1RHeH_cLR!08-mf~Z(E)F)`k9Fo_Z#Q7lG?>zjsq~tosb} zS>l>pO;L+Xg3wPcUWe3tRj2HBK6rh(p{Xv1FDL@6g**t+K7vgZAc=Q>Q|XqdOq8P$dTNN zlB@mtJxooTA%m?{%ixKq=;cuDrt|j%(TgCQtgrxTK{;VE?ES~0(c1=(BvRxK=p?~e zp~=O^MI2GnJ@6!WW=Rb4O4Mir#A&Y04!11(xjf71aa5v&OH#WKvb4}m9FUIs_uj>W zi6zf<+vNA6=Zp68y$HfSg$HA&M+QbP`-pQm%5{fDy2dxmiwcpC#pt z2;-(lgcU9LhkQ#FU;T@)>h}UpPmjzh!VA*Km^c{VQg?@$)c4T}2(qvHMc)A3zP;pf z=^rYT-F^yaqhLtIC#OM^>cVn$&aCW(X!epDzG?Y6_t@C;CmtKpfe&VqF7w5#*uIIE z3pN>?!ZPNon1fKwIu*F93g2ACwv~kEWuAGMQmk!`76RMP5uZ6e5ap|#9E(oW$$jrn z@|+qd-~|;Mcq$f*od1DF*i<)L%lT?2r8rhiN%Z+2Y18n@L}aeM%%0>7YB`hCcTK%Q z7lN5bHbM`8c>^p6@k|{OqQ4OjjdW!!IYcp=tp9?G`pa(EHT2YWKBSN{?hiux5qK6jSC^jl z%$hgXTkoYU?;r%lMyCiOL6$;J8mmG&0~ zfkW}d2zU_w<05CvY6Apv%&d0u&=@o{6{N5o_^FCuqae+FOP(KaE*tI;=v9;lUWBAZ zW~u(|q~I^3vwXC@vVQVG^qX929|I{6WEc}Qtb7*AM&F>42IuwG{=O^huvOQ#LdE;SQ2nD3T-SI%(!AEu(B}%y*Tu zE^5~=H5C{5I|n-=wfYWppfdeth)D3sWxLc*3S|6Ca9VdCygg@H0DoE?v&V<8bKr`AEfL2hnsT@o3 z`I1*ui`FpC(ryvBY^p+rw&7x7WKdG%6D6l5y9RP@_N%{woElL&E?o7}U-Om665nP^e_xdxS$HS492U;Lu<_AMO5tM`vs$ca{8sz2Xw4CpYp)KkE+3cYUW z*s!$47|t|*fb$f1wJ0@vvXavRD`P{@hk?5T2-WCSbU2Sg#&xqeTiCm+_4 zGY^Fmn`;IoPTz!pcRqo%uBD;fpRKH6(KFGc#eg>d75dYk9BwPBAKW1YA>`rCH2Cj5 zT7*{=B&gONZC$jf0(Y%m|8%PAMS-SjR{6mq69rhwkw$FH_)rN;M{vGwA7)hET$7sQ zB~`NnZ_M(y$428sZCeD8+L54&2yv@+dFX>IS54pDq8MB$C^18t+GW?`4FD%S4Z5#b z5{N(vW0GuV{I36$nL>VViDnG;J3m)u*zotH6 z)Yv!|j69+E!C%P$xh0V-Sst=v+o;5B;2;uCXqB!#sxI%`Lr%`>kEl^8z zqCE>BZ*9g*?WU1Rf3nj;N3!U8;pSmH3OOq;#Y_~cB8TGLx!<1AN22(Sw#h2@34>$d zsC^w{OV=!*&}>)eg1iM5b}luC$kXjndzCaHE&fshh8roZmGkQuL0(BVZ#MiCf}I}A za3Nv8&vZB7TF6|i(5?2-Pnvja^P#I`;7#Pqsnb~gZv7A$?fueao>ys%Atk0$dF;bn z>6EMoc)j)CWIc}eA5q&_e8R}pEryaiQ}k}#u2K8LOh7cYYFI0s!phQ;ME8A%vs~_) z-I-(9wsKZf>DgG^6H?r8$7FvM7t`fV*GjhGAn~S(_^VQT>n`V#9yWEHnOH@bjp;Ld z5`n2Cm0$l}nRins-nq8&Nb`!e1O6}_8@=)fHx<3gu)=pmK0 zasx6gQ1%!>IEvh6K& z@#TM|ZB^D*edwbhnw>z0j+%(R#p7h~B6d_?txt|{EjAkKAP;pmD9juxD{1?rQPy8{ zRMZWR8dh<01h_&l_SWuEm++oi2V_axOlK4X{#hNYh`=pF0tWKIm9Y*!ikJ^VFkFBM z=_x4|)gWaQ5}xB`=Dqmy^T{4{8{UFJn1h|xms5U8Z~ZAM-iFOW^e>X7-`sS z(@(_TPQ#U}_p$nmhm+WSt42_SRZPkQCo+Ig)&QKmw?)UXa@#(uVu0cg2q{{rQ|=6m zaI@gE2)eJvdFy2Z6Hq3!K@xbeV@t|mKg#<(1_5r^$%G3=(BRq1Z(&!>gNUdQQ|WeJ z1n&Z|+L{l^+3=KpDCUudIvc_z0`QPv+>edglgu{$e5oQRbzz_yndW<#Gek(|`HyE5 zhT(D3seu;pV(Tju!meZ)05igyKx@Ms)_P3L0G^Q6G=hXe)d0>26hK%gS#DsG2v-CD z1cIk56+5Y7C#|HCyhR;R{$VFWsjVPN)K-vs4i1^O4UuG?w<(wvS`E51b6A{hdGsx$ zp*Q6D?bA!(4;k&z6GGr9MOKcjTQ2hV1`r@3)y=`HSmWFZ(MD8DXYq>@ZOHDC#XAQT zN(ZiXp*iln1vjC-SNeUVWP`Jw)z#`;Oa4hSXKJ)@aS-_Fl$;eC!i@VIJ_*fose92k z(uq6B9*B!TlXUzO6pXO53qJU;!gaNTr%?0zu5t-S!bul9FTcxOGA;~2HR0b@jjqg0 zo++7WYn55Ax?Df*V1WcF2OhUl<+f;4eiYBBH0*7Au2eDMJ19&wa(Sx9Db1wLAlq5V z`N1g*pvf4{)sY9*^?5Hb1q~Y{P0M?aj66eUFB>(sg`$B4b1+H0S)ETZ#X#jETd5u9 zht)+^8}~~ea10)F$R)E`08B$}(*ZajAePeb8!9<8pZ4~ZBbgxviax;i%K>#VFosgs zQJa#h7ENhs3E>T;+`U)(mC2GV-12%ZS=zU*UVI-7hwy{bG^wA zmgO&T=?7t>R(yR_N6V(=vlovI6sAgixme9NGic63gXtpAp1i>1t8(nTQJLd2e9a*K z+!7u^!Y9Yr+87&$z$ZHaUM8;K#7?GwjN^RG&1u({le2(jf2iDboV=`Lt`=Binm(+P zxLblYf6-jH;bqt51(@PGOl(apX>82vo+R>aKj2Qsnj6dvehZcVwl`CZD4W3hAywMK z_3~h!yz{;hKP~bqa-TZwKU6*AD-B&MAV21v&r@>9(`6Df9%Un(Q|fD;hQA`h%&?m5 z^vvZF;>pyN@T#GQTwgp9c=ILCfF;lMC(PHxJTwHt#Q{38hxKod{}To8q2IY#^CQeR z@X~cj6cX5}OjlhqwNlX7#c^?0!nY~;sOi>H70xrTJxVah>fVuA&7yB4z8yys6~8$! zDgu3ueg$BE9)F)&o|(n6sACq_lXOjW=D|-Lq@mS<*c=7W0G#rqGtf9z+l1-0tVQ4* zGk-{T>(pZcadt|0@zB-do~?*>;jmO0rBxgo3*m%wh6(8-Lsv+_8(>kCR)T&EPM&e;Q3PUA_a1wnUD2(vrq$;bQAEoThUI4x>u5x}wzKZPjTuB3ln z(QEp}YW}gXQgP#KxR`@#_;otK*#oYxVM?a=*JPV+jqDJMZ%FNad{K|-u;?bW`)zDk z-(yK>Aq&Pkc2H8L4Qwa=U0XKb7 zLZw8=#U?efqRR%4P+jCFa<_oU7hM(7YcHu0#s|I?G9Mr}NE=a#K{&{Xzf=DNMl0>_ z=BG4rkV7)9gX7=yVZ1Yr?zB4RguYF8!;8$QKwj!C0*8zAc2GRsA4c){FArTv=@7s~ zfj5Z%y59HyGEhTc&A3$|(WZafuk*uR*Z<3~h?d(nuqb;r+hp3Tbdn02+XF;^eLce; zQk9CfUo?+NMFKf2ZD5^q*QULC$zCMFlD1NsP+LnWZ3LZU(xyw@4`oqYt^){5pUL5- zuoWI1GGn>z^6cO(Dc literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md index 562c89d6e7..619fc4cdb8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md @@ -22,14 +22,32 @@ ms.topic: article - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -A typical advanced persistent threat lifecycle involves data exfiltration. In a security incident, it's important to have the ability to prioritize investigations where sensitive files may be involved so that corporate data and information are protected. +A typical advanced persistent threat lifecycle involves data exfiltration. In a security incident, it's important to have the ability to prioritize investigations where sensitive files may be jeopardy so that corporate data and information are protected. -Microsoft Defender ATP helps to make the prioritization of security incidents where sensitive information are involved easier with the use of sensitivity labels. +Microsoft Defender ATP helps to make the prioritization of security incidents much simplier with the use of sensitivity labels. Sensitivity labels quickly identify incidents that may involve machines with sensitive information such as confidential information. + +## Investigate incidents that involve sensitive data +Learn how to use data sensitivity labels to prioritize incident investigation. 1. In Microsoft Defender Security Center, select **Incidents**. 2. Scroll to the right to see the **Data sensitivity** column. This column reflects sensitivity labels that have been observed on machines related to the incidents providing an indication of whether sensitive files may be impacted by the incident. -3. Open the incident page to further investigate. + ![Image of data sensitivity column](images/data-sensitivity-column.png) -4. Select the **Machines** tab to identify machines storing files with sensitivity labels. \ No newline at end of file +3. Open the incident page to further investigate. + + ![Image of incident page details](images/incident-page.png) + +4. Select the **Machines** tab to identify machines storing files with sensitivity labels. + + ![Image of machine tab](images/investigate-machines-tab.png) + +5. Select the machines that store sensitive data and search through the timeline to identify which files may be impacted then take appropriate action to ensure that data is protected. + +>[!NOTE] +> The event side pane now provides additional insight to the WIP and AIP protection status. + + +>[!TIP] +>These data points are also exposed through the ‘FileCreationEvents’ in advanced hunting, allowing advanced queries and schedule detection to take into account sensitivity labels and file protection status. \ No newline at end of file From d4c823d919f3d440336e1373ca53fdd87bbb1c3f Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Mon, 20 May 2019 22:05:33 -0700 Subject: [PATCH 13/34] update toc with new topic --- windows/security/threat-protection/TOC.md | 1 + .../security/threat-protection/microsoft-defender-atp/TOC.md | 1 + .../information-protection-in-windows-config.md | 2 +- .../information-protection-investigation.md | 4 ++-- 4 files changed, 5 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index eb9c04d03f..d9d8a66658 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -95,6 +95,7 @@ ##### [Protect users, data, and devices with conditional access](microsoft-defender-atp/conditional-access.md) ##### [Microsoft Cloud App Security integration overview](microsoft-defender-atp/microsoft-cloud-app-security-integration.md) ##### [Information protection in Windows overview](microsoft-defender-atp/information-protection-in-windows-overview.md) +###### [Use sensitivity labels to prioritize incident response](microsoft-defender-atp/information-protection-investigation.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/TOC.md b/windows/security/threat-protection/microsoft-defender-atp/TOC.md index cb802c617a..1a5081adff 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/TOC.md +++ b/windows/security/threat-protection/microsoft-defender-atp/TOC.md @@ -101,6 +101,7 @@ #### [Protect users, data, and devices with conditional access](conditional-access.md) #### [Microsoft Cloud App Security in Windows overview](microsoft-cloud-app-security-integration.md) #### [Information protection in Windows overview](information-protection-in-windows-overview.md) +##### [Use sensitivity labels to prioritize incident response ](information-protection-investigation.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md b/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md index 5c66aab91c..37ee1e2437 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md +++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md @@ -63,7 +63,7 @@ After completing these steps Microsoft Defender ATP will automatically identify 1. Go through the label creation wizard. 2. When you reach the Auto labeling page, turn on auto labeling toggle on. 3. Add a new auto-labeling rule with the conditions that you require. - 4. Validate that ‘When content matches these conditions’ setting is set to ‘Automatically apply the label’. + 4. Validate that "When content matches these conditions" setting is set to "Automatically apply the label". diff --git a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md index 619fc4cdb8..34989779d2 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md @@ -1,5 +1,5 @@ --- -title: Use sensitivity labels to investigate incidents +title: Use sensitivity labels to prioriize incident response description: Learn how to use sensitivity labels to prioritize and investigate incidents keywords: information, protection, data, loss, prevention,labels, dlp, incident, investigate, investigation search.product: eADQiWindows 10XVcnh @@ -16,7 +16,7 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Use sensitivity labels to investigate incidents +# Use sensitivity labels to prioritize incident response **Applies to:** From ea51e4f8378e24cad55c3ad2c6fb0ee7ae4b532a Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 23 May 2019 11:38:20 -0700 Subject: [PATCH 14/34] add details and images --- .../images/data-sensitivity-filter.png | Bin 0 -> 20983 bytes .../images/machine-timeline-labels.png | Bin 0 -> 92067 bytes .../information-protection-investigation.md | 9 +++++++++ 3 files changed, 9 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/data-sensitivity-filter.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/machine-timeline-labels.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/data-sensitivity-filter.png b/windows/security/threat-protection/microsoft-defender-atp/images/data-sensitivity-filter.png new file mode 100644 index 0000000000000000000000000000000000000000..c751747d7dccf3f5ac16a67f8f50f8607f484ec1 GIT binary patch literal 20983 zcmd43WmJ^!x(7@MsFaA(As`^q(hQ}vlnT-zIdl!(NVkA=3y9L)-Q6&B!yrS~(DOe0 z_ul8c=d5$i-fMq&*ZW}>tZVLPp1JSmj_dlxgnUqx#(hlo7zG6dS5`*i6AB6{Hwp@x z??X%=GHb2Y3H*6vE29BHLBRw5$LmCmW5y!~f>;i+3X)js7{pJXz0!$gw)iU~sqXOB z(ZSTl9_4rOpbQYgaR5RR#t=h$Gg}8U8*3E8M>KRm{PBHU+{V_`-VAK&fKrG*C)$th;b3NEjKYJ!e+0bq=>8pL8xsd-eS2dR9b4pmbL_u9+zeu9sSh-@N2zJ8 zi~_4-fv9dC@c0f5FjBf#AnD@<8 z%p5F@QGV@@GoqlpK#`SrtKyQnyXfwra@KT!greA+Nus|^3f5$pdtGS)eriSjG_nW9 ziO|_BS*75~ps!Dh>cg8_(VRt9X|yoEiD5F z<_l(K`1_2Y;NH?_L_}|P-e>p+%hbLamFVPtW=d;7_L!T16Bi>nII-Ipzp{eSOa9Y) zHsthl)1W6yLg#|PLc+C?M5ju(f5~r5Cq^UX8CZQ6MZT6C1;;Siz;c)8V5i+Gs66?0~2?nWv zEE;FR&7o3$9EFhHs<(U?z*l1P&YU`+<C~tvA)ecce)NERPA5}23D#dYv_JSVLCJ5ee1m%aQr-7pt7u4qgKgm=H!*!(gn!t zG&bR~@05JSk}h(n;35clb8vGq?C>)J&+<^nX3ssoruhm-+M7QDVg)7%gIU8xEd>V3 ziLoyZCTx68z%GboW`XNJo6TPc9wqc*SB@Dbk?;^%lVG=Y{tCGxe~gkb-O}5=EN?hb z!WZim=Bz&nbv^DP=12Cve!TpCU3!^fzR7Rkt*pHWJ4>l+P1?iS%bN9)V`mFwTfY7SS7OU=&+HQF4QWm6U8&|tKxHFVLBn0%H{?Qx$i+q29Fwx8$Bt#Y0>xN! zK+O#$*U$5XH_4O8>cm^Qip#cTr&6YCxIFnhgq)ymPGaAX9R1ae_tiGW)yt7bUREjX z-$i)I$y?&Z*?W#FGK#@%Bdg83VD$>+!d8RfWmHfq07f@)#RS&P$jY**-)96 zAq!$DUVLVH7d(;3%{5DyhGLCtx=R|r4Q>jI&6b0yJe&zaWTHVqymokUd@Wtw-h(SG)+xbOXJI!G zCyMZNsjK02dFF+_5wD9UxK^-L?6HNj2yQCZHPUhS#j)M6i0fv%zzpGQ60MYxcH$o) z?k`fPDHjJlY4+G@qkGqE`EfpbK8-F&%NGd={{26!)<84`33+i}2HKxlVuS<}A2LIN z&HjJitex02ErP;TFjhma`b(L5sfQ~Ox!xX*)(OpZPGDM;QTgo|v#ljT-H-NXrixC( z8GS$0UYyju>F*!lzuOg;=XYik8p4+ZV>>>dN)=icb^_yq5{C6>Z8X`Db-}&HJPa&F z9y2m$DW&^W9fc`;OAQ=xm8IMw5;Z2awe;E7XN+w5_;DSL%yw^R?F9nzf}A{`aklD9 z6BJ{6+Kg+|#Tv_&sk0Cn#KxD^+)<3m_QevhoTu?O)SR-&fqbx6Vx=O5Zl7=&vZx!F z9FI=Wr*DeE2a?oTl6F0f*^_`S&1#}kQ_)Nq(41_lx!To?yU@jWC)yZz=%(>5hUDFNgq7p=X-(w<=EIZ>eEyW2ph~BD~(bnp9Rj zBH(%_JU)_P{envtbNYGrQ45Kb+9hU3=;F-ksr7>0f;y^{;>RF;5{2&7E>%ApYmUeU z!Ehp&mtod(Iy1F2eUiX2`DA8>%G}6=$60x~Ps-j&>r` zKz$M^xvDbcZ|)9E%w=tT3TM(l{YnyPVl1p+_DZ6=`Yw+8{%~B?@JUaF^v^x2B;O1v zZo~9RY^<>HKph-APP4d$^WlOW#HMX7_Zibg#f+N1`*XQi1;-UL{d zQf21+AQWMNZQJa!B!lr`AR1cnDUFVE#(vqw8sD5(FJ6b>UVmcpHURO^;E76a32+O4&Bhj+E&M~#n*a{(t9g)bI7hG!S->4gjvF2=kw?SHGTcns!NSwNKwT1oAvj+&B+@XC4|uh%T>gt)KvN( z2j%S}CCZwA_&e5JO<+f#!TMwCQPyJofH|vac>;7XM!WaYuV!}Xr6&;LQd4BGMM=99*XCklU^mlOY zXIcaFqO!8+5|2%`4fH z=lVOz8IIEqa=2WNjq>yJ6S*(mnqF(Crxj^kCu4JK0%jPx`xYOxeb3p-i%{2~} z$>785st_5YM;4hnd~VMSrJVU(ne?ZZmLlgpyO-%wgk0aiMlxXQQGV`DOiWDji7TYd z!-<@JC$N!|S#SoY*|usCVq}BEDS=Mo$w92wcXFYNEGwv z-!j`+i$-;!K@OUIe{#V>(%x9h=sT^pV~AX=pucHB2>(<_+0t8DT2eGN#?aBx(RN;R z^s6?k>bBjPWD*nT{tW5R0JBEuyzGMqhi*3wVhJ`+5`n(&N2ISw^cNISVNP+TNcGON^^!!bBAN4zy75T;cg zb<1a%PYfH0KY?fsL`(+Wq{?Za> zqiC0ID!wIHTB6^fS-<*IEtiZ8f3H|_xW0>Sm`4h zKbgaSWECZTKB<`XY>DML5*HF6_#-J?iTV;2_el$ebLGm)o|{p$sFM2YB{SoSwatwt zo-xAGfh&dBr6w_XxZKjVsbu~E?dp><-)Xfdmei7t1McGdXO{VWwDw&RmYI_8@U6CA z+f_YicA9Y5DW_1E2wo9uxNL(gV0`$?nkvXOD{6BL`}p^sm!zB5ieFVa^v@j> z7@an!76gOXji&jDI4Ck0N5=(i=#sWhqlIjo4V-*nD6Ni1RkzS{Jfm5aD1PZ@!%W*j z94HoMs9^l(FohEpQKn5bSb(Emo+$2kB}EWDK>s5!Rjpwg<8qR%b{tG&zZW`_f<{X# zp8L(N)uaMqD2@`x)c|B+vw+}&FptI>Q`PvFW}b;gX0JAHU&Ciu$^t1 zPqo20F^h@fh+y&(S!$36{Q=(GO#M(zM#|bk-S-hVTUgCtRX{sUsx13wtr?~Cno26m zw1dn3gE>LQsuF94x)ow!w9lP4w9KO(X^b7)*F1iO2NfqggF9$PkiPua+3kF;$N|=G z35#&M*g!stmso63BPN7Pw{x#wm1qu@V=SUWYo{=baQEcDVoV~!@46{sWc4Sqm$H@8 z6wK{M9;?u95r2f3dg-(N;a0~zZ|gjAp%S_nz#LZ-*LeH*cZn3bFCVth=1%@&H#N-> zb5zqGuLa_V#D(m8e|8&Whs^w@b3}q)Dx0b^oaO0J%}(`jz~jXF{2bQ`fjO~8dwod zr94sl`Z^=5`+D-L<6h}nDP&=|(xY@Qa9bAMdDDZkZED`W{oTTC6nFTMXqqm=I_|yTt0g~c!^Hk*OSxU)>eW;8JfT85G|EtxPjv|1yOl>|Rm>B(5L5=IaTewrY!yt zc}HGN%g&A51T68O)$1vx+e6gh_MyE~bU)lorM?`JH0dEOaxL{U_eE z{`27)NiKKY#{o7MXa&CIXkT~GQ=LA?IJWHXg@*eFKd#I=AH6CjZG8a`f{LF^E)UWz z>S?`5K27aXN&D3rQ6shWn?Z@yx0*qFHf8qv?vLNNLa0#bXaj;rVgI-|d>FWR;{M{w z#ie!BxWxT8j`9&*TdeZCcUGj;*Aq#?`2F7Sz^hM>D_}dbplE`pAAN}~A*Sh9DaD9u zmsC1|cr%~84ITQ;7OTuP{|JGjbX{`B*QPGZlI2!&9Fgp_=pnzv8pyUr*MM2_S(mEI zs+rz8w8qNUwc-|^sAsVyF`uv{^G4Ce#&XB<6O$qGk<6{sb`*73?2Q|L8(rFWgdsYx+->V>b5XkPtIy_&iC9zA+5sMy+eeVfHe58$@1%d-bhIdWrYOe z1pSNU`+r^-7?^rX;-;gh#gR+}(6|T0wxqL$o0uNp)ZR^kk9yP&JP_&uLwFj- zu9G9hpG!pp#LTSCiRbeg zu;=KLN-yG&6K4V~Vq0)cCXTM-C(!c|5wX?rPk2)T8sg{;gypggQx z>w1nQz)#V99rfUxeJZbl!Hc!3r2Cx2{yY(i{fj+$ALO;KtxAb~A$XL}x|^Z)-b$y^ z`C-b?{&iYm2-e(d+acy$-j-`O1oZ&k-D~^k0Ty5ZW=)~gesUC0o~ayjW`rt-5$fFz zrT=Z0&6+|zF*};IeDCyuXhytWm+Hgv1ReYfA{CmtyJEGre_%IwQI&4{Xr_52RK=5| zu=y2AU&`z*_OIW6Sg^xPRyUbSwKoMR$IB$8-UB&IJ=}!Mv-#Y5>fq`QZhyYu zESdsmta;1C2!jw_#_af;EBBcL+7R7S*l3`s&zJ4bITtam?SpaaIlRjiIY6FvOS1-plyU1F&-{7oJ>G|K(xg&AfOo&l$t2eJWo$V~e) z(~N;f3HdAX_KN)FN?6x6qRRP?&pdupQ}h!BH!r4* zVS3KC8cWWgo%YL*CHzz)eps;i*&QoUX3&?jNr!mjd5xGApItO_HN>`aS4r;q3ft4$ zYjJyBv*6gP^vmkbT&KsVGBnH}<67dEZ!C#|I`oZFr8q$M;G)Sr%b$h8Jo|d z4_~pcsN8SD__llziX<1J%N?B+SY)~q6uPkl1(TkMXJ4+_E zmvBi8q}(12+shHI^9?w8&wqS%c$Zxx;*l61-(j>s_VWb0L6yu~S7L|*9eS3Mwp&^9 zg3;K+MbSb+qwiuBbH~fx=Q#M5Izqdkoy;`tIXy+No`iX0g#V>ezqhJCmnk}v6qlpRC_E$V1}5Pca)a_jo5W>&Uu3qI@AmAg^STVmIyoS# zx~aY$wOl;Ar`;enOlu(g zx|~;2L%8m#Q!(|mt2`~n8NYNlorEP`oyx8LrD^YsM%{#W;Y^P4ZjmUlZ3NL9Z{5x% zX@fHLYGw3r?-d$V;F8Dm$>HBriHnEjW<~&*WOdAFHzNuF&xTLN>pDse`JDJY;h^w! z(aslMX?6=!`VO`I;Z`FQJepTJ)+DUbZ*Y1!@Vr;dvaHo&P-VMA{idXp2V~bTlqPVP zNrXK3zql9ZySt=(+%o4>B(ma&X)QfCPM?@HH=O6=EDS@CJF-$rDfeO0Jt`<$Q{7`U6vm08-DF^SY7TZ6A-%EvwTWtcw79o%#- z!JNaUWz2{~>a2p~3(qGg1@De#a`+B05!tkll_#vhRxfRAe9VZ#o1w3@zMcP$xPwE4 z-_pp(*D=d(=DEu-Yxh_e$?xmrcgPX(mn!#YQxI2pcu)=L6lK=ImMwqyA;z5hbp&@I zs&}Gecccpryke@k0_S0Iacji^*mXp#fU8=AvvA})>7te^GSLr>l|v#Wyki+x9SIM> z+#r!gj<3&zMUk=6R4!{(mEq#tK({Z&!Oe{FH_}Y~oG+$kkh;_g9=0>R4FB(I%8&vLh^F&YKlV;xUm};GbQJn8S^!3SgIsi=;8XP} zJA|^{iJc(vX%71{a2u_oIsW|Ot-k!qa)@}sPk~2gDXs`>+0FG=(i>Ub%K28U;z zfqR-DtRHiPwT2=|={IH=ocd49mAm2gz1-4FAB|MRmt&X5?r?ri4jh*}jUEB|30_ z^M~df4aW9h*DB)CCFPSkqck2%?;oj?p5!v2Xg^|RO4;L%8LO2E*ABVleYbLM=ozP} z_wx!H3$MY;j|+=XA*{+V>dqT4S-pQ7rZlC-EibJ;YPgHXD)0V+p09*4d{;Soth)_1 zYjCG2{hCefFgiwXSiz2NK{6LaVls$su82AEv8vVw$I^3gA<>{qihynTCSj^uo>`>@ z64P3fxhYPpPS|KQBdduc`F!)c%C7Mk-`-)BM&YlLpGW?&_7)5kYvKZWL z54JOprYI?dd73lM`RrXJxP^}s|}yVLjPsb>63{e$%no{e;aSLg2vMVH&E)yRbT#01HiT=!oUqgM1w zt^*18T==(0+BcbZ?StS~S-dv_m2BC&qy@f?eqgV>pdE10l0Yh6_UHV<5|M#k?}T^YUvITu%`BN772+qN!_9>(3$M>{ zMvO#x>CF0gvn@-{uhYc2!hagV!&R6ur%AgbYZ|3lm-RP1CQMK;of$|4M&d|WGtQ8B zyp-~A&Vy{{_G<_Nhw2`{vD2}6x>O3^~ zL^)+qyoS)0&nqoG+__=_!UFLGX)&654lYa6=-`dUj4c|qMdH}gJ$_sxG}inz|v?nP3>wh(B_7Z?}PB5 z(gz*9>K?p_U#Z!ic4hZNtfULSK6FjQy?|&Q`7HNN-(A?>X z@Ju@py&?fF1KO8Uwuce3uQ@dcoGl?&i)y^2?Z!TibG>!v(CELhu1fA0;YQ=@;w z;?U0_*976gD|_gobA=g%YTt=3h>~6B&jdj<0a3MBL1E#_FURm)s9FFJT$@P<<>O^T}7LTg6*ITNPDRoM!P`wx@*lOxEOEzVo3P&m*1K zq5(8A#GR~ouuZb~TPcPn&uz-4x@jSeer0DU| zp5c7Mjz+2IhlKHe_28V{lgTvk^7g4F6o3B<2v#AcUZ0{#ObT|eLKyJx}8u83KM0&qXO(Nr_}?;eTZOgd#8bj6XM4?O3%dDjtGW<6xSo*gA}+@dHifBLKlca@Qo({82*e@dF# z)2L9ZqCTSv9ImEX%&lv7)_kSM9N~|=q+TpY14a19m5_ivv_Qy?6L;@{2qcHota~MK zY1-<7*~^*rhy|qMPxmI_rI}3}Z2-T23xnOqoyqPhtUSAVt9r09yz!Aoq76}t&?BJ( z=_o6-s%C@T;}Uq8Rg}d^S`=(fX#T3CqNmDbDagly^R8oN3hw!*WKU!%j0)-1*+>C! z!tqp^($ZMKT)%@JG@dB-UgH_huZBiO{>;wKK8QQRur$W2XoBdDEhmcGzcsT}`T;;` z&DCq`!Bm!Y87ZNJaYmat&Lv@b16jLNDaOR53`;d4DGGgYwVGE;qHb;W<&7}tVW8he zqve{%p1cAWqT7#hAYqfvdyKYq^Fww-Lw+jc@l~o>O7d_r#$AQ}dE>Ku?Ysskqm4<0 z&Fy_%<_GtzX<2MXZ%!{n%f82^)Yh_M|0#&M!R+C#Uq!=L3Il?*YHm?$2>wt=4nX7lC^6 zgSv4ZhpFr1YF@rnwE5d6Lv9D_EWW&E<1ZJi`S=zc z2vHCV5G5IiX|okOan1Ztj%@6e`h=LqTWWn3V78$@uO)VImjckCA}x5*Nm2&3Z`L&Q z_{GvvymuWe3Sa9LSOizg{&5QLxhJ%8Rq>VgGVal$_kNyEoLDfbICq(6C90S`%f!{p zJsWac4X_MC^8g=moXOnTLC}-B`~Dm`J!IMcMK_)A*H3-9{Yw$oMN*JVqNAR)YGg%2 z9y9cNDULwiyutlucho}Fzc?`9ns+kkjtu%!J+s8TBgZ7aPi1}8H9}v|&!ufgJwGK} zC&V+IA%4pWKwznsXn`6ofwiBr(p|YLU~SV@U7mQzpR=ESJ#J*4R~@|jD#A-4ws0Hv zyMF*XQOsGn(JBnaAX`$@BwRnAeOtn;sDiiW5@j7o=xW(lQC8S9T4igtqTq+=#O~-4 zl#`_+eRyZj`bZ9+b;%lbzZH)c8lj}S?J#+r73ks4$;rvfZ~V?nf84|5zj6QeyR|0a z_FJ#@db}UpMJ>~8zy;0<({J1}2i&VG>%S}1K^lT8XE6Yr zwp6qe5~cfXgeF1QMJ828Y;TAE2l2)US)EYg7X*va(qI-aOEI@OyM*gWw?^nWN9MWC zaMRF>=>USf@r3yHYTsve3TFY_4oKd~Vz(3$uAHZc>r%tT$vMUkaF*(kl%dY#+9=ZWQc23Uf8{6X1?fZ z_CEG*TTj!w>wkXvwFiMbW%O*z?&UF(pej_5O;UK@ZwWN}1)Ln)qR6dsZwzPP@fK<} znMg!2(ncFgh%&8U^8(Zn%^Q<_Nr`r`e=BeJAH+>k>dh-<0MoN-DkWhga}UFASGnD5 z8ukBVoyp4*L^Hp=M_B$+H~xEo$v+473F2v)P;Sm}dfqQk+?~L<^&UuRTrBO*yY9gC zaOP|abc_O2qkbIwC9p|joe$f#pT)tR_3AI4ew#XfeEY&@Ty}kFj zkt*k$J#)CjXk)PqrPrL~&S{<*JdsMjFio9KB4CRwSJU#Ut7hP_8k6$Z!xIaj7J7uH^MqL)zBg$y_7q9=ClAH5CTl_huUpQj=7m)9w)yI8Qqi>Z{$DMG!q zxY_l@nX#_&7~Wdf*CQeXT?iEGh##jR>_>hLSfT+HQ{E;T>#zk7oalW324=EP>nuq!OW!y9H+jRdyPbbgE1?gu18aG+~Wce2wr1r12U zFqw^`pxK04ME96&cHC!ioT_M7ygd_Ue0AUR6K+J+od@#>Xinhf&x3Tg4X1NtYky$d zR=re*`pQk+$r45eLZ`6O}E;szNWNp542Lh^%H#GB_jHRdN`@-E`1iI|EToA-<$U%#1w8kT44bKC9iI*{+gK&Cu z|D>pzymKd6=6zJniob8LyLn82TJSj$(N0AwtpU~lhOPedt>Qn0n*OWg7UVN&o#J`G}=z%jNi+nUz9gA2|kJs-wP71HHe#DWXxftFHfALwK3=YJb9->4f&j&9@KEcX z>BdmdAW4GN#WZ*X+`8Wy)lbv6f+t10$&q#`EaTYu+XUd5wI@x=<<<`77 z?a2ZKZJbV>;8@bTBwedp+otH(S`*ZHu*qe*w(oLPx7=`+=uvoFx9!;T0=@P}GjDPf z&>ILl^Rlo))wnMN7^^P-2sbZ`UGpsYiqBl3RhK9AtPAU(uY?FRZrMz9JsoNa(f-^{ zZn`c7QHml8A~W%u-aIW9ea68~)bv95)cgZR?p?ZC2RU90Y=~h_&FXa?=s`9y3nTLv zErJja{oAiSe>gwxD(>Tz&;*gvOm145{Uv5du>Yz&p%HJDSLnrRca-j0Z|pcGhF<*o zRbja@Nu@YYg#;_>phXwFQ%5hVn;i-r8{75V#r(0{7)g!8IruJrfRqqk663{mh6XUv zgE4$$>VDvKYh09xQu@47GeeO-kJ+OORA*qLcZbq^%xp}94~y9H5Qx@GRz%s_Xiy*^ zn4zK6ErH|VPIdFXd z!i;X44Qz9-miXY(58-O{_Q$xSsE1(VGdx%jo>D-KE(ra*g0jQ(-8~V;Tms~O_M%KL zXy2&l*D`U$eO6L1o;oCdNX53dkXj(AlXA(xX1f-_EKY#~^O{|bV#6;^Cd?5xOQkJV2v5B(+{2{Hj zJf)am+aU!|LF5@vD@CId<5>eH2_9c5=H9ekhghDA@LS< z!)+OQ5=zHLRnIJoAwv7KXWdo!>j2cCr3%#40yB25AW!wAeWQ^0lc)^q~hW{sy7)KfZ zziZ^!Xx9k-Ll#FsK>9Pd1z0^#|5EP!ugl}#5*7bXpXQ&-2EI;;Y99*^?)@eYsDVZ; z{#vH(nB>|EdqGS-UvFhQ11CqWCfQGEmcgGzS2{PhPT ztaSGSQtQI=Q^&CMo7p=zFv-Y=jk%{wRCA5E6s+vog^l4&7JCkjmBAY40+!w<+NRge z)1{C<6!EuP<}z&%hxGjH#j2xG7ksWC!|6?LslGR&TI_8;t_3uACen*{5n`kQL#16Zd?g?MvC$0Ny8Esdxx`h zGCD)4OMLj`et|G-@t`f1V2w|OU{f-#SjkI8rGw3(J#}j>34#xm9GGGBv2@gEVDp*l z4e`P7BOGJHiD~8Wg^?q{v|Sy+F!eBuF#326QMNWdA9&%yA5m+|@i*tw*KY54ENj$D zEm^aUM&FFsHQzjeBfF*+tsw+(;=z~Q?!)-E?Ogtav*v9Evx*T2L}GxX7(tkI#TVC& zhedbQ7MWg*kBG3Dk@R0=G+JUG$l;LdiDLbSN9Ew4V&>sttOj6usYags!=Q2p4ppCq zBn6XJ*4yf|dr#AODZkkHNdnM&TqtS$@Sa$^U&)b?43X?1YrXm0PR)-N8X_Z|&tp-I zc0sbzJ*aQ2F_Pi7i#5^f5tNnuh}eyVK5-@LEJS8yYz#GH>9{}`u@0p}?fJ=*^sJ>i zzM5EGcPt&bd+S7J7=EhJ=FQpn)JHS7V2}WZ7se*fRAZt_&oBmv>CXe(@{@+7U5b{k zG4Xhsx{JYk+6MrQpn%1QFh(KW_0IE)^dwzM&sX!nWZvpnQY*NnfqUF?3}2iXiExP2 zmT7VEkJ>FvRJd>PQ&LhE$|=zsicnl6*dycW0#m8N()KK501FV1|_ zQ(L}9M9r2dDj9SU3bg8`9-Nyx4Z0K_VY_nj{YKD~L>Y{qrRyoo5c>ErHW7uR?OHdyEV@nz3oq`27iMPMv07+p$ObgIX@PoxNd>wVjHOvnfY;mVRDd{xW6fL`F+iwNB@3N{1u}=FLXV*pyKMr4b&P=; zqJL~UUX7<0ne>D|wYMY;t^*UeFYiCl<`(o3Pm(`g3`jeD;_eF}Msup^S~-A)Cp{@` z9}Z2xuh@@Gd%3{vJ5zb~j0gV@>$XT|4Ww6}k^VU>vpKcn%&hQYKa(qLQH|f5hP)8# z)$eV8`~iV0a!}Y-Ky!myp+X+ZCjx35`-jwuoe;GTEQ$_qb1-*sYMHc#orA=ZkKglhF1wawF z&pxVf%@{Sq=9HPIx!}HWD%aNi-QZFKFI*m*t#7|U_OM;sZ~dhPtV>>vHpVs^sB!ZHaKC}DtUk~3ZQ#94aqgq%ga z8kBJRl&QliBGmpPF=>M$#K2SX5!``GEGOa6>r_^1xCmRooTU+v$UhyM6#us^njLqx zS9%R1FjG$~@9WbOnmt57S$1D|MrQ<}6h7jagapd{K`jA*0dw>70uI|R@{}@~{{{vC zuA}a5spjLj22*S6zsClMOo^~(e)Mp52r#lP)f9=gx2|0cEY;2qmMAX86R?S>k4)lBKfF3U2@}WT@|m6{O4b>= zF<5TS+#DNIen<8ul9VfO-nt>;-WsKlA_akP>0QqWhm&TzanPC&14z`?`H4CU2V$Sx zR1lIr!?Ygw%!HUtd&N(wl_VSm43bp*nn~ zAXN*TJjJvh+1Y+dA_DM(y^!F#0LNZ4k`?=mys|2bUVY5NqaJF=-OZ&gszV1ZABXiq z?Y9Fb#dM)0;K|%vliS$NTh&|!{iHRp)^7nY_o^7=F2$!rU)XE~(4YyemoNP0_F#Fn zVnhV{cM)Jkn^+o)oFe1Ofjo&WfCkI6kap+p@r_c<4kqcHiH05(+1z@L*7wCSR(xr5 zcH4stu-0tf!x}FQM431!0FxB(^>^+ACNti9e2OGP<2g*L{0XJM^7DV3@6{xMY^+Bk zFbFtBCmi*FIdB$&5^eFFDJYfJ-s;mo^()`w82<-G_Nlcw=H|xXhxk&Pf}QnSbv#zu zHNrCS;Xq*k&O-A#=k_mi}mweGxCfgrQ2m@o9ng;wPOO6)nRP z-;8?%8(t z+V;*n?G==LhkZU56v1kO!vUAXCdP>Gb0cM^7U$cxE)`d3PmvQ)S3L%PY(NWUq~JlF zpr%JQ>7+VEq?=E@cKymeBD7EpThfy$0FX6PjE4PX|Hyyy`X(!;{bxjTL-82EzXd8Q z(40AtE!locO;{9GbDG>RsRprn;wUa=}pI7Ty=z z0CtI6jF^%pd?aZ!l-1Q4qdnDWwv8Zog1Ba@g;+R0lpcVseK8NpqPEVn`;37J zK{s~0Q-5g`JtdAFd~YMrc48c)=PYrzv)5%}M|skdT>o|DtS`mYN+v^PTkrI%hb~C+u7cUFy!r)xA2&u)qgd<^v7`?dQaH%yk=qfS8C&j4M1&d z|L0#UfB)tP`^y|g>(o12z?RqYOUCG9k$iM7f$MV6w33eEj&oUl4_{ws@Pp7=F^icA zXC1{g=b4f;;gx61Wt0 zwees{yflzd%{-&o-tuuiZc^JDys+dYP){H%$8!>W`V{aPdAl}_?wGUT=i@)A5nMTn zxu`Q*{lWCB2OvLRly8k*{Td*xnUmc!ANg?jmiWRPtor-`@yAQ#d_xA5ds-N0WhCI5 z8Yk73=^2hrSV$Nf_X9=w7q(9loUeqsG$jK5E=$2}?KW&J;;0zF7`+@Df zQm^vrdl=T1O|3I0*VS<6*pYN{Uka?k+{A%G{ABaCxuh8%<)!e3{cv1?z^~OWd{G}& zOrB|!9E1dWk$OMp#;;3Nbuu}w;^OQ}NrLcT@lfn~^`toU$fxbBy4#hQX|P zUppHpt_!r1Mgm#Cy43%tlIsj=0$Zc3iXvq_voipE@xmZ;|AzV@h*pnenAwPK;e-``ksyPhm_pAt*iMY%m zU2g_z6Zu5fIOw&iCdJ1Cw5*d-h+;TkDNECpkfBA+;0RKc( zWWIOI5eHbhru_-0B*?r$j*JEkw>^T+N4knk$-!skEVG~;V(Me@hOZ6@&Y_$fi? zPKDQv&r*AS5cYqpNS5$_)Q>7(xLeiEHGKWdM;`OYM8m!wr|x<>5SluL3js}z{C z1ZD=oB!;KW=o5EyS*PpT#srG{%7-AXe3g>bDtBKH-akAHmo+cFb1S&piBcwo59Y>!RHwA@cSv$T=%OJF15A`H)`v!?VHgmy%mgvb&r zr=4@^r~SRNuY#O2DMQRXPidOU(C9gC0Yb&3T;kE8h*(40Z}6;#$vU?8pxf__tBx-k zi{IX!f3B{9gGlo3G$7w%PDYEho*`6krryy{`=c!<3@v_ausEK(Jv-!aCW&3q8mN(W zVctGUnf{nyr-Ss{Rok*JYSgBN|8kM0m~G;A*Ij?miZ5atT=D?~aMx^r$_3cuX(+1UXYNux{ z)K`!RG%g#fukuxMUnqn%G$bzI%FCf~Aq>fTKeqIatJ}QnG;oZJ#VosSW$ZrF z*&nyNnhQfjJ36Ox;!^fwwXP5KX&0()s3R_@)23VE`{fG4E_aiaff~Um zN^f*(;e~U8ot0MW7U>&&mV$~B>WVEMhiywc8bYvbPW+tJ>VMQ^u4w9o$fxg~dU;w6 zn0fbq_nHt?Dh}K|r3&@isGLH)vgn*b?J^nGL5Dtnj1<@)aMJtw zBvCqGk$6N;&9{h$VgA;tH2)^nu#WpdQo5a2Jz!@|CDf4v8T!f@zvbx{^_`S3X^XWISxKr3O+Y<@2DWMu zTySi`Cn)Vx@QKd>V0YsBsS2}7)%)ByZO;}&prmZc!8>hfl$$WL?r8=3_A(>c=L%iIj8Hg??D}M4VgntE$X}2Ge?7AEbhFnSaEK~*v8t4vn7I-- zm*wZ@HSI-pJzsnhR1Hu4bMb48Id@jYi9-C>>*er|b?S2l&%8T0`QncJRXu6n$?!Y< zB!%7^5st$JTdL3{py&I?$XbP0xtj^KwALA4>&%uezCIkL>lUFuulPueQ&AKL(Mqz5 zziOg8kuNe7B5A?9@(+t?%2i^foVGGdzd}0$J($+r>+qTJ^wD9z?3o{K{`wbIq}!~b zitkO*4X-hi0A3oXm@pTSMY)ImB@7@w`PJXK>9ClHtvx17t4=nveGTenEA)*QQ=#(h zAFfD_?I2-8hFO+Z?lJvl)rz|gf+eb0)4kuxH9Z<{>h>j3 zqg7(qMVqN7xcm%*;3TZn$i?ArjKIC4TH>kB>^l`%!oHwS^P_~d!BbF`tN+*{3cFSW zCgO+x29qA;G`fJqSb z=z>yK1(ZdCa9xq0j}`zk7aJ#68%GC}7dWq8BjHc~!aq1VdAZnFS-YZC5CGpHq4@tm zT`Wxg4yALovA00szaqdvKEe6>MBUNS)x*Ta0>!}T@$c|w|NL_sfSH{Ma;OVRb5BDo z68z*ZSj)u4!N$P~rH67S6bZxrcfOm8nFY$lWAMR$hJA3fx3_R`MY#l~bR%I{e}{ds zakaBR`FT9ejDkXkBKJ}1i)Ys1ijVKh?Ulzz(r|x6wkfUkFKk)2hm^5#WiO&u3!=oy{&8= z`wTW9B>K12&SKDsiFGz1Ud_6G=|v%mfA;}WO8;+DBi-KGBI`x5A=ACPKUzBe7B(C^ zF=e!B_}|lU4hoiz1H=BiWf?ui`tM#CpVR-To57ohia1Z?_=`(CRx$LV)3*KD|5}fJ zw!l~t-NVd9-rhs%W0BN?s*+f5ktPi?kZ9c=4`~!b!1nz3`Vb*X7>=u8- z^x~h^RGsyz9htCh(yvtENz^%k@{g08ym;xvY?ma07tKag~&E3>s*Ox=@b zE@xXp>vPrcN`+mnv8!mG4@GNbec&|;7-zFp2K*YlCC>SVYI+;PCD`V<84T0D=T9=i zkcjR~LOeQ(ID~grG>I_(2VFIlFLCf4$w3Y2ny>Jns7`yKN_!G}R_zg!HZW)6k}KxC zQF|(cm}aL0a=CS@@M~%yyz}mqU}$aW(zWXJ0h5%8%qb&LMwwzNJOH+}ch&?Xo9uHR zKXU_Xlg|VLZBZ#^>MYzQzWs@y?b^8ij_}+pAW>}X#s)QgMa$X&a~a%CwI)6)Ie=h} zZFNmPEc9w(5?Mi!6!Xj8|DdS$Ddn`7b?Q3d?uqaHyUm@4;GFwh1~(|YLlbo}IP}=7 z@4*38B$<<`>w&s;Zm58BvmbjitZMJ!>0}lqtThJmxXsJ-u&%!Ig`dvJlq=w_pVW7f zGiDyPCpiY614){EL&bIy?@q$7DF&Xi$6Jo$lP(AB(SA&qpBIzs4zk+)r0Wq>CKb zR(YRLI5@u8;5}TUVe0aKI<#fGJ9FOWrt%TlwuX9nx?aAG=9255U7t2|TF&ClyD{d$ zz9{{m=(D7MO4luh<0QP2Va6V-&6}dw8es^{@77S;Gu=3_8m@TeC!EXqRi`sBP=$^z zht-dLF7U+STS3*OSkTYP&0`2 z{LW8H6P18jSMyEISfFzN|6@z${Mk?<;aZ zt(j86^(?5Hsq+NItgWeBgntyD6B?gC!$Ox_ss#b%&+Lf^zkKGBIVy#-jTNpk6*qfeamXB!$_OF0tDZ1QP8^o z29R?*a0<3!-w{-9jW`$Iah3+ISB?`D4r$G$6UbDnCv_t5tNgp^gr{TtG-M|RwSPRa z=e!e~IREXu8rz*T^r7>*jo(W3^0PbIyunZZ?_WmFpd~Xly(EUt1P_j@F1?qAqNRcX z`$JGfPCQ_tR6Wi+o!A#h0u)aBt6EpvHHPpo(JQ6z0Hb!hSzm_l6KUVQoK z17Jd=+V}zJxE50->V(%rq}k;k$E^1lV!t=8eRC^yxibC39Y(t)2k;LL&v6?kIrHE> z38obdAm}Q?1E`Jn3FHRI#a>aueGg!sE+UGG4ue^Ji6~nW%Q!0meNE?BhCkm-2TD>u z!9WRt*w>ew@6IJ06Fts38M_&n|uszv$uY5k{<7;TdletT;B z++$=c{%p_Zxt}Gj9aZFyu-e6!{=~ieM#N`lW{-J$Zf@L!C{FwAxdtzL%VF3;UJpJm z^8F53WQ*19?5{q2+>aK>PUAgRo3r$r0Aqv5Vp$0PA+^i;bu<@$xe)MJfqhdhHEZj4 zL?k_#(J%AuO#)Q`uTPQ!K7B2}zNE!@=l|v(NL7NCSriiig`FenEFNiR#y0jWCAMui zZsHzU7J5cFgGc1Mh}`dj=PO=3qxBD3kNm;yci_H?2>8%qGDYa1eU1jBuG;rk=J~p# z?49wm3J|I^WLJ+0cW8;STXGUhQ+uEResg9Ow24^_+u1iJ2N~-JH;DB}8NACUm z*MK03~~7c@51y5vo>&BnGolZxJzY zi=S?zDyq-HN#(z$d{47h87`b31v5>rzE#$9#9lGkDA&5N86NWnZR@4N!ycQkQ{l3- z*pVYvgOjTaO4`bd$?Un4nW@dX87DRY0taY5gJUW85_Ns|?*Ppf2I4{6*qviM*{a+e z^WTCC<|SG`3?8T|L;uVRZkmf`E^{P*Je z0fJ^fzQ6h7W6h{?8@=~eD`A;?(Xx!3QS!cPNMKf{UE_FqYWJ?cD%==8^iTMH!@0wS$brJn zv%h$5P-l}L`-^<~9lv;w?b1w(8dKA?h0U~TQh851&gIY+CY-C`Ng37_Wu$$~a6R>u zgz)EwAe1l$GQvDY!H0cahYqxs4OW`#S&fhAQ*!eOtHQvN6oQgRlQZEzugj79=JoYS z3US34m$89As@bUJX^LC&Mu3!NP^+)FM`iABqsX_%vM24Ec?^%$3@TljAs^Uoa&=BS zESp+64|diJtR=Fbk0Ku>d#ImW!`@LnL9zD2Y}WUW>Lv~#HUAD<=-7EvnOMb85}`y2 z+EZduju3Fnw}z9ZSG~`cT2&2E$_%n+EPo+6NO93mZG+j z$CY_x`J0-{XS&@494e<3osCsm%-!HK2c^)@%8zL-%An zC<>aQF8A`a(MsQY>>|anLTh+=l${x1nO6I<)0hu)ChH}36%&19K2n+A?VB1JxQCPn z%qj(;{Ix*iZ+9eFzTa<#i=+xfK+h(RM>_0d9y`RCXmpWV>MIL~cyIv?um3>Ktf8iHXu)Y48ct7R0V1mp6TjG4c?5?ZuGKVB=it)qRmgHw1Z-Jdeu8A0hXB(9jxg>GB1erQ z{8)PbkuxpWC+)f!mhL2@@BnY7UQLkt*B);7J}=sGfY^0CXcf=)-e zi1`LR$Lx)S4-JoX&$z(O4G9+YJ@u7SL+kwoqMKILI*HCNU^^c7kE7VL7KrhHPw{bNUz6HcaGFq2ZRzOp9a45nNC}GZi)O1V6jvKkHT{mayDQ-2 zSxbW@bp$t{_19G5C$C`1e#1T%?ZQ-DoN5ECXWbThSC%Kef_8ZI$EzQXZ%{L)IQOwH z7o%^R9dy5s^aPl5wuOw{8-*!R0=$ssfTYGZ)NGMcNi~Iuy$O^^w$RRD+ro#@O!sCK z9oLT0onX3xH#IPO)w#v(>O&9S5d|Q@yzT!?Xe?mOEidt zwdRD;yurX%{~B$Lzczx$JJdYWj@SgxHU>*@frrW-kI74eiFV|})hPp~6=UB*`;x|k z?vpB2O3d^iGSwZdH14UUdctjPqSWEcT~Es(MwQ-Kp=ls^PSHGaSZMR0&KN?pM{f>8 zGge;SL(AfhJ>q(z3;k?XGuo_Co=mI9R+LbchDAt0()c^k$A#{KDr~eox76^cBiDqx zg6~_tcLZlD%}`Qw+LKl4Nnh^tU>b%_Gav6upEwAhvUdwQlIPsnIL()#P*Y-#+cDpMcZnJ=ljaS8rBF?un4$8I4}pcg+nnhwFqWTBF< z*G0%X>L(~d4Qz?10lSz(Y=Jk5x~>txg~W4=RdgYqT*PV)s3u5(>{5qmlNA*!@gh^$ z_2+a>6i!HIM(tMbAiKVMLb!)3KhKT2ndier@cD3%{oWw%%8M7qgTU-9G$$gE#KI!4 zjHK&VD{*r{bdDqCjzTtqkc`)KtTDi2k?1bh$B|g8=j+}DgAS_JUiN8{J^9H%c&738 zD+RBd5D}*S3Y{G5L#=X>Q_aWBo3fQq!voKE8$Mc6BXv42y&ukEms3u9pWC7%4S#^3 zW9N;K<8cmf<(MmWqcx=+)pTz`V)?V)06z5Q(S7Y_br4Fkf-WII!?sO2`vV%m(UrSKK5Foxb7cvOyfpLo+e9`WOX{lY4lDFHmj z1^`7X{k4#KMjcDxuYl!Y^{3ED`3I{Mk3YNR8h}m@^oAJ07YauoPiOQJylk@?fo?eP z!TaQPwQ>=H5|!BWRPo3daf`5J#CM1Utz45RL(!^IzJ(&5ymsraY22*4S&yoqjaJcy zEeD4>oFaWM4N>;f6#Cn*v+VxeU8C5<`SO~UUa_#z@{RJEN+QBEzWv&Fv`?H68`qj$ zPLJ&_uVxfd$bwJ;*(__0aQTeP22XTONZzbR#k?=eKlFor`4~;Bp*j!6$IgkW=Z5C zJ%h{R(F~A*0*O}&M2y_QqxtvBGXH3G_&{c>ZRh9M@%q@N)1=~3?w*zY5jM{**3UZ& z47XoQE_7dfHLe)^`1Wj8G%Zd#0Z~+>XfggIZ=NB71juA#?P%FTsx-ElOvL{pIfmkt z)fO3>5bqR27zlABe-k_Af9~aa@r8zbDU$)DSti=KnlOnyEQt2h{)dhF1$FT^8A!I}&u{vMHuO;E-Ukk3xF^0-=qz=@w zdAcQ-{pY*m>Hs1@x`HsPlm%O>UZ(2}E#Mg4B1`jOZ9HxF5gI_bs5MXQ;anPB$SG1}bKu^+5TZg=S0G8w#P z(kfNe;WRmdj6em0k1}9z&wgxScgG4GMiLMJwpuLBwOb$DdI`bfl%)nM1eC|qAt%7H>#8~b=%~Z_lPGx&3?VS;QaeN+Ff6O z=$;mTp%3&|kxb;DSN}JGRMHF4-`(Uis^R;0B7LLt1a+_!Zi|4T2>kkeg527CTc00p zC|y6-y0SU0=N;Q;Z;Qr+g@xCTajhdaN7!20N0kIiEciv-@{`QPdh`l+>Z@q5(S9AH zIEIYH5fj;1)8k-#u@L(Q(Xs+2KHEhG?tVzYO5?bVW^1mI{%rKQy2!8%vC`E9RIOXP zD8=CU_^cMe&VD&I@6)w&IehBni9u@GxW`<)4y`>7>MtU?Ja@fq;@|Wn8trC7{J{7p zL-vCZ!NEV-pgL|boJSJ_*h`Q_PfK@(McCJZE0Gl4MV3LQvKo zx@FO)i^wa%7pB_nhPdsR*Xs`Z}*+IiYeO5DC|R zV#M@nl$>9s%h}$|XeHNdq5T>)NBOTu^z>>3EM)&$H2(mnd;U+|`|BOt>-fe0E!>Xu za&$|O;rKZuZ~sXg{6jJ1R~h;jCfR?E%YVL#g4DVH(YODC{-3%t7=3ud|9cJrxzf9z zI6W4r2AbgexUcVY!PLmWK7n6u#J?1hH7Mr!*RuZimGH7gF=hdkT03*@r2hktn3?Q< z{r~@r`u6|Du72XuvE;q_NSlRYJ@n^Qd|Gadg?01N!BnX&$q7ue832v`+&GUDud9Bw znuvT8Xy~JdA$uo`S{}r$=htS5>a%IP)?Ql>SIpMEzVzgh}xubni%RT-%zct_rdD=UN^;!D@5uF@3Nth zF>w-0?iD-Z)0|P{rtF8p<`w>NBeD7%-OQgpe&i&Bd8`KEDd^N&VvB|9=W&(pnjd#u z^&QH8r1Wr-}d%=)q#lp1(K7pv%x%4R@bKY;5%Cc(ZnBjt$$dwAJ$~B1lVg% zruuml^AB5PJ5`5ZxZG%{nX;DG(Ums(;1!(F7R)p20zupBo*%^(W^td}tcJd>-dT6o z=6&+`u^g|ccXiYv@ttFb=gK}Yw@Rmngmg`}C-e95g;Gw_C48qqWtZ ztF%w%CMnbY^1++Mwu!b^g15h(c5V8Ym6ri;1k+aqDO`UNR0JJMKW%8kJk&nDQqXdM z3K43*x5h3fC7%x+D9-RmyG=d~Q?LNW{al0O8@Sh;8*%sCi&@``HyT=LzN|Ypn!G$a zI&}U$jaa3;9;~BHhL;E6+c`bv(Cr=!-FHw_r(QNJbY;7M+UOm6t6Dj#OOu~1yht5Q zdzHpm!JhjHbqoj+1|Rq!=6{AEb89-(_*mL#sP|?zy5N;l=MXVA(i-fOyA!#n?eS^q z$?+EM2TRulfIWn5=)<8K0`bWf5nEhrV4Qs)hamJ5(eoAM*Yy{C7%;Tj&`iaIq&wl^HW*% z*HbYTdU_Wroi4bp>k#k6SNtA=7LN*#yj8XL!vH_)xkW>*sc6)x&$umS?C2<<3*%2= zFx7JEaxeJnUB7Cbs=B|+Xu->TjE{HSW0*4LGmyCLY?no~elRMyn89zdbCiPlz#7uk zjoHl#qTMvPbjM3qemqB~f;`~OuZpDPH_lp=y|$~GDtxuTe-$X=fSs!*DFSpac+dX& z`r@9Lwq7Pz47oYP_pQ0}II+=snl4RTNlnF(^JcboFBS`fH%@8g^(5TI{+zg4nf#IERMVF{^4s8;H3b z(m``*`A9AQy?GDah?a4uG^KZa*SsoPuLtR@!R3*H?A<;Dsk*~S^-ls#<9%*>(P$V^ z@F~)_iJgsM5a40XC=*MQzsx)NY%+m_m=Ilm=^ks`h6y8=H_x)VmB5#J>$WRW+y}X- z?q*H7*MxHYuiu`xhUaip#LizxN^a^-vjSR2Bb6hQ(XKdkkvG|&vexsa(nXoH~ z#!t8YDgY@3?aDTtco<~fmwOXa)3b;7bD21^mk}gLUOP*&gysA>s)*^Cei$zlN`&c2+ZkhVf%`0`$FI2a&vjB6Ow(`t=&C|ckEyQpzv~6j1>j(?l zr!K+G!cMbzt9n%JcoxI+NR?=fss{|EACcW9ryWa){idk7RQc>J?Y0jyVbvhfIhBhD zgxv@1!dC2O87n*J%C7LAT7Y}iF_;`uT|Q%~!D{|Y!;>x&(3T;1)I|_%?X!6?!0wVd z7skjmQ8#%k@`rT|@n@PeK)g82bkDC^4RAn#fMAW}NXA>8*+dDW35wj;B)>DXR1HDyI(FwMMdcz4Wt)>b?WQlHcvks zNFgn{|7t}K+8v(GD`}D~&XLEsaVIJrLjQm0wlMLptZ5O4er-eY=f9dTHa`t+3s0Myk|0tY{8y7Q z=em&@-i}sHr~9v=$g&0%WFf_WwRkM$|JS-za`qmQAGdsk0Xw**$~kKY^->|g4xbe$ z2Q%+;p){Yva!6#RK(S4|g7tEXGso2zBqxfFry7%xN3d*vfpK6MpODo=)_S{{jPU(E zOBAHS$}c5X%qL~0v>ST9HQL59I%NSlMG4B^Vbh~&xiNtt3?*dHI{8{u?h`_0gXQKXIq#-wV~i1w0N ztax71a`E1=BAO<0#Kvk1WvpGC)n_}2k&Dn`f^AvKKimL)97rOY4c}AZyA;feDSGX{ z!fL?R*O*uP%W$_;q(P|$!|cqy*P79J&^8)F&rI_hV}Cf$lv$7MMMpap&@)_RJ?x6i zDr8X{we)>Id&}ON1fQta;dWqc{siX8{5ZiW>ut)@QIizIrL^6&YY%j@V_4jyW0_t_ z5*lIOA9^oCU`z?1u77jJekgyd;EoV%_R0U_@AZjBorW#1yR~9iI3ufN5lBV#!lwGG z=3g*igFgCH3KZ>pD7x;Chsb@_%r__!5HlwF_+t$^k}Q(#74nL zT3;iEOWP+0+K9E}{R(t_l{bnnsKc|H8SkVk4(6`4(!^RrZ^ zvin|HFSkE~%mL;=#IKtj&&Tc|7%8+-E&Rx2&Z2wFWBd&#fxEuDUxX_dHat!A`Ks+znqW6^yMoIi3oT=rvThgz_rpRt#C@d^qT` zZzgaN-;dnhO1y{Qxfmz6nwJdUNrV&4sWCiaC&gIYF z%H49!0=~Br*nHv5y-M!y#OGoY2tE!;mh9_ zexM_q@OYY?EfJU`(uwJfu?w7Y_?pbL%RW0ukQK|H=13HjGN?q9b`2D(bZ8TfivSwZ;e5S4f zU-asD^XU!33b`=~JLfeXpndnbfJ`d`*krT8Y(W9uS^ND7NT) zi#t?cL16HJN!I6h`vH`A(HeFlXcrG?0C~hVN=SjvyjFe)yGtO~UcJ}Y?6^J$ttf}{ zZfxS&Qvxc7h^G)zUlYHf&L$<)g-R^q*J;+>ffk{TLpvyrB{Kn1Z(-|2$OI)aPiZpF zmv*Xe9^8@4cDCE#9ocG6qXKi)#)@Op5%2BIvGE!_n^j-ro#UD$EKuRPa_&L%04twB z1hjJn4lO6Y!raM~W#WQP<>!uCllga?Njb>IH)^|r4}Jr@c^T&GCXmHAzg$ER3+i#B zGdbe+`PQZdeo%sAOM*h3mc{mCw$~j#%gxNWFRyNvJH8i;C!W}_?A|n_*7mgLem5xP z9eCH0oA7id>r!I6>0SC~!bS1@I(23h)#B-^C8_J-17?g7QsC(z%2pr>`^am6 zTNJbVsl+|!aPw#Fl=qJ@jep9%va+%kKi1^V|V@2Zt-tAJ{L zw@k$sv)**h7ZDK^xpQBY&A^x*e1mf@yVMwaZ_Wt7u{U31&hn&Q>d-rwd8$E-AWs%S$_m3f_- zqWc;z@9|a*2^{J%#!NTcydS9NMKGUAOvQ!*PJxh{#k$fv8sCUNSM^~Yk3KU#=aj@% z`K7We=N?t{dVH*rdSXW!wT_wM0*{eJ1SV0V8*@su@Oq^HXxnFdLf|)dOsW^c;jAxLK@$^=^LHuQ(<}kv!ab7ta z$g|*j(nN=Z2&vG2Qewu@NH+SWP*e2gks%8s)QiS4arJkC)219nEd!evDgb0*Jllbv zwO6rX&M1PELf~&-rH(D*$7jb<+b*jkF3bRP-mbz#FUylx*8)3@w=Yu6$*vk54A>D~UI zo*c`R?S3OVj3|EZyJ5L+s9@7kA|&|evF>@EoBUCB$Y+& zZ69r>*>G=GuIW5n`pIu;Vjtf0aW)YB9u80Gy*IQmuL)f_4(#vUz8ewF_}+vX$l8D| z$^5PvXL(vv-s(N>$Yj}vxYZEfn0|$pE;xfjk*=F4o?RB|1W zF;SB4L-g_|vF*3F@uF`)(9m!;4;Dn?W*!ic28&hAgj+qRdJfs_m8wAc?PyK?JZ_Q; zNTn0^?uOYRb%|L+73A#FD6d)G{U|a=v{TbtjT=4{g$7mEy5x$t)<>Yt!*fdMK|UiH z_vT_;GhS8!E%#W$F#pST_ve(zB=MgnYG(^heX`)WoZi!f=$Cl=GHPk|`UnMQj+~b_ zwsn2K9|EyGkeTA;AHA(jF9{Dkv?SvJB-dgj`$Bi%e(JTKPPN?%BBo*rW?=``=YrFh zzH^aXtKyQxC%R8^a0D3V+p!^6!F8c{pm@lYrT}MajZde;;?Uh;%2RQe4?66!GspwM z85jf=kPI;JHd3x?LG~XKKq*n1on75q^%VQn)jqpd{&*N%`+0HmYRt;h6>cZb)|x6a ziF`XG>TFpa514ap$xlXT2wLXOTE(CEjhmX+I>6a86ZDP&cm+Xb!pw{lv<6McYFm(N zRP%E0*I(Bm7u4#z0jTaqi4!b1LkWS?HA(7Up6vAlQDj{y_HrOP(k_a1!fCllNk7Ik zXe=oMt6c4D>&uNtc(E_nDO^jL(~|grMDJLB<8DL|5dUsa=wrEIK1i(W1vw3wthm2M ztc>t8QnJ(?IsUx-#=OqJh$(j$kEH~_`ZB+U@On4jo2e&rX3Yib|4nP2=xjuj{g5?I z11dxoCdFBf^wEs>jVH?T(Lw+a5(UaZGh1xvjd>#aq$NYO9gR)JixQvTj!L06UKk?= z1Z8KDVw3#QZ}MFFeO?M3Ly5=E1~R49PoQpJV#wsa5Z_`D&gQ?^Ixa~V;0}h9>;yhk z3ufxsWh+f<0|C49SHzAr3(gXsb{tbi@nF3THkZ&|-jj!4j3>sBnD`^wd}O9O4-ohL zZ=QSkrMWXP$SN?<-+g2L%8ecl8Y4Hu3!~B>(k3W^r9yLL6aH74~{M&2~!;DdTY~XV_(86qbvkoMF+_M6%qmSngcuR&Fk zqjCa@|(9)|;4x>^kL9c)CzrMk_lfW(! z%_Q}X3E4f^gZ!2=2@fv9h@$Omufc87N`xl2-Ip$G{9LPQVC*reCL-f)B zv^lEq4}8sN;oA7fO%C@}wMT(2;B19DtB5~{7d>kWe#C6E(wc6UnLcS?$N(n%pJ6iYfBfQICByr*}e9C1}&+UygyAp?~_!e6PSez5mHy;dBGuC*k zQy{+FNDQ_Hlr4P0qM!@<)|vF7>~pRx3!sEq`sUzL$|-E*E?%~BYLfTeF?G4Vcc}AvSn>uT4Oc1S?o)A46(Q^c1fC%6EuD7ny#yD5 z`QLMZiB;;h`6(&qlkX8@uU`F#F*p;Q@Bj44i-A!%(Ee2us#bcuT@rdew2P}bCW`PYR#6x`0Ksu>i$gDEKTqhIFia$bsh zIyni);$}NA^r|51=n5R=a+C#+Hn+uX*ac|Ev}=Ad2fmOK`C-R{NMp=XE2(4pvx0>= zL;g2c>ln(LS2Vd%+d2MFbk?B6UC85%7qxn3;X>Xb{bS+w#crP}YD~m#Uc^O+9O=-Mn(dGN}NHYq1$7 z1EUa`5nl#yC@OMVh?|GXojl!@#$ai^AQV&?@#%Y<_{1^Vh}zlfKVA2n4Cq%TPDfnd z8@l+$W!0m)-6BhZi2!cs?1a1k^>*GGRZ+DG&Lx zhtQETSmF?uj(=ArRTvyb?FL8@O!ES1pLK$Xn%zm%D_%Sg)s;B>lzO^+MQb%aFmZO1 zZvk>~R-)L<9*mu&q7pq^v_j5k;{h$lmg7du#W2lG%d7R!Ifh*eS%j$<2N}6aAq%@RVS9H{ z5pxH6$T6I~SM<|<$;U2%`rS>VfLPnxCXBW75~Zv|$|D^tGDdgl0dyz3-*{URwl@3e z-IR+DIZ_WuliT$fvlU|1i%{Z(;@UTek#NoG3rVx`{=tp2=?chgOnfI|gP7YCV;ogp z>*Sak8Pqvp#f#qMczd?nMggBij z9cuL{MmWo=~w%S)2$>=ZNh!d)&!pS-^OOh9QSlr_>Z)YcQYO{wE>MWX8WHgl5S6DfMHK^$Ez?f_U<=xXhA{ zZunN95*aSg+2uZ1li}XouXRtk5|mmvGHu~lQS^0T#z+>H^)U8|)$>yLd7Z`F)96XN zH(@sz?3L{Zv@yq{8xW=*SjwIuJU}qFaOV{}s=b8fglvu)$WP^okUO&2yhxKJzPo`d z{fXeS{_02jL;eA0K4-f_OAfbLjCZjGK?ZLVv{MWH{0%Mux=9;ITArLAbM90R(>tUL zbl2#7Qt-+6xpMr>wW8e9lt~gb;i|eSS1NaWgStAozCG&{f2A{oKD>(r*c;%HU@*y$ zmDYnimE@jcWkn+G{+AuSZNaa}7Y79?Ay#3Hks|7D2I#KABp%k{CRFWde7RU zP)*tu?}ib);Yd#w1;Dc|5lUWzZ~W&P!pl*e5rh#CF52eJ8jE{mZzx)HcHS@*M>*2; zIm*}V+3Q~Q58a7Agx$z;5&=EU3-g(FX6VrtV7>=g@XL;Ljb&Es@v?i)W~+Io>kJm$ z@8&piW-?#BsFCPSf%a1WkR4}X03E_ zpcfujR1chc6|MHX2$UHfS?v-m6pjlDM1_<Hd|(D3aOr4r3rTbUCh%cil*%)5WqUupzSI|yT5Tz@$HsjEI{zqbl)v`&68 z&*>X%X)D9aXeL0Q1r-t{mpg{`BMKSmUXM)YSOpei)m>b*yXTBmzQ9wzd*a_@69O}n z5x}gv0zz6#92tEOtNVDksw4BOKdf_Gz9HR$X{u`w{ezBz`(wQ$e3rv3oE)=QA<*i% zjp42MjXz^phD`I8`Ki$%;vLctXEx|>u6N`{f3lN>CDMudedqP_Mer5Y*|_nC?$4mw z(-=zQ#UcIAc3Ak*Ufm&8dIIrmY)C!90SY1~%d1-e03{UI1!6`-cQ~sdANGQKV?8!G zkcy)AWbivz^_O;CUf)46UF*VK8bI8K7_g_zF3`EemzV zUj1c1IrsZE#)F6V-E~{gVRb4W!N_-FDEUdpYD+K=waaDdhxfu3MR7DrJsx%Z+KEZa z$rl3Tl_+v5Ex8aH27;$9%sPZpFTU*d+Hb0*ou%C@$p;Q6Qd9u9LP)bL<6ix7)2K1e zqZ<(rI2imrxan>39AI|DbNzww{M`8N1?7mVA`ddp*UU^#rNC5SWR0tA8m>{3H=STt4~TuQlNP`p;lUsh-MT-Od6+Eq}+-6Q28Y*_WKTk z!WmB?vv=yi=cCT#_z7)fe%0X&R7e+KlQZj`lgC$$M5hh*>c*Dd)%MGz5cNl!i9mp9 zWsnijXW|RiinYY~-)m5Eeo>D<6vwV?HZ@i79^~h?`(`{eN?T%$KukNQd^29W)4i*I zqq=acY)wZTb`|qdTj=mNTzl!W2&;l+E%Kh6;pWDsT4TP*M=JmKTgb~)b(8T&ysdyy zzR+gHxW_DP4eO!NpW}}-2Yt#vsD2NZmLzNd>vIR1=NU+(Cv#ORUOd6h{3G;r;NDya zVtgaz(Zf=y%UHBuARSGi5wN*KZB0zipj+8gIFq)Qr8vD5{ZgX^c{S-OWv)Q9JK2YO zRT%7OstOtEaDzqzTdCT0ix`zRn|4ywv~w-y{@8(IS{fBN8fTBr>AX~F0R3~5_)RdE zQFkv}9txe8mm8*=&X|gAwhyWe;)Z7`FoN9uu-z70+4m9&a}%ZxI`Uz(vT3AuCQJor z)?j=RE1lb}=&aw9-OX18ybdQ{NW@L%+@g%{jiVBt)%!8E>Ru=GU$urMdHJq}mo~+3 zmPuIN4Ug*(Kk$<*dTS0I%p=+wlt(qPFFSmVQl;DF*QP5XgSa7L%yiFhQZb1W$+V&aVgSz zLz;F3K)O5O3l=vW6~nKsDnBa-u&_kaD=3+09Z$o#jbz2t+xjZTU=NO%Lw1^xv5_0+ zCCy?Us7d12T@df$LpQ5l2|ZwK%GC7)BZ72PB6JLU6}`tT{FI6fADAJb=^SF|e6?`Z zXv=4(YfNq)5Yw62VUI?ox89|`F5JawFUOln)-o@qPhznr7+|uAC`Mkc!BB__kE-4S zCooMNpID z3Y<-(pqbuF1mDeH5N&wNak7K%xVDqr4rSEdOPD^B=+&r;zaN>O-_IsU+ZcmA@+y@p(60eJsJw%rN&irU9wS{n-}%qgV1Wd*bA~ zdL8R*>-o!=H00sy3|fC1>zof#z^IsK3W8Q*?~xa8Z8`9wDZH8}|NMTNYAhi{tW?9C zX?;s{CueLRO_1%**B}Mjr}&&#e(7V2(lC_k47w=v!)ZinA1eVt@6R})os^fIRL`oqGPUM7rBou%rBv}9Wyi#3OETe;tVfU_IjDl4`b6( zG!84SX)nckjIK%1OV|CtXhz?Jyjv4+Y^N77R5ciIioICm`b#?Bf>kFqQ)SSPU-jFY z_ebxFbB5-)dP4g62cPIGL29zZX4dv*@fcsCL{kc`pYOrS8|}+;x{Z4n^T9D$j>36G z%yrSI8&ZX06%}9$=Zs93TS2`K4OWbNPU!A%G^SioDeDiExI#0hZM$*!_wd)S2c%lK)_Y)_6 zD&F+q5@{QxaV{1}(>ve1_d%`hMjy{R?3_ozJ;CbH-);Z(j@I-KKBUF&?azJPJ^0PS zPP#1zCXmQ-o;6=pWL4y)CQ&|6g=<3MijOAks&Y{_eae%NX+fYb6R-^#<@YurNw*yr>HDT%Km6TN-)F00 z>4|0K!B&hyda4-!&!tPl6UxNRv-c=BW!x@e7%k$Rs1e}d5WVUfdm@>8W z{PWKXKk|!#p>%j;b^y{|U8~jE!p#8o)f`}QZExvt3FH)zvNOg3F@jykW}rUG{nfNl z%s4~d%4}!I!+Pa_n{V@)9h@HiMLIoCHn)2?*NOn%oZal2ntqq~dHj;yPfmW2mp1L9 zV{rY-kYiEybEw}@6NqSXOo#LlPdQ(Y z7bj1~7Lj&rPeo`7zw#1rCWC)oXtH8jUw~vAmysCXRA4v}dynaO$!nl86u+J40ma0J zm;q-QFM_|JLfPZ>sPTD9i?PU!`I(THKh%?;Ft^s5$qRoNYbTZHIA4iGs!A!M=?jPL zs{MhTp=ClTlkawf4e$-w_nTl4dDw+3@ zZKs-K@1nN_Gb}tS?wghA6nEVh+OoE5UyBv{MnHwM51lBAL+_aUs`P8K{9a3Eq+cbo z2TT~`LWEMb*_Pf;TS*k^2-S|3){jO3-e&*CFSVci)zyY9B~i{5$NS=k%nckESz3f5 z&(diJo7bEUOMG^eaxr!w`_V3=^VMzlW*%=_@*n;{u>Xmlwn7$za9t3jQW-T2;CMw*Z_738J>?G_ zfx>#=6z<&*N0>y17hgRp)|+sQmY7eLHA|`Dj%q*sAH2N_g<@e^;*yB zv2DxIr4b~3Ouxd6!P$?t{ zddWaX;7E4Ld!NU{o3CScWN5Dv_d9rKKQLM8b_P!nJ|ftnJXwd{#=}!P0=gfv+#J>E z0un8vKGcGLevzTAP<40*)t<=R5V|=1EIgozus2U_+o}S;&-(&G9vx2}Xz8EELA6B? zC7oBu>Ga?7VE*M_e)!^YW`T8jo4O9N4p>K0U;|Wcq0=SH#FmDNDzn+>SZG~dT{t%O zcQV+I%eTtW%a0hIdPp?x*FNWBkt_eG;JCrGD=5Es1~|oj^8lVK!_o%>YunHuLPl+ zf&$@(p-AVG(c!?A*k{~lVR}DU=YhCm|m+f=c-SQ`Q ze=9Ax%!B$7zR>WKsQ<&Fj^?1_${_Ec>8JVO)XATu>2CjKtIjOK#JY%Yx_5Xl@TIP2 zqB&rKZ&ys_ni{2!5Q+^s^_XtK@!yNJn0!g5JuFsXLGvB0D7)K@K~sqh)av~DA9#&a zlh&B!D^U*n8V0o9=1{cN@5gyB^T(Y89mLs1vC!p5C>E%XH?rYuOg9og0oihiJ9B!U z(-@EMc!Td|cW+T(q|T_IccyQBo}-X2(w8$Ps4E;^J#?#Mm2}5IitU&?hx(lJI;KK? zGuc5Rz(1TFbLc|L$TjYxh_t)Jm?-kx@e|HQM?9}rxy*Xs8G{Ax>h2kECUY=3A_#Xb zg&P61Nb5O{#%!hO{9XVKNQW)zlQ5Pk3gs>BRwSA;*6T`LR96I-nyekW3meibA&U!$ z9)RtR>Sf|BWYCUMLa<-p13c$1Q(Rn>5{+tf9I`&?RXYCB$D8vMEOz!h4Cq*pCboRJ zb@Xz8aRFap6sL{C2amxAR7Tunq96VoT6+rQ)H!6&r*UcItp4H$@k$nn9A?ONSLBE3 zzCe#uX!q1|a3Iv=Z*CU|Y^ZtD*hHT0U*0uqOIopjw0}bdeEfJ}0CE=-l(tVox#*-> z^SqU_B1z(S*lhBHa14~^-h0kwTb~$ueUvIDI$T6ns;b&YaWk4?9eks= zg)$HPE)S%^(HT|hU^ET3;NC$QTigCT+DP}5bI;9Km2wYj&(0<@77ZQiI2d3zmwMrD zpI`nEpdRlS0flSEPaX6{2;Fb0S`#1QU7dGWHp+uPiYwLVHnz+woRqEn`g#MvF{~bd zlYM~Kmrd?+{gcSIXg`Q+RnqP^3GgKd$n+);b(d;`?PKCP&2NlMOMcSdNF0=pq&99; zc{659uxQl3%N&|3QD%{050=!d&rKLRodLcr+SCaP`NbuV8;$U%<*MWCKAn2*nq&A3 z-~A;ClrL-l46P+e@Zk4n*Q$vnw|sfBz?DfC->+}3!%9U=B!3uSx4cCDz{nzT>3*qK zDs4+)g?a}wLv4eb0r-q9M|MKQT>xvZ0D!GmorBfmV zk_Wu-zZlsa{_I#If(D)J zeT}aGy5_}G=qmVgT#+$bMHI*+qKhaywhm!^Ge+MWPvmvyi$2&{s_?n1^+a|`4L3==_j)>!pPQ{k4Lrmj6%^^)%kH@nZkx+o5rCpA z(#>mz!_Vi*f01$pJdnVCL}pGy`K--NROli;^p}+Zw2AYr}j6?PiA10Za}9DBi4GtQEZElmbZg z63Zpuiy<~Emc|}P)Rj#wk94V0QXrjRY{LX%jgD<6f}tghe}3W^8qJVLMGZP70*Pfg zJfu$-@`Qf&;8!mG>f8zP%(~_4T)TD6ymf^VME%!GKlanWn}2`$S0Q;@i){_l>v=J2 zp!Ms2eu+BJ)r1FW-E>}XUZL>MY5w_9028sk-+!I`@9O`DYlJX;{?Eh7xxOL(XI+3q z6b|J7$SECW^Ra*?>E|}tZoUPLXKs!-fPf+|HiHh7-f%pXRE8U-s;&dlyi{vqv0|al zHwoy!ZjfHUke&?Aj~LF6u^H9ChZrs{3IUtm_F)E;{&InTkb0fFa~qD$VE_D>lrG?% z$)cOSTT)uN`LNINOGxFf+l5GxgnvDrSW2Z2hZwHs=bxh#2F~ky6MjkE?LVS-7c1(| zE+@3pHcdaw=5;u7E?$2vRMEzAdLl{Z$2iVwyZ0nXC-i|i3GJ_*N^TP$2c9Z9l5RSG z|Gr`t$m0=szXXa~ls{gt1J{$_Kbrq{uaa}TcDlZT?ae55`u(4}_ap4s^g3<7QW#_$ zfT}IZl)sPIiT?Ky0%+vor~x#Yz-_8E)>0TyCeS_FjYnMdfMhSGQcf=~8=n*Jr>DI; zT+Tlh^1nosR&;#%v-a-w7SHO5t>}$Fy0^90_mSTTn-g)E!bOY`9SgG3kvs^xoDIT-3hW#xbcLvg1w+xQ8DM=A7-jO35Gf6T)-bII$T&O< zA&?A3)3Q2#>6^;>Q2T@Px>N>r?jbHjWvWG$pwzZTCa#{?AQHw?z6AY}&Qk@~81%qi zWTq$aY>VYNKa5pwSELw+eaxY$OAoz!?ts^5sEU5gw=>{q+$rPu_DABCMQ4vIJ}qcQ z^7ED(%3{T)7E{*zd68r%{fzssqFRR353nORO+j>!zD7=~x$bgK|LW zKyCXoa3haEq=8^}k%vMii0@Y8P<7|G0NuCalO(m>4V+^+JcgD0$zpG%TvC<9=I4_+ z28xtN!nA>*W8OScxwU|cK8kuR>C=PBh6RN^t(`#)!CV^^r_T~l`E{-JT zM7@TovHiR587AyDdjdxZt%7>WdP`OmbDuF{^WPoIL!0y)bZ(IZ)zB^JF>xx19lxuk z-9896cPxm2roxXeO<)U{pPyPvQdp@+re>vq?qXc~+F2R$h&uMr&W=XGUX=VW&*U5a zZ27>S*0mvsHd;N*0#tLReg1K?xRNC4>-mU}^r@HBEesw@H1s;Kh%WH65#({gMv>)y zZ|=6VNNLgOu(ny63(wch1LRbOQ0AdDk-8{I1Wi+2)$Ay3&Gd~HREP(&Ro2fg4#E23 zzfY-d4T2<)xpfUneh`aPeQbYHoBFUcKgJZl3qKEvD`=w-sp`9O^a|NErMz|}mGQ(2 zpxauNExV+Qj|cCyMs{eIMC5C%re(7)38G#$T}_+2RgmQ>TOPOg?+(9>4JN^#J+UZ{ z_AL^UQx}e|2^Yzye1PgkI&Gd2xcqwAd9Gyg={9*+a{6s}(em5FkIQ>c>$2SAp`H`@ zP$cL}JRqvV+dexk?zqAHcavHXm#=FPHJD>6;Dw7=m$ISwdGyq$otJ zu1I3BKoqz2(X02PNCGlqiyMvFx)D=$gC5=smEchswuT!|olC4j=HI94pcZ`mFfFik z9>Z5h%L0w8w5_PYCbjKS92*nPWfqCkX--~&3PVzp&r$J7M4$wMJmk)Znx|Rh;M2j- zxMkN}`dVi7!X!Qs2@l)kKG@)Us(#s8ChDaq!$os~rvLxQE7E&8=bfwQD_xA2#T zr!4zPl8M#+aP!qQ#M)ZAubbw}+l5LwT+E-#EI1{*Js8nUEP$b}0b5nhjD+`&oJY() zMpCuS=$e^UPl8kABNoLFBaZ=OfJH|K!*sQrTD+G`Y;Y@;mfDGZpV9EIV0_9{St~}7 zkDHdiE;_gH)Jo2kH{y9UOi7*yLo@Ez=te zbXzrB=mg}Yymtt6>*fRg!SzG#ULm%k>6!c-t_W&175+DlDDvAXP-Ay!4QrP}6&xhF zYFLVm3iz5HX2)y<1y+p4ZZ-OohHvg=#{$%rVSIx?;C@uFnvX z<`_ZjqDW-lKeqhH5tlZXR@66l|A^tLK0`$53mH5O&TwhPlS0N6>~~+G_^_&9z*k}_ zgC)I`Iwi6$7(^|E*#BpVeuS&of}DBzd&T$uBg>w&db=g9abIP5*j`^*#KJsD9+{|Q ze5Iv4x&T;?-zDvrvD#K8pCs%2Z)W@ZmS(CYo!IhEevHi>x>CBvZyX?RePD?{`DAyH zK;1wdUOvAfp6)hgSH!m@XeA$Ct~24&K{@*slP`c)x6}eku@w{bd-9;>c#hb5d9ot} z)gVD@+sW2%S>_lwteF~l&&=&$7xNWI>eR9{ioJU~Xp#XRrpeWM25npq(qWjA5UBuU z(6&>it1Sv<>sFa`X=j9qG~u@Ey0(<-?O^(uyw%!o?rCH{-b6l?goEWF&!gjtKX$9N z9s|Ize^YzgJ~hfr5IU{C))kF-`oQcp1BbU}t0e9IOKIR6bkxh7#C7IiO#=DOa|X#r ze2{^5sJA^&rAVpi#NNGi>EPVN)H)$7nV}0`bF>YEdv3TIxOb+R60GkpL2~-4Ys)D$ z3GyF}n_GM@kZ*qCVkqS)ixgjI-|h@2fyN=!)gUjhs?B@fbvT1`<<*}A?g2LFhv&;5 zrL$a>M(kchLWJtcZgeg=HD0E$FLnLt10~&CnTVH{Gj= zC6NhU!cbGpa_s{V1??DhurdJ~)gD0k_H<(`uV|eRON&tBSKo51UQ5rxInKC0F1R zkxxM)>|(hP^)mVo{t0?aNq7tNiR6n48~65C0Y3jQN7XLz^m4wP08nb@`ed zpxgyzU|>Q21|17LBKf_osn6%GD^D+<9s>&TRyM0+7zb84Y3odrm$rUzl?k zkT3Ylo$1;tU=mxer8FXSaIix^9dEj(ui9~(j)EaNUE72BF1@;J1|)Q7Xp&z}IB^*0 zg?T{=CgaS<#<%4IjVruJ&YqoF&GAwD&6eKAX_?hS732r450ST;p7T{Ziy3agX$Q5u zG+;C3+@mA&uW1%IgL|jYm7tDgcM(*r{lZ!HV8{LiJBynhI=!J5HVmhe57YP-QdY)P zNgX_lrKozT(?Vqy3vy@z3Hg4Ui?iFgb@;lmqW#EECxs?e>Cifam`Nm|eQyv5y+WYr zWq?f&*Sq~}Ngdv1 zWfJfIf!h)<&ZVAd$GTbaOlW9rEKIL5bFNlhFTeKu1)+_-anQ8IM(?2Ztz{4avNrMs z(&6~fP`?e;;B$o%f44^JU9@!%Q0DFmUlNxn?;&Ci~eXRaSOPjDV{ zCs#+%5#1p?O@qInvr<>+Tejgm9or>)(ztf*xx4SNQ*}cOpRnN~)WpCOpYqgh>{;5NjYx4@odo0cz4E1mL6u&MGiw!M z+Pc7U>f_1O^RRIX_L!P;YVJrtLEDE@Y*qVT1&A#2IFoH*wJ|h{xb6iVnqy`;Zw#aT7kJ<@aZUY~o-G5vV!HVbn}HJEjR%9EE3 z@(b1WZYbaAxSCdmoO^~MAMX!|fpYC$D9o{5qxxO-T?LuJrjuL?xRY6@nFU^(C4UNq z<*e&7sE6drAeFca3bvC)H(wU&q8BSmmzO#QwZ-yh@f867O8oGd_LvL zhKQrvG0>d_c$N&&d=M`)+S0hd3@=HwQ39DedEQ(jV}y#zotJep4qU63Q_m67P94SV zjk6}%=WV*>r)mLLCi&|6*q}FT1Y76w<&^Q;MCS?xuG$nV}8%d zrY-);cZUG|*(Xq%ac`K_$Ic~sn}9?s^|MlQAnV@DLB}x)!>4=38H<86*g}%cexQ6n zywPIi+g_bEm>jZbEpt|XH><9SeMzI=rJxulLeC4LJ8-;};Bor2#rpgAE_>T0dxx1C zJpc0BRMl3MV2Z702REGsTL(Fb+=_Oj9hY@MG|WqQ=FttNLu4I;$Z^IY!D;TPU=l7a z)|lt~xKC18q$tjXtE!=UU#dJov(E0GrVpX4+JT#|8mdBjyt}?>nLT{gVe3ST*P!*{ z<*Y8P0@$nLqlSwH%22wiFzkCJvA6wv_G3k9A~8{2P=GFX}g;dye(3dg0GpJ9a-wPnHzzvLW?_eoM=YE&X~s! zjH7A;iK}O${tk<82&*4Q)XI(uA0l-U%{rq`TvBB8%HkeI!tY0T zFz3*iGhoNyT}=_)9{!BQzgFtk7v^tQY7FRgdGgv3DmmP0O_U8RN@qaW)} zVm_aLfULwXB*!H#lp?%2`KEgoDag`ySPagI@XC5-F1Xu3Oroshqj7AzsUZ&SamgAg zlP=A>!VY%|TO=6aI`W5{I-iVc2&@^5&#AX{VF&s0Tc)()R=4=ZsHGIjXZnF^%fX~H z!cbvRze@&{=7-%Q9R{>NEkQN0mkZF_kvZO2|I|>Fdi69U3Dt}|rIQE4=-I4r!uW(; zfk_m(wpyk!cKEX1roXvlzxo{vmsD5$;_c?Q&7=&kC&wH|YW_01Y&pin0Qmzebu9D3 z>FO?Z3b~h9Q6PR32f+bO%(&Lk6zA(I_OkiPBX z+C`MYPt#Dez6K^!seV1qA62y%Jp-)Xgmc)j@QynZ_a>{g$T#T%-$QCIFCy39u=S1q z{`N-ZxGC-FP+GYh9C&bSLwTQNFqH%5T>iG|D)-pFypd-`F6@qCm=cpbG%M#|iAitKNONzmr zUYVi^a+TZ9)|SWYE7z$WKfWtlHwEd7BB3aj>^lAii4PGL{+?SAt$l(H*0X)Xrf;TA zHhwz2@`JMC#r1SaAIV!RSX$vP*U#2#5mXc*?#)8124}m-OZ8fs=9$cuPKpu-%L(!L zJRtTesIrN0T6iUPIlS^*4Z&~$0ocZLZ)$VOak4%88Kco8tYl4@Y?gXLNx~EI6i=To z=&6uNTz$^EN}ibsLLXrdQ^2*KU?Wz=91~^MwZ)}gVh~lXDa)!_2Oc{D<trT&fXY%nK6Jr5I!#c!x%OQP1NBpEbcS)&ChfC1vyO+$9xVy2Jo1fv7#|b6vZlSS3 zk*k<*PMaCdAo%88p$ioXzJ~eJNv-hy&K$7h-i^E%YU`)!eUtY{qWpfHez}|H(kq+l zd6`nj=Hf*6MbgWAJr9F6*mvI7(MXEOCF!XFRb=|oX4~@AV!Vdl#=vgX>alpoddw$# zhm|vxnNmtuV}RoF#JJPgGP(2771`^>+U3x*W3dz$Ik6E}dF^@bYX@74zw?PZAuDjz z_AgmPl!waTpV!UXCNwyAq3+%&Yp|E=o)|jM2fZ}f8rHj=R%(Km1~jH#kEbr*rks-p z)M0KrhhJQFxK$jV={R)F-xG*CvB_t71l;W5Ba$h>{N6R^&jR})5W*yUHbO#}o0s>b z6|tIO9UvnY3wlJ|45N1Bw|H0j1HXnF>1P5BQ()(>p5(036)ytJ(V{41ywLi7c<#RP z8y%je09@QpUQ1UDsv%3W3;43X?J`Ou`xciJrD7uMZWiY#7AbGo3PVLeUo`yr=edxt z3%T5qjmA6uq3eF&z`wuyj$NI5U*~^$f=U+<7S}7(RY$XM_@R=Hmb`hW!5TcXJK2NZ z^M1k2WdY5rAD2$bC~^^9^Dr9JB6D4#l2I%)^JUiMoGF|ocDF9Ke(T6bbSZVNT#H1- zz}9xt5*ZOmxER=NYRTFj6|KS5{7kXyxy@F5=8()W$GyLVI`pxd$o|-T~2r zO~s?%IYarhouQxyYIVJ7U19LsC-x^wa7$HR+Jt&dg54nFmkK~9UFJtdmpqf{yn23{ z>IX108{leQ{cIy@>*K?}^)73UvO>AO22=e=lgt?U#VdeSiCN1KvE2cCX}pCOT7Cf_9RMX z7u+XeUX(U-YmSo^D!iJAw~V2@b>fbS7$j~vTzA~;^U+ctYc0yp$l?~?JdaL8NcGh2 z=8H61+PlGQiURu&zp89G$68FBeX(2i9mUsEQ-fKn+$j#`Dg46Oh8#guIWUdR`$Fe@$N0|9yj@OKj2MaGt zeZ2wQZ_Aa)_$cyRWxSiX4EDuKVdrU2#h_{8pCIL^v^!gckjzpx2u=NU*Wk)wuiSC6 zmRZ~x7aeh#VYa?`B0Bl|%K7o`Tuh$OJN9MmO0nsZ;qFTidn`&L(3%25^9o@+qeTJodTC)^5j zH%fH6(fDv$-=1%=QFb+BTuuWVhA~;}Peb|gC6oBLXIT{8pHXfL(Uy#Z3CTrJ z1XGpQ-s0_Um+rq)wIaB35(w@4OikVrCnbEcspFZ~AE4Sx9NFt(v@MK`&l1e3+*@Rb zjA{6lxD3zZODt|g{>`;t+NYFtdp9EHdW*#R-Y2)ofjN(f!oZp-Q2Zw%`!{hU-66hN zUb+Q=%R{kB%xB1{2(mGgyLD^x`7EJ*K1QoCE}AG)KLeMhguc!?BemYHN~*Yf3H90y zx@#%4atv6<<9sC?(-M!#fG`lfK8mjOoU`Ljpb+Pz^l;ZrAEBxJL&`6wJe0?ix$C8< zcU$9Ly65Fcl(!z(PFv7z^7v%ed*&vKA`y3+p+0%dloyZNdHvktf1%EGl=m&(QyU!0 z%Z^ME;=$}N_i^1Q^0JPZMp5+3K;5#ziX4)v^r;odg$z--13 zg}|FJyMwVcgx7`k^md0*&Z6NIESpq>fRUEg>aHnwh01<*bLr5ZYK$ry?CVbec!(-1 z+ET1L3zcSJDX?T@nnPJ&-Oq~A|2jX;nl0ycAJE0NCpDyG{}yub%xHmDJPkf!k}Hu* zD`Fn_h$;{F@HL|%ZV5NXMsbc$uq;Q}7(FULYsKSed+zr0&L=4M*akxxr2BGLEYb_51G^q3N)@AGR6DgVH{E#J^0S97H)^S zWY>0qo$vh578rmX{}34!c!w;y~0)wk}JLlKoq zfLE;3JuN}tS?syy89KJq+BkK;P~fKD^f}F>*?k&epCmxa5lr$+up}Y!0CsC_JOl8b zR4Xsl7LtlokxsvNyYt~Lai6(8P|F0rrSc!{-4AO6BAnHq5spip)q8Gi%XoHv@S;&P zaEPdNqxsRxsg-ey;=B_F*{2v*<ty%obyi*0KHd{UnIX&6V$G>^$#Jo21m*QVe2| zrlMiKqgVvMpEm|~hPhg~)Yeola*hw~TCrEl4=g&T202DrKqVljLQ0q1zO1BF4QW;G z($;V}yv&~E$>;|^YE83Woa#Zi?Gb86q^zuq08{(wb!r(h3W>bCbe4( z)R_<*@au<$QrPwFafY z-pW-kXR>lC@}){?heyV6W-_-oMZ2pUWZo5=iArA9G4dCA@-$~)ueAo7j12|WqY8`| z$Iw^av)sH0?Aira3CPrF8dgRBz;y@yWrIq%Q+qt}FgdI4T4JJH51H&Io?p#73P;y- z088+&dtlWIlSqrmDGQXY3}Ug?7HD#X0iW7VPQ!Wak%wCquJG4E4)UL3OqM_>;1;eHF{S;hbtvQ0<_B`A> zX(khE7wp>rE2vK`J?nEfExKo23U&Oc=X(q^W%_=jTgEQ}R!6HqlnC50EKM5aK;@$t zZ0c$(a9j6CciFjVe^xA9C-SVj>&$L1yA&_6tDx&Xs?RZrNFCT(=dzdTXXZ%&i`6j6 zdn>{$rmyH{^vT)CSDKIr8IGSR7{ab%{$OMC z!^7`q!n*4T53OBxmW1lY!Vd^&m=>legsf}VH%xgVIn6K)6$i$?TuFZKQ96CevRXzm zXj(S2)hAvy8oid=$QEZs%BlqMVEInk3s4=~8)hC5#+Z}0?OO)u)-8|)2gV1b*fB{C|qqE->DkX|1nal zodoXNcir@H9i{uC4-13}M#0u$y;Ez+b?T%$Wa_hW^O{^C_-Xk!nO2hnvCEBLWj(tySQ2T39&d2ldw~@-k55hlGt9N;LkSimL zMi7Ut!;`11HLNhE*Qd?%<{~Y>BOzX~1KF1wcMHE3J4P6(6z0IR=cmSGZpVYB5n2GW zS*WJx9Sj$#3scj(aJiHTVS1ww>QYUCdSioVt6HVW)Cdh(e6btQ!AXWXK8}-pBQMEW zMuz&V;$<#1DiH_lIgJY`HHdh$k+D`IVSs3xE(y^t0Jd0rh_0-C?v!%iQrJ1l$;!o7 z8^x>lHoDi@RS;6SQyP86gObqE3-x3QC{4;GM@A=7P0Nv)WHX0F` z$)HKflj^}7G4X!*q?^f;_V5iq0zy@nB@)lZ-oYOofIb2$3D~jvQo1>Y4XZ5FNQ>irNk~jWVVu-wrxLZ2I}LXHTTzeh3qwk?>3=Jh}lis?f@A zB9Th5!1n11FWKqXaf|dX=qUmPy@o{(2>l-J=JN)?I2nRgD+6!sWPZ^Y{;^-gee(}* z)%5#E21F8{E3NxJ;|P5{jvpiZ>scP}C%kt@u?rn^`eXpfu&8X+!K!?PujYg2Efy{x zaH4cyAlK9dtbfBLq5c~I^Lk$Wn?q{@hP{1*rC2YZQLn}STXw64W&b6X~^c0btE5F!mL}5^~a#Au$RV3jYVSB4_vu0Q=44 zc%Wq6wvVUPWb5l-GI6%k>;M$k7B2XWhA|3c+QUjKn}aM0v}q7j{|5We|GEF<^jDZK zKw@O3SP>Yf_iMDZ|Ki$6VE>DZi%Exg<-h*>i*e}vD=zoH)e%eCzk*-?dmUUHJ`>D; z*7cBzMf}g4ve~?i=JBysAksPEKicI-9N}xn0kdMeCB3Dc|9@$=0kD+)8|?e9#{bVX z`~R$SK_!xOz{BYg0q`m4@eICRAl?lWT>&%@t}C8OF`4_Cx}szELq&=conoO(d*5He zyFtGi-;VBc}jSx&3(0z~%kSYtq3vrmU*ldp&Iv z6Ik|F55E1kSe5-PR{e`Cy0!u2{)ziL;2jh`T{s~B@h?dZpn?6j`dR-? zU~aq;n3w%#pAxO;wc1>Myi%J$)qp(n-$#rP{rdu;3ogiHMBbZ>IoXc!Q&%@gFD^IAPLPpasx^l9V06!_V3(yP*>bG zfa*R&;e;x7Qh!x=(aN1{qZj!MP6nVv^rP&C8PYGR=$gej&9>OHX@B+|RmyU-eN}dd z5%S&%x^uLo7M=2%dmxJdfFtd%uk^w&$DH-!-^}S=t#3u=TI3FnBvq_T%pFam;W68uN2Bu}}{TTU!R(f1P_ z6wxtp%`xM|8kZgOQS-b;Cw0=Z*?SA;&OT1#=(z+?&f>}|6bUMjtw={0Tr1K`BzkuaV-lSE*M*e|B6WJR23q_S?9H?<` z*H;wT@Wzw{!lWYD}Z5t5nKjL@U0T ztyNw|($*0*$8UAMhMn&ym!nSgCI}Zhe_d?|WvXo5;*;Gs|FB|j0`#W6iGtHwctk?d zZv0Z-*Xmk$4702;&t{B;!HFqGW~to5WIg$KHQkUU1vn-4Ngep8;Y5Dg;ZwjQdZ<{z zYzb}5!>BmPzK^AhYm*Q;4JcnK1d-;?9WW2-~#j7Qy+JM3_Z9Oqu^9EnigNcsWGe_ou88hna@ndq+(@Z9}~F7qG-2SM_OgJh7pWJBXJ} z=QNrIs`Px_+Q*sMFn5vwVEC#VJJx$F<965*F|;HAM6kKF+m9_Kr&d2EC4D@^M|H;4SS zijn1>S@UiE#SvHTbItUy!5`;4Kz_%Ij3-fALhRz>KKN7&0^>A1UkJQ_6eAGN2hesI+m7C<7KPC^#)sId?jZQQ;h&rTW;IN zRPo%=>bn)qKXw!MZ0NR058bfuDAw&&mL_%TDb;^6WA~$|2SE&9vgY*en^*odPjz|N zxR~Z1o8yc1Un^<=$fbb#)9DmuYx0Y`?s!nU?cRHXq4OH+%_$MIh>J(8b$P9k9f=(%x(_0CZA$A2+@TlKDv0p-<(qpy10zg| zHXcOF0C;PLwxL#7lG450Zi3(r!+!u#*=gx-P&g9IN(wTJMA<$YJ&TA)NbW?CpP3+n zp;dvX9bZY+k~wQqmlA+FJf?2y}3_ZC&uT68jkLI031>&OlLW0;Zr z<|>MQkJ>E)q01rHa?(Wg-YR?8^$W_e{_}+tCf{JLaOZ|oVOC;e^+FMYpSS+#odW_p86;ev;Q06f@TIy&uS-JwS=?0``@9l4)B-A`cGB{=;{I9(lqzO{fg_ zI;j5#k~sNqBr*T^KaoUG)GLy>cW8L5fr4WFQ`sFv*1Du*l4c5fTpAu)Uu=*B5LT<7 z(#q#AfiPG1EWrSqG36?t)HKSL(pZ|6%>e42x+Ujc=f9Loso9B4~8!_FNl+?BjH=)&1MSxTxvB&df}A~Z1Y5VU6#?T^OXmbo(6n8Y_FTK1%WpcVgA)%`Q(mS6T6d@Qv%O!>Z6YxT1$tov`o zcO_HQxk~pHVEY{)BgKcd48k>BtzI8`z4fxPsO&lG@yUDXSBJM9wTpb|a=1QBbfDVa zMkqcdZ6;3tZXt!Z%BZu8J{Bq^_wYvH;_x*|Iglh!#TA@nTPy_doNBLOBC(n^=or9K zSelnDRS>OL5VgqSb}dmUDN-qmn-Qt|3hoFyxVDolik)Fno^ej`!Ue1hei?;ZZceOx zol;dRO$JUt0E!HO+a~%KtP{TF~3wh0w%#WekX2 zcG>7u>Q4aPr!>3R`QdlFojk|`;UlOM%`+*rQmu=grRQ`Uvc1~trzZ6ITaSoU0tT-U zaOZ2hiNJ>n{gGOpYh;dD6IYd+=@OB}#o2iFdB&)zbp!y5YP=00Zu%`-YK43lR=qWM z6sXw+#D*!4R@e%-=8~6273e*k^;Af@SPKKy=Bsi@y{ILj?P^NRv=S04jxjKKu3ED) zyX~=DT$QwfNYNl^UG7M*w*S=q@PQ(s!>|<9WX_7Of%x z&w!ApJBB^W*|{f0dWsGiX(w38;8!n8`8vR;7>b%_5O}Cnm*ZK*QmibRsWUyV!QJ9 z&X(w@{E=THLgYSer=xxq(YX1e-fADDb6)OXm)?tM!10F}Bxg<$FiaQo3JPh~Mszg7 ze!$BZ>}E9N3{?EEvz5nqs8c`om)f5jHN42t9kS9_j5Z~xA8l^M$r)P=Uh*!2kAvfg z(kgg-)Onv5XiHwXt5KLAao`0>NTge@h~ASanlJ?HaTDjRx-=@y_+e7pWA`eCc>wCs zCIO6uROYFKy5Wn4X*5<*_|vQ7dz8tQ*o@hkO`Zs; zh)~2+o^C=AQt*i*tUPn-o+OpSU{NPCweE1an8$PiR$C$_gjx@|Jl6^`-?U@?v(c=x zzot+?cuB-0_Z5L56sv3G8Eta!S@y{`V{pvdXge9A zPBIStWt|FK#@sg!YHHO#UIB*F{&gTZz|K#jHf0vd}%Dvp)#lgcWAH%BP+_IpdXw2R9xOT&}1@#Z_bgVSgFkbjP?iZ zd(FuTeDz8|E*1bkT!q#11qWh^g%S`NOBg|vH1eYkX{h-d&Zi;Ll`&mA{{<=*nGyR4 zBV!Q#91nG)I{?vaIuUWN%=Z|LUjQo#o<6bLSw=mN`wy_*_WL4eK#YUOmBZmC<7GtM znw*cNOP&8Asdj~Tev?zcG0oN;#^)M0?a0p%lvdU3f8%kDtEOH3#dGaev^c6?A~6W= zCm)UTkD?h6gB^1AI7fDtO4m{Miq6+vP{*|Uwn7jPJ+0nOo7#;*=F0fyis_3v ze8n6iROH*ua(kmkWz#N89Da&X9!MnAY>V18HN0z0UHHlsm?4kmMu`Ogk7yl(PRD8X zJo~p%?+J}vg@bbfvP{^F-;OYOGnjw zm|$HlFy34-Gbs>Vm2HyukhY_9X+Hmfd=O4_`>L(#+8D?t=*c#tm9p6H>9SPj(&2`E zK#na+mZj^x!lyCL*?(r8+slu^XDvtf3|N&wMtak54XQ>*6dZS0-`=!-*Nc?6g+3LD zdO{o%!n~JvI#BJlAeRJc;G$I^&c%6vKXl}pI};Y72eQ&kjBAdnsr`(}N-Ns5;fd11 zfw}d3m@_o#Vlv^W@hBexq8oPRPzMa?IBt_oI#u+oZGhP_VS#cEDTB6r-h)P$G zLBM83)^J&}8Q*ee9QB8FZMO(Y&dkP^UK~Vzo3E~?9LSoNv44@lCL&HPh1&JcotN>d zyC3$+JENq=4e@xSRpq+FUPgdEaOwqsBO^$cz6%C}>YA(r4mb6JC;pZ#BW~aNFRMBr zs&Fr!NdTT+{W@d*vq@2(jwF1u)g6m|fye1J$Gy$1D z<*D*w_?MvW-xUW)?=N@4c4nMUp(?udLgqvS;<2h&*t`5v-&VQG9v10*V2eUXn{k@Z zhpBc`fF@E2srMAGVHU~Wqbx7Yg^IX5;2X!qmLGsxSj$30Z*9jbW|tk6Bw5_?l8F-qU=e92#Ah|U2BETnjp_cB}kAYHYSfH=OVpA)v zY3V{aq|`qvB|MZ6q9XsF0HoDHZcEgGj2yQ3EB~mz_@i3-zvGWnF`F_6>B*I|JeKoD z?6)}^V-B?3N&`f!3=e;@jyC~#;H~ZRB+2;r2!|Ks3@VRgI0R??mi0{~hjRT1c1dGr z&bD`yXzhUtp_}Sitbx>nA(fua-H+MRp^0)7be-M;JK?EW50OxrjkLrmAg*XNlu7|c?u|PUz{SfP0}Xb?TJt+TYLKHP8bD7OgVZp6#$Dj8(b0YABWcC$!@5)Hc6# z20$9lLYl2SY?S_`3jAU4L~0!lGLfiK9H?z2a@p%{UV^d0FefU_8kqnxZoX*=U4JB5 zzNu`jt9{*qR+Kkz{*|)B<+8vqQsF!Pb-T{nCdv4wg~TJ}q*X^h`G6bg&E#=Qt8dkj zay=#mSjCbQMKak}50w>L=P!SUxy>_CG1|U8YpyK{`wJ99Wq^iq*O?pyc^AmGRGJq#__T{{a9tVN(jg9 zhF6$7An76c?RIWp{CDLVy%misHi!}Z??xWXN#Tv^DGA;|616vKoS-Q8{J?mJ9V)iK z7kj~q0SIt^iZ=sN9%jIvqjPw1hv>(Q3Xh=CK$svgf=#6Lpxm^is} zk)YtyOd3n{6HUz#LrF=*O+i=4r1?Wi#DuNB`-kSnP&379w_TX}se6OtAi^z)wio-n z|Nrra#uYpC)PRcXd5K}!m|CDYEWD&S2C~<&>F&+KEGpCMe&8*M3Mgy+_U(Hl^8JS% zoF9iC^VrJdJcf>h67(wi@4SBpunMU(Kl9Qh$-jTkiD@2&<*+EW(e7k}$j&DIRCl0L zfnHx)&6AP0&8tEbQd?h`L`GzKQd=%tbNNv@oeDFZ$n>Vv!J%ktCqHaA zSFoS?qskMZ0Dixuega8*^{FLWr>>8d(nrb_=%uXOO*WkHfq~hxr!YpATs#Pf%lsU7 zw7TBf+{fn^gj@oD>-Aiea{P0>oPL*HmZCDPO}xAOL2lTNyT$_`Jqbkyo32_dddI>G zfRp?m;GtdLZnJ<>p@7~;Kp`;bA%@n8z|pzTGM;k>B5o1a@?ZW_>TrI#Z{nHGJ*p19 z?a1ioiC`K@#-EVCjSuW>KokV70PPt(vn|@-GpTunfd)=`l&fVM+K<-qMMw6qb+^?fO>N~6-D>WN|NgiU z$O3g`1*?>+cx}{>Ig28bo%TgSD-uwfcQNP7`^T3JBX~;Pa&U;Wjo(h4;xFuuhUT*cOL?8fy>P1-%VRyDmpG-olY!@mxH$dyt*zAKEOieQF?3Eiqo*}9-= zU8Bg}l}3QOp%^GwuPN&+qBxB{c11;^A6+liv!IHE`i1nNfwp8|6-)-i`7XxMN~%DL zsbYPnT#M}K;ros>&NC~nQRiQ=wtXCtLeao!Ci{K&Q$_LxZ=oqT2FYtgEizdHbsty~iA6_CN#nt-Db-Nk$7hgL`60yUo?$A&rJ3+l$uGwhqilei zWBmDNfN;ncd!-Nib7*5T3WLOcpB&4*=D?d22D(AGi8`;#-Lyga{l5I;q!0PkNV*%; zXG_BX5ONCJ*^#KowP!F!`AFDH+AY1V0oiq8)Sq@J4Nei_xFnc?qE9nQPe%)CNRB(6 zxEjhMg$69h{KFgbo-SYBD}lz6PR3n+S1 zlM;aVW;%LT!?N-Z&h9R@qjLCPC|=tS3T;3-=Ml*AK2PH_X_=7C?7+TS*jqWm;}2xe z3N39YVx_s>XIU+}#;&A{$6vlY1f`T8%prX%=?Yp(k(-IP85$`uDt;p`APOw>ea3bB zgGs|cb%2l8mYLDspAy4~lVZ$&K2spn{7DKYg&g|jiUR*15#D;L*$v{XlyzgM035*sh)a7-6HGL-Vn$^rT&f-()`H9 z>fFeX-{nb|2uE<4zYXCGih=lnJ&C=>w6&n`Cn-iJHk~AO)g0?rfso%pGgyb3o&d6_ z%SM6U3^{!^0>nNzg1sX1Vtkz^HC=xBH;k-5wm4Az#;+($MQ%7w8d>-JA z$2fNy*MPxXAW`AC4{MIw?ciU*qb5q__GG|qd^udkjmUWW_$HIAV=t}-cfV>aj_4Dv z*gHrg2QIj~Ne~v|zqWUtW_c*1J{I8{=`47CjEWFJ_?S7GR{zIYZJWP*bXe*4Z`PAr zd@iNlA2aUDJZlK%&a$|Q5N`=xKoj0PdXC0l6`l4G%!VL?RobYX-`v&hA9~&;pgRCl-W+X@oG@?V2!-E!@(T9^ zJ9uEDWW@%`v&qd=9z)R0WY5nYD~%vl8@SlJZzN19{4r9UKfF*7U_LY}9BKIwLoX(r z2}-i_RI``inQZ(vhNJW@Yj4gDrFG{Qp+<-J2+}1^)>xRvH|&XOv{A;OAL_w`m3G<- zP2zy#pJy`9?R6p@F?ICDZ2V&?J6H!r=n&iK&jg1hIj|hcB@X+E15VKYU2L#`*!W(~ z#UeL`N|P>O^@8We>0hkkL~{)h)#%7IZ{fo^<@Rs7MJt}Op|0SL@~RNed6b?k`P zbQAV4+=eZekC2h|%u&p_Wuf!*=5)FO*Sf=WP~fl{kdUMtFmPIH6YU(nk`tM1sJN}T zF(+%U3<}UY%06jpyVUtz4!F>XMr8=!?Ko+>oRI*bGThT&9324lvk>$3QkQ(Wv(y#v z32;%P574Vs;{F^=Bi)ifnwz3qQZc)1q4X4NPA?FTy>d9|Q&*a^AN}PFLJQt5X z8QT8No+Y^)AcPxar-&4nW2Np&H&~_8E=kh&cMDpSL>kEfe-IMA;thIzzwAT^x;{%c zV##bp-t^Ionpx5SvB7cPr;mFJA5=*%u0HHiELfn?19QLW`ohu@^ec0h{Ule1m;Q0#HD-OiF=lzq zEfTWV;FSlr9rn?Hyy{whkJ)<+0qgq2^}H}aGXnb!gaGVf-5$Go?X;oyvowuuT$DbB=ZxqyR~C z@!C)OaoSe$pr9!M6nhH~M#GJjMF=wsbFOEt!hsjbsI5IlIhlOx3735An3!s??LL$jXORrGB@Zoa2LrI%oPkz|G6&l8-HXO(gD_{P7@ zbiU#OG|zkIWFWVhKQ=BiMR%<8-s(wZR_>Pvpf?h2VA;8IT89+j%|A^ z+{i+WhxG?&beAU9rr!?W_U>|xAd!eoHV2~&QJHOiqMvpyG|K?skKWdAbfQGOf8!c; zPukEL_PF|8R>Z>0r4DwdaTLCy!+u(6*+L` z5@TDG{TJ;IScxO!5YYhh@J6Wh#76>vP%HiFqZ5z^ zPt$$%rpD!sU+NHS)9%e!7_@nMAUz*{u#FXO^8Yvb>+N9T25>Y1HygG0A z*-yK*oMn4=zh!POC8}goH2gJc>?fmwYdShLZF1i8433Cs58(igOD4=*HkBX<)wcKs z9HERM#ta7?Omo;bFtGJfIo7kdh+h$@-JPgXsc&(d@-poH{X4S0!CBAhOo86gHGzlC z+j+~FRgA!C?V{M}_{d~AML0x6VeY5tLkn|nhx$_aSiT*UowMJ=0}Z_V=aob32MHAU z=OrK64e^%O@?WkTnnB%vcW}0RoB@l^KMMv2(+soX|GRU_v3G(0`p=RdKZe>N!~MHM z%Efqq+xhQT&We_z)&?l^*|8*y;=dQlkxaVO?eYYBTmFZ)H&{OZvx>m?|Ho?i9~$Sh zLPHDkV-As#g$1(8*UF8NQWaKCCzORs9e9YozCJR}Tc#BOOTq%_Oy9-DMGZ|w;LdWE z(Uuk7>OK_!G;Juafq_Aj$AP`(<0W03@%&NXM5Rt=r1?TeU%mN)&2HGpKf8rT^xG4K z`q#3dZ)NFnRXV!zCxq;qZyhx|Q9WE8u`{*b_X8PD2CoUgE0YgEw~?Nm5(~3-#4!mi z-}gFGR{4PZub&WR4~H&4d$)B-so8OT@88%7RKmmdej0oJ?WydKcQ;@I#pNB|9&t|3 zemwJAWgb);uxy_n95wH^*u*P6SOYl7fl9SJSN}^td*=R*jvw~6EN>0J8wX;;t#d{#cv;`PkS1h9&yE$)Pa?Z9p2RKkoj#O+7D=RWVT`jnCE z%hME0k2Ig-u`FBV;B;5=FC$>JWtg`-Gdp&e=e<&9swGz4ClVOk-Li*EhaygsD zE7WaSUN8?Un#}Z17QlvRm}>-~CrDx0K9`uU!311&uW8~z6R+~ID8oD8+4Wt6@+QRm zSHW9t0!sHKA0@;&K9BQo(B1LyOyv=FTz#SRz4w}O_UNQ1z7y(k!&D_K!?4I=doFrq zK(7ETLW6R48~s>K%Ukxd&OoiJSy2IWcd_Zq+ zLA;x+KFdTd+V3V*4-p+7WWhT*$NiZb%yaOTnITr{8YL>?AuG6Y%qy+BE4q@JJJMrJpk+1MmXDXOat?bM zC}!L?-}8nn^z5=*2s3d$onRapXe4ZQMA#f-O$Vu0d#HdZJ#kp^Sw8ddfG$FfsE-g* zbS#@}`IPxwz8Qu+TSeP+)S&n(7Gk)xLV*?noI^DTOie|GmkZ-hWa{-E)gbDnA98?)bN(#U7^y{Sm7 zwJH*ET#C_cQ6F!Z;wDY1H5sWC;Y)7bPj?#Ek`yPMOmt>kI0LGe+I4el&c!E6t(gGd{RKWdnR3Y zN~*q=7qawO5C%%hz?;PdSG#g4IWq(HtQiSEyb1-vg8>Vb+%ID!dy|Qjz%-30O-JD=_nU@Z4AP!zxW?>omtBFWF~M0V+mWaqs0RxGLun&&5#s zeZunG!etsddN$+SvhOy1M^HXHqhM-s*jeR%mu>1eQbRsXjtgmt7EI78r7Av_7}TYb zL)jF{2Pz3s351Kh+g$o%UOGfd5`o|PC9(bkBXJx0iP%OmJ(7vDS8~waCDAsy)DZ|n zQW`!>Lk{~TCtYUu^HlU|h`eXKj}tAQtbm&_zz-Hll@nB-cULD*ZS#n3065ouTNRph7~G6u8H zi?=4L#po7_WsH|5lN5bP87FZKH@?PqRdA)%tm5E}JCjj+7q6LSUZ}F#+=?tC-=<-w zqDF^}xri}|w~Igs=Q`hYYC&#ihi|x;!-r;@;{IojQ6Mg86QFY6B@orpEBo z`eGD~=?)D6T*Z06KfAWFnz%JrOUP(c-SZ;&qqh*y*+v6Fa$#46f;7Yl0d9ncBzo>a zH}#u(Q0}4fA76zWRa0wCmKc6k(Lf?wdqB1Qoww#|qW;Moka>0PZt+Ksnz59|qkYo# z-Tpcy>!Tz;^AB!*eA7-&(5fLYAVNZV{H9l2&yis;V50YvNe_w71VV(haoaE&5K(W* z7ghIOGKf+2Su8fykUcO>Mcjd5CGn{p2R+&uy1+_xPCs{x32P)1FM@}$-TUjPJ3PHQBjEJ|q}S_%8?nYU z^pjWUp?Mvy+L_Gf^DWMu#e^2N(1Ti#syCeO>G46;*_rb~0$XDyvL!)Rv;fKcJX;-F z+A@O_u6gE*n(I;YCK!h=(p151w^Fm=Rr-FMf)dHPsw8lIFeHzdp&79?Qz}-f2Ln?s zX9OKe%f~yO5F!NJT`6QtJH-0e%(!FWNQ8wOTaO4LDJriSx3%V5#{CY|FIU;aZi+KH z#C^AQ!SftATdDM%BxOnNcI!>i2K=XR2Vzk!R1k7f(UWmi`;VT932gnDUz1xI>z}gr zi#hY!mVB-rrZGNQpChU*_7@5L2t;`Qh_bq;Ollh>{|D&kPpk(}y zbyT*Z8yxey5jGNfaZu?Xs{(p6`HI~9SCH?$U|%!sLbih``OF-ac^}r2_Utg`XR0d>5pGMdWVdpwF;WyTO_;njwufW*<(Qzp!r&e~qie z&_UPzXNW*hE(vk0{cmuCje~u{N9MwJgX3`@3?QScFY2Z-90u@l8p=9t7&V*kvTfEO zh2Ld((ZNzya&CXs7v9;jt;>bNiSi5{sI@}s6o`n>A{tz(Js(@q^iX_0i1OwSeod;W zd7PY03Rh_EiC*0qsucF@xO@c`L)1Fd?o>1ZDbitGf*Mt->48-%Vb8XjPIXCf;RLxB zN&?ES4^?hI(BWI`+AhrU|1Q?!pXuy3bI~ zj>OccRhG?)TxPp5$32^?AuOq$9<~fOyI{{HpB*LRmu}D9EJ1eOp96nu?W>pe%2YbD zbJ^5epRGLI5&L_P4O|fur>8OPd9I7#TVZ(TOhIO%MoUJPxGCy{a_EeZUe*gSK7@bH zm8JcQ#j4E-t;jb6uvwo&ctxjCOKtZU=MxF#-q{Leqi$xR{5-mb#}-}fCf}dtIfKgTh4bT81;uRlAGv1A9U5t%`2%$+%qno*uSHT?A|Y}W%U zhJ0W}T4}QKsIm}vxCyA-+^KD>kjk^MIO`i5*q?gsqWMYg@zY1%Vxt-+Bn%N6q&txuDPYYPBU8E_o>c=jw)E1v zW6HZg*ZMb0?jGvN?2&F!J)ofPUEH|k%yO7Xc@HFi2&GnQysN7}k5yky+^aS0ZPC@? zzWuWQUi2?cV;Of=sj@vvOwfS5&{uPuVL#b-MyB?P1fY!z?7yS%@l2b|-E?shHXIXC zidy_zY_@A;rHtgUtk$+a8c+2SGwsSivlHjRX~DY2$|OMCQ@bXTvAPViu+; z<&lni5shr5Ne-p$`}LV`jK88@TCO?TMxwyJ*{lLrdX!e7;QB)?pM0s)TJZV^Fv5oC zb~8RodTO(*COUOC?$d{L`yi$U^%RC~;_#`>Fgos(^xP-Cuy>w4qR=*X3{KA} z98es0iFj4NZj%p?k>rH2t`hEXxec{mhp?gp5ND zvX`PtXL2O@CBfcSg1-;-bW~0#(SuGY^T^3T(F@K-K)r=Nv82JEW*;Mh!eoXJI}$-- zJfPo{Ew3$#`c@IS9NO;}z6+g5_ae{mIsH=ia!A8OYWRzQZtUmjpb96_ry4P6h97_M z@B18>qT#%MKU78Ypk>^y(%?~3IH?Qi8^|`_ew(NECymD|h+6cBhzj9*s~?Au?;-@L>n2yPWnE#HQFkej%yaGliy;d23tBMlF#TdUno}Cm zdH23wB~ThITn2P?=iE1T{IoE`{!m8{%&2+(V(%IcN-iujM$J z0jjeys`}+kJ6u(qnF!}b2$dM&|*5TSkAjYe?Zr*DL@?= z!975u-tr=Gy%O+fFNCF`>G}?_Z{0n0*6H(g%>xaM0$Rcgjh;>2rf$e@cLD;GQ2teD z{^QYV#NEI%#5uvstfkw80ymXM0W9t8)ie~pF1L1eSq-?Vr}9`xox8zV!Gq?V^2Rx- z-Nkb!m*;H|xe0PbH&bd}TCfpxm6cHb2R`e@B}l_3ccayL%)f8bkjwSDETV)|dK3jC zx&0|W9ArV#VlfV&5SPx*Aw8#1m7}dwVVB7-C$NZ;e`^e~MJ^2o; zFHvuIR+WD3XHJXX7^|g?hST(9IYkld4-MEA6{j z*&f6Ok}qUul5wcZ)LPtH)&@BV%UQ*D0uE9yAxarGYlD=KrOp;V)&v8WP9u`O=OA}C zs|%4D(O5fLF}t(bZ^>2{y@1r?cL;8aW>|BQf$Xu)H z-|b3>b7J3ROy$aAr)D4Wj=7?mr+d&9-i2=V!+G1J5*WXWY*s#)ums_!3orxNC{0sd_lK)h2E^4uKiW{!q?Y zEyK-9?6bY{I5i&n_u*g0cb>#P{-9}*<%g@#sX6*?>&6Jn=Z`G2rD*jEY&Dc8&VzTM z3fkY$v=+KB2)gZA;Kr818zTvpUTG!C^+nuOGd;!NV>76~93FRU^gjuhS5PWPbwXa$ZNr7Z31l~g8 z?%K5#M=87v%7<_==FFaTZ#6Yk3jYYhM|BaLrWs+3(2FF ze{bDs#eH;(NiEyf%)>G0R2)m7_uZ!!3tg72%8Bth!$ZGMcq?{HnfwiXTT2Exc_t+v0gOvDJE%bQ}%17D)1IIpxok z8cm(S8A`lk<-a(-=!@D^k*+cJXo!DFt(e_P<1Igna2dst?!j2ooL>_^5jco;*tB{6 zeq&4Y3B?mFh-D-CX4(Il%QL)3IDbLUZ@hLq4Pa2nk{Vn;+lFfyms2Hio7dw6q2<@@HUvaCW4&Zw(ocMaiNY(%3bK_dx;NAH4JMl`&Vv)?@(jm0>MQ&g zRuB&2;}=rEaPry^U|s)%)^Wzv92XbHEVam^g)M!oQNXpOFac+lp!;kIhT|6leM;s zWQCR4s;O?@d6Bj(#S8x$AeLi6-PLs_R-Xq9x_U&ku59-SKiU_WnZBFU+J(js;MMb> zQ$tze3P;k}b*O#sTP^-c#s;y+i)!WZaS~0sKR&ihe-~J;yLt1xj2X`#%v~tR2@>7B z&>J$p^=9f-7&AhI`E)(GWIbk04!uALo@y5)B0?mp*Ky%!cV#{zojZo%yZljKAzFxv zN;DmOC6wuSlvVwW!Mj(bE7_T_MsnbiE8EvFdktUBjd!Ov*STRhjSSHh?~D4hTH=?4 zqlZnlU`bp3Op)JB^h%R}+!oMV`1pIj+(vuhJX^#)#EPlCcgD{*kD*Kkz9j|NHC;f# z)vBybbFo_R-E0X+QPt{YFXzGe^YYej7HT5M!nt8XrWz8B^nKuPr6j}4HH`Y9^*->T z+Jk)Hxk_m1oFe0+rO8x?y^NEDU*|qLYTd0~2=AvtEle3;7?Mm3OU}XKf*cfj$)vdv zsh`wEWm>A5z4V4SwvkiBzrWb3X{*-Ep~omZVqinb_;uGxTvH*4^wIL)FQMDfTQ(-s z*hB)oIzQ({8L+rGv26!WtKb7GXP!e%LpIMY zKViNxdewg03E+ZKQCLFf&UX-`S3Ap|xM98PM5#02p<8hnNIlYH#r2-BCX9~V+TvPB zCUnv9L^w;MLpsXKRBG0%3vnsbMaV&@Lks}r@2n-gPcs!U7`JP~aw=!o!)$UPK1ru_ zSsHV6Y{HGrg{dgU7qV`~>|x zJ8zq-dO{`Z^4Fn(YIQih9Qj?2AxKFRi9D$yZ8YM=8MIez#9&!Jpg<(LtVa8U zGhn>UI$IU3DA!hPgRnrzRivbI5<|hC_48CbdM7g3yo`5R+#5fshRYv{6sN(Fjd^*7 z@w(K`na6{%?%@58DLh{bY!9{AQB0wMz0}nWJlvJQPjJhk{dHkv zNL(S(2>Nu5>$F^p3cvD2+Onm=C>;<8+~v>qyDS_$hP`aSbp`3GA9pP8Rl|oC3ydWc zP*U}o!fWl>mansYbU3z$Km`%$S)D31_phMDT{42ozi2q0j1*X&y*6rk2^U(x+l#e( z+Zii{1I~1V4YQsdCRkTzVH7o|_^Fh(>(1CPI*MFIG3X zZS?SSd>_k7;XvP(<|5@%IgwT^q?U6J{z!I}KCzC=@cKhb<61@&S#p2k^40nkIxVQO zwm&AQ5Wb{MNigVW=WBYGeSs0{%a0LbSr!u#H-2p<8_#RFu5rjuDAQdnIBV4b(W&W| zC3yWCI0%*v_vt|r9&$wilfx;O7O;EBD~yHWVmq|;*`VD0KST#EPtKnDt;g|W@D~1F zXk?F<qxXXTw=0)?OAe;J0ME97;!$MgBMtg z>W~={DdLp&mK>@gH+pM@hYf5WCI&V5eC{XwmDR}f_~_(szQ8MF@CsDR=sIfNl_ca3 zFFxRUi){p#>{-+IvJf0vrwA{$lN@U-_~iI4@vzH0 zXx=HYwjG&OX{K*1+7WvnvF~^=Qc3dQ{V<6$9LbtXKRh*^u{l}dfY|ot+nB+6JU@a* z%Q+@e&K%ePe)BP5GrlfJ`HJ*m5~TbWCc7FrJuzUoaXpB;F9gt^IHKPNHBV8f9&>#@ zu>gFXMEba5{&oVKM}f?ZuDY^`vnmbs4|!@&q^FU5Wei~kVNL10$z?B!P|9ZrM$FA!@mox{sFdr`~KygNDxS?_49A zbnIO@k55%f4I=8Kcd|WuCQd{Hp=8>o}dvtzz=dIoVB$;bQd43>50)!8$$*E7s*kyq5 zv2d;Ti$oRXss3lq=TN+J&Jy z0_N(K-R-o92i9U)A+beX@jjErZJVs-XMi;q{c6b~Y-aF#Jjgukj&0hcX5b<$ zgs>~DMT#Or_~FU8x*r5r9`XJKV?Vgt8lg&8sqm7Pf=^W`p()8sk}V9>AEzmnY!)Vbc*kHpeV_mLout`$9$%?-o&W;K;Z$L!fXcGb9dgYeb(ei&lW(%>CoYpOBXG{wp`%QyuwFiU-t9uU@Il^Rc;R|KKX2EJTlOP+82 z`hh44$BKf2vJe&;`ms{7rAp=)kVIZ!v%aKiDxVMwzQ*x-i~!5Wf+@CEzYh)R z_zJ%eT&Mq;Rgb$Wjc{POP8E?*n^hEz?H00_RLeW7Rv@8ID2o2@H1*7^>Tbd z8#6$LgIKybmJ@6s9wg0fg!m4QxT;70y9$3hI8`fzHAsRrk5<~7ZVaFr-p?bMJv!EJ zfWpg!*zu_6WD`FVlGwMGUjyW?A)QZ;%onZ6>%G(P#(K6FguQ-N09(^>>%1;(VR0NG zgzzzkFO;=3#3~~<47XKdszyYefNDQx_CVpEEP#P+j;3RbuIESXBx-cd3gaXf7wL2s zwaS(Ws0{<#Ej^^I4xg9Fhb{k(Dqtdb0Db*#59fbahtj-y=-+z?)3Y9omX2jRy)*ej z9I3KW&IO)bzG6*R_H1KvqSH6$N30#G`REq3Tih*R|(?{AMu?Yd_un**pE+*6X$W8fQdV8?n z^9zjI9)(C?0i;wicr|JyQ4o!k=}))C>*u)Sg#Nz1jkRR3tqVXkJ(#H~2JIS!eL;hL zX5=R1tge7|bjdVdeY73b-_mVi_pi_YS=saIId?K&d-1ID`r|d^4Y$gn?cuT9hXbBM zLa4~*w?cWB($de^umuxM@ZOKh>u-q7_B(`NeSLkF?F@HT&jA5NO};l~X!hvH_V`B9 zqVo!#dzegENmnBjs5#BUbK*Y;q++{?c6MrxHsI@7uK;*Ft%vZ98C&I9{0H+9YURNW zP&~r`6|_;&TDW%Qi z?@^zZefGizeux9kAsTa-F`_TK{OfFNzHDWOKg*)B(*owfF`J9M6+w=ky@!qfi>5*R zb@A3JYL}CPlQYm1}ED}~a?gbqPw zBPza?05>~=*@oYqir>u(*qY{e<|U;5m7lykAhC?`9PD$CJxT=+h0Lx-yAb zeS_K2-?jG76`YmAwM<`@tEwOFzYs<1y|^8w`5h|qN}PfB3y_|xTZP<=HfxtRmdpot z@1AA=9hZByf-Mv2By**(l1SYOEKqH_t%2}IN=?!6OnTR|Y_43CU&v=|pq{tUX_*Eb zA?>;Z+5^-+q{N9T$mYfK#;;{jmTG~IoITa4FdC&_9#gwqS!ZSG3ssyv+r}T{=t&Yw z&!AVOkm0_|$&9Hi(#{k5k;WVI4Ghq{LOSHF{pBCXOwWMkG8X04*@-f=U1OIcif zDf;r()TmX_a?wi}lQ&u`&RnAq*v8R7!q?XrbvdSUX6;zOuJPnsXb5$_i&}OFjq-3H zi8gd3EyUoy!F&fos9($s8PrHTGJ@5n6HOE25qR`mMnN@xvo$BtkZ7i}fCD z5d1R6a29|B;)~8rp8)tdZUE!3O+`tj@wMS6V(%G7$2kB2=%PNzONL2~RzoN+{daXK zd(Vdz$TujwDX`(W3MZoT0YUQhgj`~M*Qut_Xld{8Ld9u2+I&Yg9bSGQeB7dQHs{9F$Xk^5uiaH=jPpc*YW3kTDbsCwhO0J znPTiM*K274h)-N?{j)&@6~uQ}EALyY+rYLT4vln6~h#}&TA(% zJN&*|CK_67^){aB#UAHOkL4fFM%1CD*Vd>H=F)k;8a^}vR9oL+E{CIPMIzUDi(_Zu zi@jnH!u+hBE7)Ci>KTduO)NY)GG|!Aj0Yc>*tSOz64X(lWOTL$V*C`?}uP3rc->59i6u)29Iw!#WD$_&Ivsu8IIA}Ew zxOENV%&hCJPx~-|QJQER>mSRM{Yg@MChn!8Edr}UVo!l8i#ZK6n!+yF0BKF%K6 z$px73glv&rtsC`Po1el4r`FWM3z256P5~2J{ZRPPnjGXYh!cmH4zi{3DB*Un_&w}c zGLy{tX-{e6D^eXS!JRy1)lq~*`o39^>x)ABjNo>){>E`o1Hmy5E$4f(H@AppxLYcO zumoDY*tWGB#D4_ic;Gn!;F6;gUksNtpWj3=m7UEg8|q9H0b+4z zktVn3N7h9aL*l#8N?B^Akjy5+OpJkISp^eto`7J)AjsS*Nsy{DL z=cEmcB}Zm|PYG(!XH8mJ*}FfgGl`Fq|D-5V>kE|VWW^fbH0b(pBsGdDSHl-Dp(^^Z?GU@m2>S1+K4VoxZl>1gqbo#BL-A49C2GE$(eh6Px+T>L-S%>#~it zG1lO<+%3TBPWzM=v~D00$ZM)5ws{mVt|b^p686}&CmNCn; z+|QUSm@H1lyxqPHOabMpb}qh1#l0A%YmoftZpR(mT@_%=dM=rVasn&s{Bi19Sy*@t zB`JXiaP07#Kt^to!6|}1$iIGq%%I5cuo_`6!+R}q^r1V}u9|?Mw?;YXzVp<*t=fWh zU{H^Ytz2Je7rfkaSFN_dCuL9%2ez@>`#FAH&QuGZUx7W8xW?OS(hYEB7-lPxNXugS+$2Hw$Qxsbz3~jx#}_YWOIrKKp~(bD z@#k0U0gH8Hbxj~H6dJb@6xvG8jkXR4z>4trg6qV3C>#GlM9b@?c;*Yia1DUDwW;bJ zvScU*4LcUa#y7z$ z`pl!T{z4w)HR4weA9rMPdly%B51@Kv)Sc3Q_W*qk zY?~4rwIQ3;m}d{Tldt?2G z^G!8~D76KZW^b9OBR7Jm1Ch-RXdi6;XQg*i+Li-ReLjEsw@tpn(vdu(M;KGL)Gqff zF4o(Y2_UVHj`efRWxm`E`rSp*(rZM_kKhCzQvux9;Z^)Ayhf=_mLtNN$Nto%9Nb8B zKihB41TW~rx$i6gDLW_f-nkXkMaD{w_hD9Lf6Tx;s0Mx-`4MW#28yF75sMgn0uVFI zrR%@7)ry05L~gWc9v5mL>#A4g9OLaTXiC`E7uZ>q2TPCYp}np)3%?buL-lgMYAF{E z?b-&Ji2ku&^Qs-IxL&H{*xU1Q?@|CD=U{)bL z=ryB7fo%TH%`D{uDXBL87;w-Q6-(U-m2bx?MNzbU_BA83>&ZRK!#MSd81W)XU$P{; zLK|_-fd;J|MCQ;Cm3a9`tKs2SsiNHRcp$6`g;CqRp+@0WNK;#;B7WlIZ}#j))9qg& z3z6ha`VRaH*9G}siHY^@w+fIG{FP&?4_}9Gp#+vaD@`sz)drI1hn@wS%fA{blnMaM zvh~y8df!_YyB0%`y^BWh4lF-9o~HX3qHI}Kwue4lR9H%}W1^7HH|OR&2d!T3s33U> z{?;-<6ry`Tq-zasb`T5%4~R&vDd$^G)92<%KDNpzcC%C_m+Ll(s#fXvj{g)Z!0@CgbatqEjz zHb1Z?ox#qq+r5!8X2vmv5(=4$-`C+=*ApE^fH(}jE4eozL7%!bCE(>+d_%-`E^N?N zuoJ~MaVyL5wsZR9X8$j4hOvqMiuG&VnP14BtGDC&{Lj<=t$x(SfV_SzJk^~@r85h# zdc6HUA)FR60b!OS=-fr4un-VD@wnX>pN;d;)}(e{#o$G{eGH$(lmjrDpF;^&)xHS_rA!$Ek;+3d$x zf85rJz7$dr{o+yuBp8ptt{)RbKZL!Aw!)nc-yb|Q4g5FW-ZH4Ju36W{CAb9F5G+8@ z;O-KFy9Rf6cS5ib+#$HTySuwCB)Bbt`O{eqr)Z}wsNPY6VASF96GU8=F$r9dGf&WNZ89)P<*mVJeOC8@u5rUJ(! z`G}um(mAuxH2A1{ai6($4tZf>Ox#qMCt+_Fv_Aa^A{R)zwziNAITOJkI)-0fk$?Ba zB!vU!y)MM}`A`zgX|?W5O;ZKZL~Y`Rx8d;kBk&(pfIN=??wzjRv4A}o7wpkV6(~w9 zELLxZkoN|kA~R_mc6x(Rkramo00G(wcea9hzZ^+eIngfo40$kPwTy$ajAhNVdqNd8 z+!3q;g7z-G^SkueNa1InVBq}(0opW3vGr?uE9%jh%6P15J8<~TC?^Y$6twFMRcvF` z#Sh4*-6-enxE-!M@Si$pC0^GsLEeyLd5l`YbN`bW)NpPT1RnuYs>_(|RipW$jQHGo z*QuRIjA>%Pjxp=OG3NMouyG2?p$aq3P78NaSDq!~mGdFDe}zP{QH4)irqj%lsmf`Iw`b1<3kvKOAj!D=*&y#+h3%`uG_|yuJ2eM>HwV9BTSlx zUKeC{JZR9QMA%S}R6qtwt5wXi-MiDh7!FX+f~Tfm0Msaq-!l%;(=(FW@39-OAdBDc zo62`Nuo9`f>d(k_HcJ4k!%)4x_RV$`4I*<>ZY}>tCfKmsRP%>0A0tC2bjbGG;SZi@ zbdST&Il+dW)P149^kGq7$Z+z?&=dsw=B*UWIMv`*V(h57V7*jl)Ypw4^gsOI<^ z>M>UsVB_am6g+LJ^rPAhkX7mgNI!ery3TKc?O=H&T%ffG(qiAzFUv@S^}JbOafH4x zu@4C*46!379KmU!AtK`A?5t2;N@`6}wgn45OT!#-R~gv`6ChM-fPOhu%=&pq5yOMT z3QEeoUH6m8wpq7YlE_Ylpn-yS8Z$p;XbVjw; z6@pF#OemGu!k>fh5UHhz@8>M<+i;q3XUBaRhQ`?usmUK71RE&fps5V~(ZtdPdd|ax zY0`3BDpl*rq4V`S(}b-)O!~<4BuwZ*pcf!>)PPORp0lSnE#t#{FK7%OGb^lm!nY6U z8)E%sZPhmJs9EOvMLyQ6;Xs$gG!U6D`3+161a=m&Jei(_?6~da3HLJ4h-}1FCPo%u zEEYc7z1lc2Vcx=_zT3_0vzgqHviEz0laJRjG_xQJh<9zaxc>vKrV>B%J@Phy&T_qV)d%FtS7Gk8(B)<~$a`9$#Irl0;+n9!L-1H&(`&Qlia0mm zzBoM1<*@V4e$@(a2htOT#y$YS%z1UC9H@}~n&m00y3s|!+KE;Sy{j29EA3EIip84c zhDqjPV{fj@Z7pYQ;OS^uy1R|o``R0JONK*rslO#8@L2Mm##UJ!fl$~OYRkJY!TS)5 zFwB{>Z7Uz{>_JLBo-Q^ysR8Bo4i1x^Wt={=Hmq{YZNA1k(gQHI)3|4K5(+Z36eiQe zE&z{EZ1o1d4=Fs^X4BFa&<@U%B4?zJmS9cMHbKxeBSnnxAED~m z4lshjzc9R7&D?32{4gH5l+j5B&AO(<1mt<1kAAc&4W5GT=pN0NxZjsT-s{0vQb4ml zfW$)05q>3~-x${JeL89`2NKh&L(dmd`Ya%X(q}fTXtJ1U$e>9XH6u_zE&iz6g-v^W zHrN1Giz|{(c9m3@68kY699x7G44lo!u!1Pa`neJUyKnLNhM9{7((eCgUJ6+Hwo)fT zYMhlr`?y?$sx{Y{Yy*blulu69LZ5p*@aNOOq$mYsr`GQ;SHpaZtG5$Ld_{lCmgUTc z3Ed>_{hEZ*Bt0z^A~4`dyMElfgf`1wF~)1b$jS zzT^BFGxY{yoniS(R>UP^EY*np|5v^b`X9cJ%;+QaVfrEaiH$Qtykd!d$zcC58eA-EMJbAeN6jvLssRG|E&}!aJJlGNL$%B znLVf4bPMtvizW52jF#ebBrDj6fVbnxOL~fs;85g#ots&Yt~H$p*(S4ysZ)5dGg)5 zQ&v8mOuB!gE9||Vm*xX+)pmRzHgwZ=TX|QY_{KSRg0^=?G2WwHhe&8#WKuki6^3{+ z&>P7y#(-q^8VCmKxst4aK03Pk;KXI?4$oEyK=iD_0A~u%D74ocqaG^3?Oj=T=Kb2s z1h}+(-Ory#dqJp4cVs49k2n!wVfenu=lseeB(u`g80w$U0uh|+;i0UV+5?gR$OJCb z^?Rhyc6AqprfTd@u7%lVOkGEcTs2i)%XLCgcOAl3Ae(zM9bV4UEk7>ir@I=Rso3aX z)%p!O+<0)mk#aRnDfMRs66JMaGSIEv>Ch-7JJN_JNO*=T{A<9fgY&A=`_~g*OMGYK zOgoTTgBd60Lzc#awn$-;dX-&-plP8L2CDbE-)9ysxMxATm$mUx(}Ev11)&)Dmx_hHB52@@Udea4D4 z=X|+K-pmT?f(aoOUyUWv72=>Y)qJmR*O`b~3#Q~`67-w?Y@$`-(5hIF6T>BWF46do z9bro4+-{fTsNZz;SS@)5w@3$L=wFsc52_WMt%|orvFL#S>70~RQR?G(eb4^8o$z@w z{Wz?r?lkaT3*u>_JsiHduii|6e|~srDNqI$pJ^PB%?sgI51l*x#FZi4}hrV;MBeSdz= za&oKJGvxY$NXH^PK!ihourR$sL2P>&wwRFeOop=uB~W^goAx;c5~7i1(!WE?8NKFR z1k~?l2Fm)(TsF6DAfw5@!S2>c0JH7w_z?lWlNsaGSe~n!2h)$Z;JE`qwV4M5D&0=~ z>tU^Xsu1e}-ByVqBX)YH)LB1yi30Y=IHb)X!RUATu_`a|DF0yrtPGPmbEzr-M|j+E zRdGoV6MuqjZzJio1R+(gQZ5PuxBd7KsyP^!xZ8i8pI#w!w^pVb5!eLY(T^YGh6ttD zVSc%-lMku2H*kFF{%P5d&lZ{VxLw^^X;hM3S?XkskUEKO|6ShnQhLRjN}6aI3rGV0 zSuOvjll9;|(M}W1HY8>}~LSDhe7n&dc5!FtTqIFV*IcZ(V*;irgA2 zlW7hlk<+XQ>Q2f);&d+^tu;cLVzXO(>CNQcJ>DY-Zn=u+?Z?m{=Gh(t`scqcjJ`hG zav=Gy{T_Xt>+QNfUy(zP8P@riE_6{0GpsigGDFS{LR%t(3e@X!QI5YG1}3>)@Q=Pc zv2Hpd@2_M*r^^``B;IymC7Ze89ZIIk-)7&j+Y)|G!E7wPw`LtzBYv=NsHPNE;KGJ$_2I4jgA_QAX68twg7q?CjM7WhG7;_(ab;ooPI$9%~4 z;Iq@06L|EbB;!YU&NYYwrnU^fvTc(eX7-f%)y8(b#Rf6fN>H`f8;FKMiuK3>WcloW7bF}mj{ z0=~ny=`lyAYt#D7;zekA4g`K|4_6F_8)K>!D(i9^r0CVLmrtqvMXqCPxhP&>+_42x zywRJawVr^LtB4gVu|yx;y&k>aGnw2}iWwj2MI=Xdr9=*N&(-@JZ5kq(O9oGPp|OTV zt6A1Ll&qrH1|P``T5*=q6;XGtbOkGQ*iB3)C9DG~n7261W7wWtJ) z5QRN?=C(X;0Il7#K2AXwh5zvJO5oumi5my}kYv}wcJul9mvH9*3O6?m)Su@mPx3-a zRIoE=@E>_f?aMp`qWCQNPlsepyb2twWS%w=*q?6`Z%yv_VK@l)P;P4*5a(VTv2f0o zaQTCN$k(%mUt>Y+oT&;7x4h<2b~jttwdd-bAk>-HOpfK(@})$j!OT{b*TkZ33dV{N z{uU=h9h22h%=%S35zpaK6O9eTxTN~+)3x;pe9XLhjmYGJj0j7N-sQ2jEi2_A<0juG za7TwI*_EQzr2?no1+qdk@8A4M`4QCZKGQ-F4ROB%*35=izTba4T0+~&tw>CY=p^}y z@SeO&(2)24nKaDB`5#HcIs2sDX=wo1mZQ02uoH!=w%qV%Aq_Tm$M|V?IRzC2iibcy zeuH9aENS+K1##~S;GNGk)^B>Boy)S2AE=Vd#J-4w=O6m1|p=|Eok=13(cQ#3a zZZKmExbo^*V@;D0#nSs%;Sbji8)4FHzFNc~5~UrS{@^rWUIyb|Mjdj*CIjZDLI1@d zVo`hhAo@eiG$Z+jV0+_bk+3z4BDKZa<-<`rFdxowpuVOD4>c3eFNDByQy8k5G9MO@ z`TR-?|G*|)Z9IAS#rdYzywT-^!0)_+7<>@seR~xMuW*f0B4=m^{03tLEWIpJa);)< z?^t3LFsU9gJ|YYhj}{@?>ZSV>L@*fDvucJ(f1R4;!X93FgTfsCPPmCA)ww5eg}1Um zMwm(@MSg(I(0h%@Rb2yT0LPxknMLEN01#2Y7}kyOI`I;Qmk4T(c6DET9^1PkWvG`g zPj2*aUfg4MY*$CF!)m@(y-8AWXFuvo9gp4I178r>ckKSLT3oA89Uw4I9Ta&8%3KLU zhBtDz`WUrvr&|@%j`>VwY_&6YuO&MVq8Rx@bh@^2@I{bNO^uhM2Z9OhnRvd(C^)^w zYul8=%Atp6_001gMdamuM=LTbN)JraIn*<+12Q7xfZ;uSNA>CPKc``F-p5_`%OhKQ zE0NPwL5UeA`ASqElVv6p(L)~typR$GNBauDgL+mI7q)ID+TrvWsuL)WdSI^LCBSxF z0-G4EI4QVaTYH-@M_(rPn{sxsE3IX84#j16e1Gjn1`ejYZC@*O5_rBTLHm_oh&ez= zSH*Vx_6>(M?OsP$#<4`OU&~ta?hfGGn*@EDInzn>B{cKmP3FS0YRz)Bac>(cBu?66 z`aL>(?%`dymh**-eq2sJHtQ!bjfm2;s`2QB3T6ts+9r7YO{q(&w!Q^Lvtc}PoL`o4 zb)@sw56-Xx%v)&)kGel6m>wiz`UThXU!hu`jpFvVL0a%LqhXAjC%yLQd&qXFr5I;{ z0u@+YDi{GQ00j?FZ@X9Br-AYT{{I8R7^eI`GK>*nB>j#b->3dh2qSYxj8-!xms9kf z^>p{f_t6kDwV(O#fE;k@`C711MCdI>GtSkO+ak*rRiIG6BfkGh6#laXOzT?@~rgs(zl=kP+JPSl6-3e&&YV)kJ6w|g|(w$^dj$w6vkfN<1W znb{I~88X&o6{kWuw^SuR2ID9e0^tJdXWrKQFG;0pYo?IkD$estSbIG|Uo&reVLf$O zGOMQxihM3;Vdv$LRU7B-ug*}Lw!NX_VVvd;X1=HcbT%`ffE+%2B}`->LYq-?W%ItJ zUU^~!)RX#h<$U~jHe+3{9PtX1gzdQHTxx~v#9GQ+6hE@5nX;O!Teus7JpYL{pCZq$y?nhhBFHP;)M6d6`5NjB{}`U z3*zSod2~3I6P=~Wodt>I8wMj(M1PJ&4&LeamuiHlfzC46iEn(z-l0T&`(}dz2fYdp zP1UnHbT&_%gyGB6NE`s^r=oS}$_eg4rT5;Z25QNdE~J}jNskOWa~P2VvRRi%^{TWN zFkkff*|bo@_y9n%X%z;V^Yi41Ao22UNaQwu0Xm~iMC-DwGtYe3sXD+iqGhH8Lb}Qh zlxkcjTh*Az4(xy4$k3=^8rkBy0IaXOHV}w2Q)6a z2O0xoO0DNLDNhUAgXT5Wwld6_xUlCz`)EDd5C;o>CY`*L;gjdv=d%)3+_% zpTJ%KdVZh%3XtjW^u}B{dxVT)K|p`|FV5)mvZJczxBpV(`qHJ4=9+N}^6Jtj+}3`F zSZY6xnPB5hZD|bl3siOR`WE9|j~12ksR%n_n(}3Exw_L*L7Rb65HoArLS+yVX{!ZK znRtj+?Ko9Qbcz3$koFs=cUh37Dsg{^@o1ST=zji`wPMn*^?KPSy>OCqm79=cF?;k; zX^Jpu&h%+6DA+sLyW`EIN}+dM<#H81@IFoR#64|vJbnLHMa}H~Urw{m-UI?8FOI7L zf z=Ce~pdjZ=w9F*JCsPj(2|qeiD}>j!h~bVa?v^IHB6B!WZN}3U5VWfRbNa zwaIu|7|&_i$id;O=$zDl8U#-M?=pY1QU90f-~ZmN&Abur?VYJ_^6|S@QNn*OGbk!= zrj2rUS2>rM*H-^~8Ew~0F!t$$m2B~yIPw1D*ji*!p|RNsRoGu zSuQZ~`w(;3tU^GHCNV>^nvQo{*O(e!r>!tM?vAGZqyDG$uliq6@ayO}^bZUGntOYV z&pV%JZb~_j&p?g#&6?b9C)X$z0|WRx|CeC^wOwEDlWo+2U8xipm8ZGT|Pz3eq6j8h{BIczq7 zhS^^YJLbxupSJLkd>*ZA*T z*q`qMG!Ij*=?iKYOS*jpHY7&*EZ!rSuR&U&K=5dm!Nb(D?5#baxW2_h$@a*J_;&3Y z6?AXS?=~yYRl-4z5768i_n*#QH?)_Ir%GNTe%@) z=H(iOKtV4hM!xNmyYPtC*d%AVvdxE0ss(-iWjxr|6{XemP@Y&L(1cdbmzqA2eBWHu zo7T?E^KHOhj>@?W%jwJPK{QFt6nZg-ZjjzuW~FvW{+Au~I|>yG9oDUc!lPIP5?zZ$ z(>?@LYY>|9tiJKRB-BIs$JDx|U!UvR zovyrzfc`MVO)xi3t)Q;_IO2uMdFsjX86?87M~Tt57e}yfF%eDngy-fifxec(HEbEP zz1ZMR{H4taT}5VhG2tMe!FcY={bA!{BsnnL(ilX@lEP;heKd(9lU~hlU{#UQtb=Zr za9~g~x=O54)Y;SL$Q!HPi*5DZKWxQ`W`Z1a~NiS1*>UP|qEp}!VYl#evx>G$FlVsL*Z&WwB zuP+oQwr61u`?yjvIa{#adNX835GT)Q41w2`>vS)x+>Ca$d}GHJw2}4xSZ@S-{gS%+ ztO<;qA&lqVe;)yaPDX>NWuCNF6H~jq9_iu5#nDg4LpWr_DZWYdiqGllYi*EuyzI#& z+=!O1D8~IVfPUZG8Mi1zW_%~q0Zzd|u0k|pspEM^yxWQW)%)8Cw($?IL0&Un0^uu9 zlG#)!3F8BbqRkN`#Spv=5Fc>{`~&^R`3Mixq)!`q@RR;EF~-El@8* zmAlCEhQ5E>^OOTcv2f)1G@uV6L_VA^e6Cv8^%#7*w%rq@jla2oG~0X+UiP-2eq8!d zNjl72Z0S2&9lIvGcGVT|i{R@RRIA55vhG_Xo)v^M|A%wvP)Kb1tSr|F1KxI$sqv>@ z23e}&XCK1-OKPfFe#jg77J1>Y#u68C6Lh!FTPde-ceE-}Jg(eqPZkoSXGpe* zixk=jeoh`|shmC&ac2sWd=^1~hu^69u}Gd6G+GJ?BbzDp`!g;JQaF>5P1V}4xIk}M zX{S+3(vlb$P>RBXq8S#;>94 z4{0T2KjENlt?jQQ;P}A|>AU9}Z~-N#$9B}VY%TgNBg9^!nm*Z7bJ?)!%Pq2RgjOi$ z{OQ2=V#=goNUv$m@1Die=S3>s4AF>?_REUi1NO&Z9epFJW7$o8Zo6Tm+v*@0n##tE zMoSq53sx5rG44Zo1|4PYhgN>Ju#?~^H2W=HzibRLy{EO?%XjZ6Wj4p)TTu$o6KXfY zFoIepAit3X@V3oZfLqam@8qFSMY);;k9>$UkIN}WihG=lgN^V$qm4*Q*co&C$!$*J zr{vP2a1u!Qq|%bw#R=X4uf7TW7MF5ecIKTXXmfdHjz61I2XCFgk$#~!l0|Z|8s`nh z3$O+znU_Sj1OBx$Z!Rjb7?TmJ`fVN3;en?>v)*O=HgphmR>?MA|0rWdd=<1Y!e=q~ zBRfKNUUwKu(xA#Y?PoBvlS}-jdzqt0mjy2)vBX}5p#>g=wMzUXS7ylEM7-DygKpCo zXKq4aONGeE7#%;-Sty?M(@3p?aNMYz!b^p=i}sBwmW|bcssSyPTCnaBN5~2|Upr*C zG3Km|^Bu0?(M{dQ3#iAedc3j@#iQmz>2ITQJvn)O`^|RDMa?&-8W9eI2&D9mr7`T4 z*ly$Avp!vPEKoY6A{83Ae!p;txGa_Gu`5s;+8HZ!pnr6l32HL4pQ?wReZ04fOL$Rx z-0oNjHteX=1czwWV{PX5^u{JfO7`Yw^I^bU!_4CF*Z9ql899faVSET^&XZrXnOq-HB>xuB%x#^-WCo27s0Qixa?*T zH&eEt!xM7RTFGx0EX8vU@z$0|Q5%!jW_R-y3!9Vjzu*Vc>1|^iD6%`IqxCJ>->@=@ z>&;w?J+#P0agls&LY5^aSC%m@JjDxJs&LRqGB>E=*LO@C8#sF@j1f$4LC#cqoq%ob zg3pR>JaULJx?wd>pVP0~un;&99u6v_x7m|RetW+-Fq77%D)exRdBl+yPWNpa{&lj=j-qpn*v zoYop1h{+`~rU_=@0Uh~OM@HU2jHjBYv;!zDmi2blW8h4jHm2;N{c+C7td5%qkXock~2 z+L&z|*Zd6lXIIs{341ka7D6@j*^}U6g4v5&yjd*ah7)H|{9g0*YwYS{9DkhI?HbfW z`>HdxCwnF`jXXwuxvqRF$-blneS12om@!2SZ zm(RtN%UwS83Y;O*do3sJkM{`jbQ%SYucxfgg&b?V!_K}pydRDwmR(h|BvHv-_J83D zlm#={{SaJ(#BO!ycfkql(!l4D-{zzvbIIiIhwVW^I)8LDHshN#;oa>Sm<%I$>|}~H z^dKPZ$XI;ixSNyJh!q-da)x$ZAfvyBn5MCa zVV|aCV|D^cdh2=tC9*SAJadfv9{MVc)5a1TK{rZ)JWWHEdqYrm2+OeuY|0MKEPNKI z@}TKr2WO|P`=c@var18^jDE#H(tqX^HRz3xyF7G8@f9p~Tlg zV2`5nvk5PnPgp%^IVB-|+=>(h(IUfURFkGnnK~3Y;}nFuLNksq+_N2G1xMc7m-LqJ zlL^U7$x@WtdcMwL+xKj?e`u!!@6VOtnf^eMp#?`pD$`MLVk_I;rt>Q?ut*hdw?|>P z<>4qN&?tRQ&Es9!VY_#ywhd{xAl_jmK*??v;{3QCK2xCOQ)CbN$D}s9v@2Kz&f;>kwBOC)NqV(W#RrKadx|gEwvC z13{Axt)rd*9`jJXWHlEuPAK)&tp|w=oPApR3G9S?=6tt5( z{(SwiRlJj`c0OfWVbCrz`+dbFW$hEhx3+$9O^||bL%d~{Pa7!LnGC9GVfZHaS_pw! zp8PQcQrc5cYAj2jWZk%|Su~T>^Bt#HUak?nRlUZS}zIAa(Kb6AKo&<>F%X?q_dx>iFF(<9)-;9Y5-FMg>Rf^je}l{PeK#r@1HcV`0nmS@ZBC4{O$% zF@a5!qDk~UTXEk1X>|N)R-#+=HfTaf12vC47k^^b{6M^$D}bu%_;oAD>_*r3X3dJa zmopJ;qGlz;2vz=&oQz+7^cHdh(W<}tRL4Hwd3nc1nHz#tCXUc(TUp6f$*L`N)?tQk zFbFN!f|xgXNg9?pU@!|UzWY*0?ts9J(zw`dcM_sC)#9?*U3#H&#bek#C*K>7*B5m& z(iq{5^8^7gB=U;NuegA6%@3*%r)fvb+$#Lgp#jk9sxjH0JL=H6W?*4H(A$=_KAZUr z2;ou8x5~*NoT?SDn5K)&h~twyIXd%?+uLrC)#SMGd!+ZAPv3sL9_%pG#)n90X%4mHW17v8=f*-HLXy4Mi<&Etp6w9x_ zf#AP|ZW1(si?|b6+ci_kk9lYiYrsvI;~hSL_<4*T?nAZJbpPX^_498}$?=E--)azN z0DQtIG=%oqLDyWs2u{?0SOCg{{#ij`i%gl5=#5*K>_Te+wO>zHUwn?RMVCO{5V!kT z-qPfJYiI`b7aJ|q=VR+G`g0#fVg3AFhKBb8P_N=rjm6wS=#=#{Ykh>s1YXE6Aa;VG*SWpH|nA;46;vf2q|Eq#e5j>V7u#8u-!+f#$D z{B^g4^jLb%URa88c&d{f1;s zP!K01EiI52SUP0GrRL8Uo2J<_#xAkhtQ(_>9|KUmE1jwcvOjUG46Q=lG852O-7w;- zojYTuZCo2c@-x3^hVAy;`DF1%lv1T+x#+Y)XjeXQXDcR(`_pZI(k}`8Tr1HU zqOrX40#pB_5L1{gz)~9i)XjBV+lqG8l8tOr3@J!=7D9UxO)yIVJ^aZ!QG{EH&O$y~ z4>Q0c?*7#Vh_s?y)$12z~lGgls?59~6Lf#kR^B1Kf z%!9d7R)@Ko?SyXVvK8M9Q7Vknl1F4_z_c@K`T3Tq@^7hx!K8pV3WSNxy$a z>K|XNi1@kvA`G}%sCT*sVBM|)39Q^4syyuJ`sbHfvM8QY3{Q^EZ-a5s`E~MMPINki zhk`o_-)zowtLkzEg6R%Pd#o41zYSWcoNgQV359DC!a?BCz_~?FkGkp~;p@x$E*|I0 zJ>lp1veX@hYumQsYiN`X9sPZKllR94p`ilM_gn=i+~$F*1v7q0mqKw#$VNLs^n@}o ztU7)LP=4rDXOkLx%X~N8Gv;$bCAoM*#ddm()}*R7D-l9PZ)B6h_!_CFt4O;_Ki!KA z){2AG%xN4@=Uv~2RUX2eNX)pWcE#l)xO0@5abS9jamLiaU1>gRAc@2{4qkpa)@E7# zwkuf(x}FRgMhX?FNEO_JXpHm5*&f^8CC`@vsx>Avq8@h!zj?eNOwWcEbzM<&HFz?chX>f6r9E2Iu zH+*QODa7HoOk|Y_Nq1#bJB+}yj7|t^J>W=4o&ouJGli# zAD;+2yUM2}>O^=s;Hm_pRQ)j#c2AmYd)OG)KNQ}YB>mme)ZsViJTJWt<#fdcXGq z$%qXKQnS}@uMubQxp1@T9-gU7=6S06Qd$VbLa;Jd`eO7P% z*FZ7t3D=oQyG{wpz|TV74b^hZ9Zd-XcD`N>cSc> zjrTsxN?0$lx!a_Qx1|KR=; zWakeNzoerqlJJc(&tq3T&&oO$znN&NBGj0*Pp78ch5iy4-dW4bmnetlN#in~zR@I>x!pk@V413NS)F^iE;pN}wBT8>* zycr(8pU>SrYe><5wtHX4CMB(>Cb5Lp{%f;(t1}zVm*^qbCW`y-$p4igIl9;!t z63TXKt(d-?E4`blzJg1C-TLi4?#&P$H0M?~!W1uH*!zCZmSg5mHJ7Npo-AeXEYJ(` z`cvx*MSsvlRw0*Ono>0SesFL!>5P5L@_8)UsWoRW=*pun4&u-gF(ES^t9r1lIJY^h zyneCmb93e#rv zp+BA5l~D=;0f@RXwL+~%@TYN*V)lnMXjfaN6$Pg;8_vsUpFYS?e5s1gDABvRVd_J! zEpflAds((0GN`hWBPhRl6wZWY0&gkII6&Wuh6jMw!(}d}zj_fJYvJ7?G(NN(K|rA4 z7;P)sTFpM@O-(Qj)QmTmHysF02xZ55Q}Z8$B>*ag%XP_bc+Ly_-IHPowLZ^suO?H? z654LgPC@qY(*;sepNmdN@m3m2>>- zKVVeugEk25t09`K3pDhge{x`R;mXcr@g>cxvOlg6RF$@TNTD(iUhsCn^pT5tjw+;; zLJjL+un4*%e{zQ;_=NIx0I+x&xOKb}1Vei+pg!~FS^ijRCJnU;_;_4&_vZ=o1KoRM z*jUROi=xl9vq|&*oSOR4efQl})6h{=!Kv2GC5fu*!`3#__?mHf^(r6o-rT~+K9N`) zNX^FSV!7`ZWtU;CY!;^}oly`m&QXgqx$zTbAi~NOac$1ANyeU!Vp0~Gs{(KtC$ zcQAY$P?UkTCe386@m+qK=bQbIpZpBt?&eY`hf|3vfgar`hrrmz{lutWb4{EhiL?Vh z;`Ap&V&#fnhfdamp)~Vw(d!4(K`o}t>)Lq2x3$xCC8ALhAV#-RWF7dZug5%s)T&wi z#?Rg&e5YCnPF@kr*!#qTZ5rYA0-@SX z*9)kcyl>*l{Tp};MnPtMUi?K@ku7?ZsdJ9KcvrxHePG2%i*o!-oY1{eiL{g61b)$} zCr^>wzPg{pcEXP_S{7KDnB8r`cBD9Q;ff((D6CL=*Oked)uGmL@NPJkw_pr|FMj!^ zvKB5rX21RWz^V(e2=)8%HwbB3vpH$PS#A{JfE zH~MmJuczJ_8Irdr&j-rYYtduj_dt(?|A=fjR)UpH2~J`~Ydo&(y~^O@{PWAbgZi3j z`v7n-T|L}@htXc(pNsE5iL#Fm5N(zT+`uZlxK?b%ge({+0Wyd!UtLio6MhQU zq9S1p;&7@qmN4~d*{xc4I_ZPXnWe!yENm#!g^9J>g-*Mf=t_^d0zt-$(O7{^>Lw{t z2?s-c@~*g91K)h+NFv|hu;41eUCXbE?^KDt%U(=eKwOQrdcKCG){e2ql|EQXp| zWxO!t!G)qgi1T>`D9>TSLp#ZDiVIMlAB@R23OBujWagp-88*yZS@w!rteZ8cq!Brb z*9#dc_)11-tMyPg6=(K=^*3kLS=qNXg31}abCo}xK-wZbKScYMIJ&JljfnA+G+cG% zh@B5@U~c4;;g3_1wqv1Kr#D{@if%_%rUN`8(uV+dV^>tchAcRxp!Q{MmTwX`zdG?T z@0Fl5j5Mv4^EW;?vD7TaPka`@vCxIqBmUqaR-s-RM6d)Mup1f2T;{B|=WB zgev{@4+hdmrZsnw?7EdvvEQb zGT{pC0|nv>gqi7+EkK2;Jn6`MQjwJ}%p4tmh`x`dG{@$m~c*~-=IiFFMZT>ib5_cKWkzs3TnDGJq@!y2T0J={^HJ^;qw z?c4SG)M{(=klg*edXsVuI&s(nRUILKNSOx;MBL|(J4UL^gSSezw>-A5)j4aLshSo+ zoO|ELAMZRV*<@7VyEi@YY8a&ZZ9U+TivT-TJ*p{$O~~fBH?u#AY&+6v^ll$_KK*IM z*I(eHFDzPX3oNup?=uc|2NDrl6jVt@-*lbrfq6iC8_cbYVRaz(>kb*)2plDE$HHwP z)kE_}YOdIXpktVMD-Q)Wg<9Wwe-!@JYf72)qBF@;mO-n(lF&RG*uVS|+PMN>bxBxt zblsG5`mpkA1lgl|7g-~O?u1`=>-d`lzs1D(4=QdywO zOzv8rCqoX#$m>BKTjKfox?Xz8!=+tsPi_(Hq+w*@>&I62tX{j6Z!5zSX~0%AuI!eP z+8IrqIx#e5k(|w7@`8JPbyH|>#c4sUaZ2)X0x7vV9<%MPu?|n?%O7pY-v)Z5)$@o6 z@sZ3hFDOzTKu0ZK2TgR}(i1+A;ZHfC9x7za{K~^rQ6#dj?=1T&E+aD%Dd;D{8usm= zmjrOXrVB=9VCfzZwS&`u`n6URtrHd;)qMz(f^@n}xlZ_&deH-xxW&Y)=SjoS^T-u^ z^hI~u;Z;}Ab75Jp4DV6oy0ZM<#f69d708(2jBC!yGCG0D3B)oh zyy|Ive;toQ+jj``Uv$^M21{cGf_6?0nIa>Aa6IG7qr^7!;X5HoE&mYc=SFucxf5MK z!)TNoi?H)6d{&c7&m;DbKGOZe~PW+^xScT#+VpPW!G71-36A_m~P#|Q(o2Tp=dmg`7rqvJ> zTTpbHl7dUMO&|AE?bVXra|95nifm^>1YS3m5$Nu!71RYVbh%ryL7wG+x!(QC6S75o z>v+5RCJ@q3OzX`{kT*yGIJx)?iDmt~0@?&XdwJ~j+qQf*aL`Fq`>I*_^~u$|r%0-X zXLL$RPSbxs%6V_K1#H@bLhpwadApf%djMOG3>7V4qC*8#|K!VGY^>wm*Mst^rS58d zmL|xMk?7!{bpBO@JCktVb2iE23OV1X=?RH5deV3H41tZHfcKB~-pLKWKFJPua#@*lveqC20PBFRpuk`S?z!paOR~0AP>nuq1CC>0KjJzRTYt$%XTe=*$~dAWBbc1-6T~`4D=<#q3K)BKQ)M@9Z#N|qe6ah zo&OXqJ$!hvae)PD+>Q{tj;Bw?UGnU$2LlisPuQndKrV&+AA_w#7W10fzM=|EkH z8USEf;*oZg%eiL)4Fx(Yc*SI*|Cp=cqCXyhoFxBko5dDTLN~88nbmYFif7NEnHv~n z1q({{v`PyOsUMYT3q<|Rb`dX~c`~PYr z2FB9u@r8_i;@6b_R_*r}_5eU@{nz!sc*}8QqUQI_toU{9S)QZ2{j>ZjB3f@Cl8^%e zg4JZSb2Pc;b-zyH+j9XHoeQdkIAC!0=X?Hnax6AqM%2PB+XD9d#y@?=qs`Xruc)W3(JQt1@5mPa9oe{&{}koDL|JWw^m0G>@a%Q+VR!u# znxjpJq4bdiu#lAY$dEKGsbooAi%txs>IDBg=kh-C13I0G{Q!vfs?iy%`vQDD@7s}y zRe!Cs`|BX^pPJ3H{XpkRBdS$+`P1oX&pR$rZTCkKzBUXX_4?k=NBsSl2L7E4hQPq2 zTmz(Gb#YVsHi8b`IUdM#0%LU&45#_rvQuT;7=`Ij>ml{!^4UIH^8v zi8RU(G_GUD=gEVkkEe!HCUTXK2;P5O6kGZ`7n=Vfs`-2)2gf7DU=Z3ZhGR4VqOhhb zgcfvXlMngFOL8(X9g7r_=zvtLO+$YExwCHmeF!+3Al# zR~?R z0J)c4q{OBAEE%u45Yb3^2m}H`6A7+0m;(SO9`xH!>dE{+JKIY}Oswl^l*$-qZ$3Xb zuznkuIBk6O{;uidW}5C^C~qUO^=CX#&JT2fletyo1wh{Uj+`1>d))ZO=6k_^h^I%6 zV{-<&?2wNarudP9i+Hbikb2xrc^P%QNhN^(SPVAST-rTCEFEFVgpPW!v5$azvT%19 z5GxIJlVzP{Y);>Iru9GLo?7^!WRX?EClGLHxUoYl!w=hoNjOxA5)sSiQGrE zeHe8;)rCv$6CX|p7Xsf?JWBhYJh<$9u}QDpE`3%|4%BOJCooq^r%fpna11k4l8UN|AqKkD$QR2=@#QETLUf&J_W+=brn^K zFFK^C11M(YWB_|M80VlmA?=9H2LRd+!cDvkM9;o6B zsSh)r?xPpuM0!|vHf4s;B_y@jkwDveAZG+}+{EV%X8IFxg^xncnS>;laNp3#$PsvV ztAQF3LAIKXVw(`5pNSTK=LbX|$MXD)O=U=t(^~;cYL0lwbvXnS8`A_B>>PQlLmKMk z-C^D0Y_=ovQESiWtt(#OEK*q%Xz-cM6#UQHv$!X2if_o8nTEq;{%Gqz7f;}8*mK;q zGSf88>(r>_BsT8eguZCOrGamrY`E=THuD_a4&<@|Vk6WZb57NXJbJc`?(oL|s z-v;tXWxJgj=o10ROQeu-Oz=1IM&jIAU2`;vMu6IKgv|k9RxV9R7!5QrT*3sSPnjZcQ@^SVxde%0ms9tu9cS3yZdv765w0RW@+c_8lJ?PszATA$>F1UP0V6Q&! z3Rbj05cf10;I2z+Dg$6=OefZGq$FVX%&#f^q z>5|pwkS>+&0(OB!;5Au3^+3e65J9MrR!Y>0W-l4Ha*SLNQNQiN4+VsLiLZYt~ z>#Enz+1^sp)Sl%LU~@wa^AcSNH9CS?URK%3e?I=09hJXpjd9wQ%0U0-q$f^ zwsTfhg~R+lYWtZH!1RUw4|i`JRL9r#`5s(?yK4yU1b26Lf<4*DS61oHkl#tU?>D^QUVTU^M9kyR_{ z)UpoofAS+D&?uP2EK6O#NEuO(gVlWWr9llt8}*0Z+5|mg&kWdmb%n9j!=iEcegJYN zBMc0E@vVby^n@>H)O9KO>+h1np8|c#2_d}!F*SuPbWj;i?^@icBG68*&G2tXX*KS= z6qQ7rB}on1A7J%*^wOd*#VCbeBVKq9LGhKZ8zc0MxjK-2PVj4wMn#;$R+P`#(enOLTYRL49&qr0Vj`jYqWhJwqzCA=gsLc$U0*m? zw9`|q`s0=#s058kCs@{1A8?+6o`l2;!Ej1t4llBIWSF>fLYK$)xb?T+mS&A zK>D-f{5K93>CI;1E;e2d4%QvR@Z1nK_YHeVP*ZM83CLgfQs8;$c^=4wTtGVbdBVVA zRIdE^auWw6Mq6AXOi%nON_B&D@Or3Y3R+6&h;wv-HpppcXeEqu?nJ}c_j(;)=7=)% zqAjxTSz~WHLm;EhQrnxbia1U8RSE$MG$T<|KY1*cxM+X}+|>yvJOYTzxs4blW(w6h ztaYEB6$eCPnRnTEA}vou0q_(fvwW4XlTXTNs8pN6Nr~?oPKWabPlG;I@XBjxN{97c z1Et&0TE$TJSSVR}G8r=g1qnON>6Z{v2uV4K?_A1H&@OJe?i?Xor@KqcmE-0~8g$lO z0MV6TuLfte+g?-nrdm{kUQ1{(&fw583^3+lsoLk}pL>t%z?jq3Z&vty<3;fMe-`?) zbujsFp+A-E{}%c~_RE!;#NC8z?1^pm-kv}F9lA|J=c^v4`8UkUedqY+LKB;@V}|qxb@?m}~g?geCmkidckY0_?uIdigHh$~+EH zZ{ErDWu;+te_ozAYCNCLI>oM}sDBYDkTu5oY!Ka5d=ho*o#MWTy|``1M$oG~(K!M(MC&R)Br(fA6ZODS zw(AQpk7CbU=!J)!48MNVvzrBoKUNj}o~bGEDy5eLlB8%Zv;y)!$4o)~wf7mberaRJ z(I^f`5)$v9n0G&af zk1BLS{jY4K7OO>|PH*|&w( zvCa>|9~lFDx~C3+TSmCw480{p%ss>EOR+Tr?bmN@B*kocW8PN)O?Oj6lG@6%%9*Jb zFYpgbF(*{0b&Zr_B#h#`o9t(>gdWmTYUx z@{w0dBjexDIed$^&Os^IpOtRrsZ$BSYUyU*M~`n5es!KHl)yG6AqFxYxl*%nfRwhx z##+-~(Ne4yN(HGr%!|-EOj;IxUTSAg8kE8OstW-~K5OO4SrcU?__d}5baS*4&lRS)TN$vTCtribi-)S57HmMf(5wX1OSJgUhy!eV4+!}1x z`?9jc#yc%Wcz){i{Gs8gCO_5=RGYVt`C1+?jrFxZ?JS!QZVhS(yp{B%TH;i^uU0lA$94#X1Hl;x_8clAI(yC3kqfzLX;qo(4?)pp>|nJE9;CwyJh2K=}O zfHcmB6=E6RNy{D@uBLA4%Y2}rVHzqp@`pj$7IOR z0ZczbN9dPS2}tc)FHMae`|9>7Q!C?RBDkXT#)wL_NfbbU{*xd;bk$OhpNy9OA2Gnd z9Rl0`5dtXipN9apjU8qrvoscncJ!v_AG1$%FnfjoE6j9dw$@IxC!yR{ zF)o0T3^f_MM^H-y6I0Fdl%Et>$!kN$aa&Aafhl1(Xm08W3IUW4J@|8e^$J6ds))dt zBcdJ(Xm|oDJQ^DC`26Ogv~aNxe!2me{lkL2ChVQTbHgn+B%EQ6hf0(W zyo=2J;nJKn0U=|kYD|=CIhx=i{8|6lT7V3pr~)!3zGjv1hEZ2y*H-!>D$j` z2%kZliMBXuaG~5H5=qo{`#a$)8N=6f;VVnMP_yT*0_1#z7+v!CIMTw+SI{{$r>V|e z756Ofi4zwcaX>oN7;>HCkFs{!rga7DR=^1Lg^M<#0H{|{5T1zHRJg1$K~9Maa>q9| z4Sr`!(7M7$uQeboy=g13+o3Wmh?Ff9em=wo9ol9Q6AKDEp;M6+(PD%x_jRAR!ONn{ z2?UsHhVl{R;tgGvVrACL$ASl9IOAw-_Cj^Q%zvd6=5j zu3Y6N?+qDKItfQXe4ArsW(hh#Is{VrvL@ZA7b&xoe2oPiPimkRcxbx(96g|3Wxv$Q z33%uu4`@HAjAPv=IwORagsL~vx|?NIscThi=cx<$J(!PnaeRe~y=W$QVSz-oQ>~JG znUP4kiC*ZXCg{AEbOeTt-DrIBkW;FhEoQZwv8}VFVh>&c&Vik8AOsAPjNne>vxYbO zX4dTpjmnS?2WnZL4KA0Pi75*V0Sl%sllESmh^nmkRf+#?bv#cSQP=$hI-eGKN)q*I zBOUm%-|MdQ`+Mg}&kv2XcOW2W{XDM7e}5|D!$&B5E5olc727Wo7vE+HAosp78yRqb zaAKT5u`(8`{RMqxae8%_Zt>#dm&h zB)XI~wf*F>L$-X3UizG`1`tCw3?Pqd8&}vmC#QrW39@zPYT7ZC@t5qV3YDJkC?L^7 zN{|t#_e5g^>#BFS{Z#KI_Pi~TtjLts<1;k9oYd4>dWfH9x=(yzj z(o9^jEi|@H4F0L*!Li)wI>Zu@hv+nQAvcQ3W&2_tb7hj}KzC(gl^jP(jAaf*+Tf%l zKUpb_#5JcXNbe6kg8;1%+vnOzQOQO@^?m!9Bz)?lpP~kIYA6=_sV#`wf=Dxxsx$F z9`N(TT#wE|oL;T(78Q>zpF#!kcf+1o>BsD&owCLQNWhrV4RtEA%1WUU%1X%m4usDi z(!S+p<3#0VcPxTs0nnYcITyoZnS67~jVea3-fKLgFy3kWl8VEgE$7Wp3COxeNC-l= z`2hq`d97FAa<49-D1>}4#5>Jx4FRQ&|DFRR?)v}B0UnMR0{pU-F@1HW$UXK=+~4e~ z6RW{2?da!mdY1aCs@3;gHGX;RVRk3rqC0PdIO z@w5L2W&^3hzAdcUH;SFLhWs_@YwRuYc>=J_g9YQ?hVI zED@++Eo4%ao?{^X-iDTBY#dPO?p40n6YHKXPailt;YjU7RJyKU>$=rZ`s1|X7YmmX zy_HBspAQ9v*PoLQv$X;PpnE&s*28apX7;%GPt9+T{-0hM*ybUjgrI6FLC$cozguWw zrdO{$Tb7?vT=f_J*1f@6!EFGO3xUn>)-E4}E5ImrJ_-t{OqKshY@6hE?syEOm$a!V2amWql( zMh7q0uOI#gprFC-a<$>?RcasLUW-|S#PXm)a&s0441=2wU$BO3!i%5I0daPQ@Idz! z&H;dHYpdTHtg=+}RuG*;Qii?iuWX;%X|(j;2nnFnT9F@aK;WLC5us{FYxwC((x2}$ zyoq2wKPKp^EC+N>es%z3(P3-uM{-LaVu7#F>YPL^m;I`@$g5*TgfHAYm!WS!0nEIV z`rRKucuw$W&ct9-^bS`bbYz3ttO4r)RN&2#*R>D5$m4xHr^!cE*E3a)6F3%zj5~bF zg;i3J$SPqiM#w;8h4W*M9T}u~h;<$JJj=Gs$Q`zcBOKGt+utPZuSGFBzDxXxYcHd4 zhqR0g~v;P^QVu|f)MIsG%J09NoXGFZK>^2wprj@eJwh9AYM+`1N9%Ha$5>#enQ z)bu0$@jeC(&kZJH32wE3PIxHX3E$2yq%uDonMH!c=5Ac69kz-ZJeSDsDyxU!nHnOw`o21%Iq^Gg`yHEvaw-#1|h$S z^}2v5iG1T$zEXj!R&^=A`e_Oam`qVFhRaqZl1zob6kq#rQqti~eP?exfSTScEdvM& zNlhXg-+ZNo0N-IS2mvEH!COPd71LKg(j%RBEJnOWM6>vS_uR`Do@?Oyd|Dtw+6+Sn zHB=aw$+I+xaBekjVt6V2n-W__tcb#uvWe@bZRbaM(=IvARVE8<3rBRas@Xd~4uvUz z6;5;^fS+vz-w6gCar~B7s&X`(bRqw?8#ruCT;K@kY6N(=S%H~qu)PXgeX zkW$)C44|wf^1q@BOC%7J2maTjE$?Vlp{6 z`yCC1ur~)ke~1Wd!QRv_sL77Pubj5e!pcv&i(Km%#STlrAEi4uY*~f`-!eIT?t!LF zcp-0K>r1QYgrCGn1G_y$A+1p#+D%&ep}=rW^Jx{7DYJ?}^qxc`A1MujNxQFsdok$Eyp zZbAt!m^2KD|1Q~j{j?}lBJ9i=qB$C_h0NUciHmluM`Nve#UT%8@loUl5)A0CyaU&A*qtBD zZeo!)6CZeZ`gXwpl(t+8`E|mw=1uwzkAy-C(MuJ_#2!SNkx|_ zegVo|ZM)=Hxn}HAG0Ucd9(k!So_U}iy>GrV<@1j^FB46xmHDE|*(l>jo|b!z+b*z* zL$tQ1;HjFw$7;o+pH8Q3dNM}qbUZJn+^e6;{}sTmZZ{U|htkJGjL+eB7I0uu#UH?y z?)Gyb*mR&v4vLv%usIHgobcVnuLcsIx;2yZ5j+xYgOD#B<~ekhGYkWno;~K_R8@C> zdJ}MeJqgr?<11+a0j-Vha4o-kp>wUdYVtZq!995UmsaM8$8K-zIF1gS@1oK)E6B`> zd7qYxp7Z>h6H5y5RH_Ad1U;O8S0)4|uMh;DXwaN#`e{)+tx?Zz`%|8Mlue)&@8}fr8VlE2-R%x2DphK&2z}JU_!C5J6La}3C1v37 zuJ+7#S4Z^$v>7ZUCnu9I65x}?3y)?`OjT3Tk%tlfrp!^s!A?wdMrZ06P_0v)n4r2Udwk)r3-pYC; zbmL;N{O9O}YLXe*yLP1gR5s~lJOS84LGVu!AZv@3lKr*2gORaxcrl$QOo<*2hl23iX_B%s9JX57r!B}U?(*u@mr{d<$CLpMOw+Q=cVcXDS|jYUG17pY@ZhhuQQ3c( zM_zLfWh6w2-v3po;z`r<63v1g(WbJ+&&l3H?~>IW9P4uU{k1V$-A*?7H@Ax~1z4Bg z*CE7?a{h3om{yT1#1jG-VlCx}2PLty;A5z(#lOmF411x@?0N%8YP(?u&mf0`3wnN7 z)ViGLd1d6T39qFk@`v{O{>BTCCG$ z)kjx}ul_L~oAl*3w64y&b{l7&z2CpuwxzUmoVGs^-?y-Oc`oh#y8-rfgrmsZs9hT$7 zqHL0!C4D{zD2$;vudKAjsu4SwVR!tt``+x=lOWMP+qe_t1yo(0_h7zxS`}{+7WrJM zDvAiaSblRmRC!ug7`qv^Y3~SCM>=v`KE;B$@sJU_j4PeXPbw*A{G(9w_ZNr)d`3n_E=UNJg!dH1nBM=E?+Lb2$QraD-160I zA7zjfhSa?XBG3Pq_K$w4o5Qf_Y4p5J7$6@6K5)J0t^XIkSnGvWsX8BpMsy z?=N^7a?#b3fUKAMTe-dQ-gtVVfdvHxo7(3Jq(@9|HyM6i!3FimJ%Rrdxy9>`o1fh@ zR2y^zYlF-8bRe-la_sP5JMN62qX3PYui^HVcYJc<|K67;zdu=D>k?h*=Oc?NCtoiu z0DQ^%I#dQw?z6om8gE~rK>Dl8_rXyBj|F{C(XYAKSp2ziQxgvf#IUS-PyOfV)sg@4 zR*nfWxgzx+-L8Y<&2rSEEu#Pdu3!jxOc#1(wHbLGk~^64+Pma3T3)MWlPt^SHbCO+ zzJ3c9rzcYK*+Jp?8d3{3aG127DG@l^@t(*V#%6&4!rqP6%=stY$4=TZOoh(0CNQaA z_0Tr-TmF}*~%`RwEZU_p>2uk z6NbRIX&CBq5*JJ@W>>p!8LDYa@=o?)MjgF%N4hl3lJk10-=bmD|0pIM1s1Bxoa#u* zF@_f`(VDXc7KHs|N!E{H!9=})WOx5CeGlpQc5o-S=1agGk?A9(p*hO4rX-}~KFj~Y z-@WhYSNuBAh6P}GG1P8Y(a3yIAJj1}H@M@TBPU>0h|&a2KXg6p5w6}pdJSYY+fluL zZ!|Qn1ML1B?FXX~ zMl(_Szv-(&q-&6&@58<}wanj3|MzB!b~O?3bm~twFN5*_Qj`fX%-wA`u7rx1|M5HE z6Kj7FNM`<*?LYBr@jp*}=;!%4i``mB;7YTdv4;n|`{^nK=>7ZmWUP*e#fsmpL!cpBO?zL#_Qf;ut>n(@o$wN8seFMW&I4NiTI|L@Y<$znVfr#!( zTkp>o4Ap*@d)S9GKB%$k;X^s*_6*(dh^+b_EWl6Fud7M_I+ZsrAE0A1Q%^L})qwSO zl}n0#R=NcWiGi!F2YFPEwuuSLT)o1PM0@>lki$mF#hddST@Hs5Ng}?<)g7r>E2%g% z8Q9Mb(lzCE6!*^-H6e#2DXMtkt}Dk1lnZcQam(HFEj+F4Y2zu7TgjCZSD_(97KIJ4 z10#5&sdmeUZ=7=LQ+&1ds^}(#&;MdWpE9LMgYYsXv6!OPU-}C5FAI`&8o+?7%nryMrVS%!>37dh={3JM#rrpA2 zp3=|ftjA8bGwJJvzO8I9LbG~a1*6oj@|!F1wiJUKiz|UmWw)QlRJ)jA-tzvjUrxK3 z&?P=jU7B!9$$B=r3_T)o2)_%9;cZ{M5+7V&SMI&{~o1%;z z-w9M44)_gxeV#8JE@hk_vpjrj13o-Z-wkt}0xHRtaw#WwZihphN@JcW{v%~Q)$1ct z-{!(DALe&V_Aj{Ng>XTz(;Z9U3%ag`Qc070i@20=JRTnGnp)Y86SH%lJ1*6+!D70^ zlQl7d-P2W}*%C|Fp5NjE$H;E0n|YltUmduc6MKMB15BL+ONyvMaWB;d5}v(EwR6Q{ zMhCZyNT{fBa^l~qt09p+dzx=x!1Nr}yC=M1!bff#Nk3zXO$ND1mR5zWC+pF;y}L+{ z<&hKf3MzX;>u{DL`2^LM2^Mk?i_s_r;NsJu7g-c*NXgR4%!(1vj{Hg_%-p_pW zUG^|^BTgh(NtIyc1BppVN;8PB(UNx1$1EX47A^C9yTV~}7lsZ3`RJ}sK>5{9PqA*I z!&K1Qhcp)Ll6#?F|MBYHv8o=q+x9pEbflKOgW81&pL*!_GkH+t z$abZDbgMzWkKmg>gC?&<+-h_Sgq-LlPCQ=ACzW!WgBlzngOF$lNEQB}@gi5%FZ^mp z7ExEJwVBi7OgUGU8BDqg<2zziNHhzn9xx(|mAv9Up$(^cP;J97Ltva6+b=lQ7%vXH zgLj%0(Xg6Ls>Tw-;{ZQzm3{{C!OLMU-eltH zCdAVF#BP-2ePr|%`pG*+i_gGPS5TbndtrmrAr57DwnO~ z)!cy$3JHoy@5R-O-+s`dr%DgKHPBAa<~wznF=2R8gG7&OHm6+7#eShL;Y@jrmto0G zQ+GSV$BZ1c*aD6Us2=Q3cE1J{8-4Z*+@LqD+1J0)M1e(W+RT$PO5zou9yg_OjCUO? z$6@jV7MKq>Ta@3OsZqPGSU$LR;mjkVSee^MSN9$L`lWm~G73W{p`G3OF29!2_*g#azVR&;+45#4)n`#UXYtLSgkgO@kX}CQ!@>4^Lm&v(i^&Woow>f}U z{xvbkZZomj@M{BSzUUx(hALnBPi)s(AvugYM?_31lXQ4VE)H`3HJ7)OE3~#uxW9eD zr)Ac^CMmbCNYLm93JZ`ld-uu$3HzVPB802S=5~`L=OUhJN%NXGJk%thclLi! zSBnawu55)WweLNGP$foXFFb89RelAnLYI5=zBIa>=Z1E6 zpc1J2+k!5GEq(IsDAtZQYuI=RlrL?VXLvEl<(X+p|4YP%$=)1ETj|7rAmUE5Sml^TzQl{5yaLKxKA&)4|M10mJ zMu-n3)q?{Lykc_I11it`(eC~4x;6mPk(=`R}zb8#$9{y#HJ00$;=jAW$F>XiiWfS=wUrD z`fiVL*C*{K55iiP>$@I!FQ{)$wKt7Gb=J0jOh>+dpU_*00QZYtIr7^J~9OMm6;sLagj!81e}he^`_?>n#(w6aDyj{JvA2;U{#5focEE$l;Y%D5dX^J>{7M zRsIeIq+ZNj$wRirgj#9Qn8#Z?Hxt-f!_e-~fOkgKTviVA^q7@%ee!}#!tPq>qR?jl zM>%m`^3u8J(R*o`=@WK)LHxjFOu6iS`*qr(QL4!; zF4nQ?X-PAGyx@r_?|4)Fqag)(|B)^VfwR2B8v8R+8GYHir;2i$kO5I}qqINVPu<6& zgP|0=n=?@zx$dpAfLkt&H=ijXzRXv_ktdoP{O?{7*Ug5hexE+FsQqy%m{7KVZ8{uI z(0AXrcaXJ4g)EjlKY!3HWFU-_On2lsN0=!7Tws>u>Q=oF?!b)#1@vTSQsac+fHJ;j z91nCyF+wtNT7(0|!^X{7hRTZ^A+a{NwZjLo)}j=%A`)XK{N{?iM{e#w#e#2}%uf~@ z{@_5fx&Rd?#)3H&Bdmw=TpSzaYE3P{#-GT57n^Tt(PO#W8Ie`m$1ERHk=1P{-g^a! zgC|HVezhlY&ZPM|H1-SfO4(GuGyjJ!=pDYk-KN8#8# zHSjt-VdsN>IKPg}<16H_q;Ef~3;GH0k6>OnCh*Zj9@x?7_{gH=%acC4fzB6#G9Xx5KbE&(IU65Kp04aI?vw!Ba$%!_TLg zB=SA@P&o>(&V&TPu_PAVIA4KSq(x#i{Nklj$&tf0c(oUh#1fk2>r?f>zN)?Whn}`~r0}V0UM=l57K=1;5@1 z`3N~A>Dn#U5JYY*MygWK?RV61@pw$eC3%qV2!6?G;>zmY50Ol&ND9l~EWPR`6(iHI z9+CXa*-^qkQ9|TOIR(w2pY$a<0zE2_(^k9grZX+tb+_@HIf=qP>4u`>RA-kTMwwy5 zU3k;7*~{Q0wj703Bfl`E@pr%@8{U8p7NLLYr^_9UTxjn?Zz`4zw-?kaL2E%ouY4}h zxF?bv?vcTJSixSMC|I|Wr*)xBv`$`s2h?`a_!ViO3-Ao zzSM{0tIsEIg9<;H?SId1tPhBxU~4qHmMJUnrO^7nsYRvmQ=T(W4DpMr++=MWN-%qqE>^`Q9c;TUqpA^&WImbwW zI2yWAG3NVSw8W_*w8kG>gkM*uWWJ!kH=4UJMf}YQy|TEc!3;$;*b^8L`$xrLEGjhO zlCsW}k?lo0RS5rhtbW=Jmv>yXlcyLxc1C*CoK~x0a;FFL#v+PMJB!j6O-?20#kN_i zIK1_JzI*`d-{@ykF%5gmFX6VlL`zF)X8SGoi`bS_<2;QT7dl2o(4Z5 zo08_%N^0De3r&1UWj7ot>5Gk2f-;@${uIrjjEq>zkcr=I#8z;?wG=*l7M*y)soEJX zXiuBCp0qQSiK3wq4Z`)$kV>2n^$Hz!D86ZMHSCe+!>@O%6TqNRiJJ;Q&1No? zyn*f63zdppMq?zy;~>pe^Hwf4j9;|!#zpSPQ${nW z&OL4avP;t7if}H8|43*@Cz0@6b7g0fv}b>ElP8|#um6<}Aq2GVt&;Pj-|edKs_>K6 zWImC{avwY;zVXVoYyuNEws=AnIRSn0*H)&lLo8Ay9m;jKhefef2L6-;(51}%ekwI< z{o{#u3>^w52T(+G^P}2Y47p#*eFSk3&#UEACqid^tt>V%GZlO_@1hSSv-r8H;N0#` z4uF}`5;N&(fLcK;>07jeTyjHc)0#l>@g|+)oJ@g0T=ZS{13t&s{qg2ylpQy-tvDwv z-{tSr7bD-EAV6Zo#4W96v5&+ctFKu%R-gcz@SL7>{kFofjl}$yImuVzkrVB}?~OwV za8^P-(D&EzRg^tuVgj1UOe%(o*TbII!EqN^6a77pH)+TqfpEv)>1!T;_jPiBtVm52 z=8ZGqJ!+05HfO$?TpLl=39Sa5t)qerf1?ru6r+CndC`mvc}{A7&mGe4T#?2j>->Gu z_VBym#|cPM#6F<(`{@(^6{-Bj%PUPrAL02jav8sf>(Wc z$)i4(Lb~aUtG(|O3^&fU$H)AFYWseuknOSwzZd4ZzZ{d}7eC8p71*Nt0}aVfa7e$3 zt^tyd;IQ`JW{38{Z6D%3Ahlju*i#ZDweGb0(2Rm%ijw3ORIMwjBwP)I0EdDGo!-UD zJlB{I$yvSJg;+?HER@4nE_k#5CyWO7)C{Wq7^~H*gSl6#GAF@~mq<&|Sj%bbIuYp) ziJVoIs0h!|n4nV3pyJ7yEkpVu({x<9HJshlkmUgDqD=RK=P_OlATARkK$#Y9K%haO zJQ29<3B@uA=Wm_oV=v65dYN`}%Xz1lb4XNnH57$!t@BeHl_13I=f~PV&3AcT%!OAB z3y1RpMqQ-4C`c;2_IAgA2&^hUR2xnyyrW!$+Df5IB3JmT+T7_Ebm2a5+ZDg>QEep^ zxfp@rQlRKTDmAZZL>xp@KAn{cgkwrT-A)r(Gxcp;`lG_5>qJSTcTw)&KXto&QJ-BtwunHWcsuom222rRvg&75SE5%X(Lp zuy^1634h=LFLSK{bDt0tz6V)y zyOUJ^7+#9r+tw_g_!j>*8KSDVOw6YX*VW!Ur!Su4?G3qUyVukOMvX1g!YrIt z^gGUWjQGdTRy4fJ$f#bMhV-DCNRZ>lT^Xz}+@UB{b2o;=QEUz8ZNA)&kd>%U9Wq}d zYP;j~J4$(ME%c1z+&;C37R#esUbcRemJ#CyqY59g#8+?iP{RxN{7hf&dQA?sJjU3( z8xf0RZ=A?*u)aN@uL|>VEl`y1XM^Y=DtVg8z)~o7ZIW~LHxM70s!{%$f9}TNVLK+6 zPkCfmSePJHHn;{4{v?j4Yk>g@2_bp#Ebf5UjP9%>E#H^tm(z>;NPHZVW$V}G6i1iB=TUUTf5WTt--)YRXoZ|_3 zziH}IqISx?s9gQw;Q&tWe66>iyVit@%pJ+7Mvd_*qe8Jv-YFfos})^%->0yT4aa)lgY?Dqo!XSBDM%JjwMYg7-*{CZ3BRn^eC z^LnR(OnzQA#QrPd8vW?RNs`n(9cUi2&;5F{vGMT`)m4~$t22mLSbFm+H(5eJ^n-h4 z0o9Bbriecb94Z1n$vCTGU(4GbPSlDnYL``U84brM3T&<({(#miC@qGFu^24ui)OIG zFEKwWW|F*|Zl8>6GupJvj|ug>5#Ibp+~KE zIPm8^P=6zffe)oj&F#Z3Sye&pDnle|Hw&l!`{P=kHiP)wqdnLNyzNTTT7hU*@y|ui=MFF)Nx6#x z@@a557t~=F&6C@2+~l5#?PX7CUBk#M#$@Z^sM!lTIwg}vzlKo7c^q_@D1VZK*fygJ zoTtp)gA#;{?{T;xbPsJjNuTWmZ%H4=xq}93VuKo(dTii;mY2R=oX9iqRiQ8NFfm=T zRu3U=+=B+9qJ1qfDALl>5h8T5E_RH4?MIGgD%Y@T)l(7HO36fwc8{u&KWOe`lBWvR zv~e%;tzG302g#-`IXYO=+1}%qEt*C^1MXj-dE@ywL`uGT)PxF-D1prNK*z&*=C=a* z>wTLEQ&T1H_iXiBl}o{Gp+VcFC{%{G2`Y7-SAhgCzGO=M^;#>y`xF?4rSdgXkI>g! z4`|OS!C`ig?=FeeOCv#Jbr*-_8v_19)2~r^CLz$g(kf8Jma&H?>RE8GGd3R9EXjwv z{IU|4BQJyy~ceS~E*?kv7NmMxW$vZLj^? z5Z?K>pnL4w@@FK6* z;q04xMK3e9jF_}!aPXuS&8|P;3F#~HyqT4G>;c1}O5aLBGS{nkrJTZ>VD<=%pZZOl zrBW8qM|#>D*1z=@jU<}wUHnR$y7a<9k^hI7rmaq99~C`9iR>`jvXgnM^Hf~Qj&h(! z4q?^F5&2HGM!Z-t&P8;51XlGmR{^sRI_kQu1;%JoE6HFq9fDbF)+Dp(S2!dh zT*-ox|H;pM!}TN9iw}1-sAy_;AFJlr{2A34d+091l)AQ%uGCLjI-F2NWLsFMU?I$K z$_2brup$|BC3blMN0-AxNd`1n(O(MT^4;HSe`@bKm*AH0XzB8!{DX#kcQf!_;BfUw z=z?tbo8LeszwIwwG8Yc`YC}SmT+%YT=E(zXnBE@VO&S7E+X(BMeKN?BfEwC>a`~1Z z3|77myHh!{f0I!jU(tEn;I`yg+@><=#C1d%e_Z7%vi`Y8`6GM1$<+3=h|eOaN@;`k z>m5^pj0ZY-)X>U=Z`ApG5D?%llr*J1(ti>>9u;jM;g9Jh1(nnwVpD4W(fl=hhYMoN zF-Fs|7W3Y(CQPXBkuci|)%8FX{E|8G0q0N>Z{RS6oyJ2DRt-&pwGJk<$S3axNt3yX z?MtiIh0GuRSJ)Khkr;&`Rg$o6Hc6BPlP`s_n{vBF}3D8|$$6qbglhfzk^1^YWVVE)vfr<+A5je$sW@ z7#h~eN=p?cD*_U{lCVIGz+~g@P8c8<)RrNN#fViyt|255uSv4aqIDOI&U$!`dk=24 zs5l!Od0IVjvx|$8hnR!WpqXV1JN1M2f|YG5vf9_|^iNc&)AElyoNVPVGvLX_2!z2a zNGsf^JRl}PPf#j2Ej^YxE8<{q*4JsKZ}$${PyQYTdri4oPI}86>DTEaT#6>~arss@ z0mMv4@pLV#y4M>gU6`rX(zl>FQ!@?@wJ6$onqToTTvNb3KA&A5T&q3s1)8|igT-Z`6oz5$<9KzcKHLNNPz(!mWO& z;jd649#oD@dI=oZX`g$<%LRHHCXRw17`m^(2ag0H%v7tAa3a}J@gq-U^6i z%%v>H8>%LRl1Bam++~As*cF+=jWZo{#LIEuo^MI5PgEU~2(`fmI3jZ__xfseSG!Co z=kj54^c@B5awA?rA!!9<_7BlSGF>-a1x>XQh5o52v;gfm6zLwY)oi}q?r8ax*A2F_ zPie|q4FQEV8w|&R6g+u9%lHD(XnC=Q-CezFNc6&O+G7MP-w;2!nsBfmd{u6a-YmI5 z6b%BEQWyu)p&rqS^$)D@24sqvSWUO`m!v^6Y`~$eQW(T|@ky)7`PQY;D*4zdVGy(O zXw;Q8?%CAl&v<49(%hY$XxDE@x$s%C+xN)fBVO3M8}eaZ!tWK>^WiV2`M`eF>QEmC zbJYsDS=@oXFz5KSLVC!1?UjFVpI%lxr@uA@A%>=Q?8j_<&vUy-li%!;Y1$+8T+I0c z2n2H^BQBzT@(Vl7HtoYm%-a3-rp)_p9=KVdmm*iww<^FZrf=FzKy}NNBCf50Y9$3( zKtlCADvYe3H}NV=-KBv1tB7r>2ko9~_f5yWohkjUW>!F)6y6dUyb8(yuNYVHM#%rQ zxzQC}Qnp(&=;2K#E74j3Vx1ryJ<{uuIBAV%Yj5E%M$B_boD8-`w?gcQK#oR@rlYF+j0DjNxIh^e7M}$>aik6C~ zmb?iF`-vzGsAAU#TZhYH`t{BsakHhZIFV`V-(8E+MOzzMGYe=}*l`EwTT*)cjCH zPKgTxITeD7?A(q@vK~E`{B8&K)KdP?hNu5H3dZyG{?i}z{d!U$4lipIKKFdvHfV=@ z{j^d<$f#7@fE;zlyDP&KV{Ba{da|0v2Zi*&wL9r>YMiNNxPfmp5!}iyyw-(Si9S5- z4*On09s#@czLs@z`OXet3)XydC(kTAMBJ5JPxV3)m5!R4>Gt2V^Ycdwy*-ge_pkIr z!1D!W1izMEEjFEHMa?Q1NE~8p?;{`}cx*CvM-2=Nr0u6i9Ap=9tVdhzOi5cZgAqp@3!Gy%D;Ny_2D_84PXbJ9lZ8`%AjX2lC zkX{WZH}4+%tRak#b4Wi{;^*#K!8rl(!0=s|kZwLHKI%t_#Kvu&B&}|xN#o4_XD`ll zd8Qu#F6xQRHJ_*RI*7sQ{-5ZY5Ayd9uKRCvH_iX#*}nNs7Q4CLPy4g=VKI1>+Og9v zS0}IS&z?7Fike^i{Lc|DC#(B!GJX)ZP;Z9x#vj={F}cUI-`n;4eLV47#@+79MV_xu z+yCbTE;PGh*Ws8BDp(5tGm9k_02eV$-(Y;;OlkUoh#As9@6Kuw{P?}8dZ97Hh85lq z;|m|Sr*HUkcm58JkWKfdffnp6`nafvX;V}|^_&&T`;^=zHW)v+_i&kU!)2Dc+)q~K z9?O;c4xCQepIS3XZfmunze(oVS+(;2QYso*3$}^Xf6w{yk~QxO)9U$K{D2En)Pi`H zM<`sE`>M}qch~$-<=>^573*pxb`}`;@(Gr%tp6=*m45!{=5^oZb?@A4{c(3a^QMwO z3GjNj-syrq&C=S+bJC`~i+#g0BjDB+1J?F)xBWopHVO#~8~)z+yYTO=@Jj;a{qm3U z|19>>1}?7KoOb`X;#(J&FK;)1dd|}`^jU#pbV^ByvFx9|*g4DoF1VERFkzOA(yJi; zwMYM3yeNC${^88Q`77-=f|mV#d7HHVoy^^CV8d?VBqi~6s*3_=j;LjZhVOYYYM#d@ z%~gS~zopr04h`T>;M1& literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md index 34989779d2..f6c0561d54 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md @@ -35,6 +35,10 @@ Learn how to use data sensitivity labels to prioritize incident investigation. ![Image of data sensitivity column](images/data-sensitivity-column.png) + You can also filter based on **Data sensitivity** + + ![Image of data sensitivity filter](images/data-sensitivity-filter.png) + 3. Open the incident page to further investigate. ![Image of incident page details](images/incident-page.png) @@ -42,9 +46,14 @@ Learn how to use data sensitivity labels to prioritize incident investigation. 4. Select the **Machines** tab to identify machines storing files with sensitivity labels. ![Image of machine tab](images/investigate-machines-tab.png) + 5. Select the machines that store sensitive data and search through the timeline to identify which files may be impacted then take appropriate action to ensure that data is protected. + You can narrow down the events shown on the machine timeline by searching for data sensitivity labels. Doing this will show only events associated with files that have said label name. + + ![Image of machine timeline with narrowed down search results based on label](images/machine-timeline-labels.png) + >[!NOTE] > The event side pane now provides additional insight to the WIP and AIP protection status. From 651b656f2447d219050a87229a7d357426d1b76c Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 23 May 2019 15:51:07 -0700 Subject: [PATCH 15/34] add images and wip info --- .../images/auto-labeling.png | Bin 0 -> 33204 bytes .../images/endpoint-data-loss-protection.png | Bin 0 -> 31028 bytes .../information-protection-in-windows-config.md | 10 +++++++++- 3 files changed, 9 insertions(+), 1 deletion(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/auto-labeling.png create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/endpoint-data-loss-protection.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/auto-labeling.png b/windows/security/threat-protection/microsoft-defender-atp/images/auto-labeling.png new file mode 100644 index 0000000000000000000000000000000000000000..95627298c0c6a5267133a9855ef76e93982049a8 GIT binary patch literal 33204 zcmdSBcT|(<7cR=!umR&>89~5N1OWjB0qIs0qzZyk2a#T)bO;11j0G4#dY9e;Ql*5T zhzu=s0t6D35+Fc;kVFy!cV~X*x9+`X-E-GEe;${b$+=rKak8a)f;o;%`!u|J4ybQlET;%oDHMqe$ zwfopnX=%F2#_YeBZrt;|;^*sv@a8E(ci)0b2Yunvbw?iuZ`Vh@t_Uw4!F_+6hU@#e z*RLTS1$nzVyZG{y3UsT%RsMgkdOO;4Z$0Vj>gmX%#1z;E-|XXlV~TL{4Y2oiF!E!EL*c`x^}g}t|ztCurRi|}j&T;u)E^M2kAjy&}3=am26 zb`9a_>FDLl!{|=H!nHlz+ss^jJsf!omj@(ycuw-@UcX`%n6@|>_Vekx`DlRf;Gsw7d1^>4uk}=nvtjM>$1^^{=7OYpZ}cEhJf25SeTQ}`sr|Et(S65jAh*V>BaSb+hIM3OH<8}58LQ!n9oo39W+px@3PzSHl-Gw z%z~nM&?ZErgivU1Y2=d!FB=*fhDapr58u~q??+1SSFIgX%Dx-K3ymCZr|wyFBAVKl z24A*U>$ESYe2t%KW-kx&sZ3-|wMW}6mqKBG#=p?)DH_XqFue1%eCYh`*xa4G{G|)Q zhM8JrsfgyFyZFblA6LH$pV2K3<51*%4B?pyA)%m)9*S4miuW8Qmx0G!J~$B-`(2Db6#v5gGHtuI zrp7fSBt*#qs?Brqy0deE7nZ{aCn?%Ldrd%KHCLGU8nw7usMwq)H7HtqUW6JL(aahy zN6#+66Ffs7e8{+b6lrYictdw_q;Z;7sHHP5t)IHJOx26sS`pYbe)Hx{whEiUWR{ea z$Xv9c4*m@tSMAgzDH5?Bz^RaTEKD|i_LZ)F`-H<-xLcq3m}EoRlSvZ19i7akhF#woTX$goAtYxn1z*9 zYH)C{xNfSl=fKxUVft7vsy2_3oSJG{W9jF`LYtT1v=wLcESoc@;P;1*HLvW(P;96J zPj~XB%`7+33^jj#dv0iJ^{JGyga~V7ED;JeHiDK2bw=@eH&Rs)BlSMykVM6eOZYZvpf7{j z1QNO+6E$ALuiL;RB6mK2osl8R{nZ8FIBfqsgEzS+sR#8(|FA-MpD#i8o zvQgTKil#P={+@KWZ?6s3t^w8cP$9X+&(GiATzloIz(*~`4eH`z=`s;R2&i{xkJ^}h zj6yXx_%DsO%=lA@Hr$8(oSgE#h|fDsVyRk6u^qY8X5_c0yxa3(qT6%C~#NrN46k~_;+5aZRl zY{t^yRJ69}rQp7|u(Wv5FdD&$&736!8x_zcTek~mLYbfMF97S7BBj4`=gx+uTEdP* zLcLD`aV1=3PBC*sU(m{!5{U@O(c0dCCNo!B1@IajUHZ=BbqKp}bG^89bw7epEfG4F538m5SG`eN^uFJl z*^^YY%+M`bCf?nSZRuDw*5^x^5#e?dI)V4_?4%&fnHA0!bVp|A%vy1C+~*Q&ISN=A z_qn>dN&nQ0;Dw@uGWPoXAa^|tlSt)_)MhIi8yh~q?&lN1lrlGW_dylxhJkKZ&Xr^G zwnG>uQMh5kinw-^+r{pvo#z539^W*@Y6q?55?7-FhB!7>R#rpj{+&_oL6<)uNLtW_ z3oEa#b2uE!M*p&{AM#u8hfDZ}T?*(pb*lAhe28m(4rzEeZ+Y1(boGth&;j|TEOly= zX`}zr08GVKNAfsdRhmt1-@c9R9VZZMjL>Ua?9q0u{5Qws(Jq)C7PzE^rXVgLDA$(_ z6L=Z4V1z^>=cxJl`8&u{c1xn6>n7aE&ss0go?Q1q39rUwZsyKbxz&uX(cvi`diBMu z^VAHO@LJh*m?h7rSoW+6wn%#;PP-o#nvH2lt;blUn>^Oa+S+3-z(|_|xPk9rl@Hl4 zbUjDRCjQT>vD}gK9IJG^JHSOPDg6Ua9)yHgbEmKR+TT4+N=iz3U{uQU!87~vw+~->AxxF>B5%d`Z~>x={UbI=Ve~#@0Q_$Jf?97y~J)9Nu*_jqu5aaP1o$US$Lbw zWJB*!tHhpn#ZDezP`TGATKxXK8JgU_vt&jN$vj@3Q04THHVwWpr>3T|yTV{3%p~F- zYkrVU)_3#vu5=9Yi1#Ga4r}O*^bQRTo#{LT&9p3Y{N-g3^Lma&$2QlF!xZsFf4tpg zbbbMvN8R3{vgN8^J(AeG;`6hqhy-yGt|UmHl|b5Jv}FDGxjMzl(Po|Ic48Sja4dLy zeB5{XpFs z!?xKwyD$X>H_L;1+~r)Gp=Nz*vIov~H%cyOGKNO0UE`F!Chqw-a*Vdujp)p| zx$*9~qv?q`^!0U@2MT|Kp%NrqEvE&2LxU&A(C!d>;@B0HZf9HCIdTW0h%<}yFW3TRID%ApsY}8_W zh<2U&8mShv_Hb^>?oHc!)XH>k982#W-Y$k13kD;YghrkK0qXRIvdo^hKbC}~L zGh7!5rrM8+VJ;l7`}qtyJAG{wsxvz~D;JdU?^wFSQZ8na!nS8{ylDGqEmol@>gV?c z=12JUTW4k1_SOh?l;359>lINPR#!S7d~yBq<)>W>6ZJkU79QLD<0c(&;J3AtSuMr; zkq;Na$NIwP%<~}vTZ=KfeuW20O7i4ucQ!!<;yWJx`z6;!mT$AlDco+N_aIQF@F%#( z-PY$u^R=DuNaP<-TuO3szq1zYxaQ_cYw&VCSzH&E{jg`I-Lcdcz!+pFG_v#&)&1#kJoknzX0@K zZ~q0h|K~o6ys`W6Mu=@_Xs9eZJ@e_)U-$$B)aS+HI&RIskc!s>hbet{zpN44EuojJ zbpHG|_TVeXvR}r*vakEY>@HiFCCi@38I$5^?uySdA&J5%Uy^sa7U- znu7T)S=mi#92>9DK2@`z=Me#h#hN^EH9PB}!u*LY|J3of!Q>Y@ou9M{RJyzbn+PAr z_rH8bNehr#2z}SwktcVIx}oZpTxw46ugBRXUhUfX`svfBw?rD@|B_|#^9l;@z3V5| zd`*kqbdR)=lYg!D|~$m1B#=)nPqn1ev}_dSXlYqiX#aM3JM7c4Zx4S>zYYZrn}8fe!X3Gm#$Sh z`DQ@H^+tWEztxF&JNDACJ{6$}+a*g;<8B-dkgtv3r(e)Et*x!_UOKT0hxJgl@)`DU zb=9Td%LBHWAANr|Qf3vPTKU%ENzTn^Y0+rPw@=R@Rxl_rlOC_IZ=Jz?J>x8Q_Fb1_ zO*bhU za{MjvcY1kl?{%pa??Z2tmX{k#T`Q=kGlr$G(o1yS%3W2xWuTvC6AYFoOp)bm7sUVz{m)1?J9EoxQSZ2 z|5{wf!|IBPtOp+o^(As(lESy{{{ACU2!Jm*zH1vHJ<2SD3oEvNs1TeArY6I)6b?$0bZ8y}XftV{6DLY_Npk8` zV(yZ5Ljktp+BA~RC7cQ%mTg~&M;tlxklxOF;tc$DUIXeBaEq!e%Y z!}|?I&d;a%J{z}gYcAE6sYed$xY-$!~aR%S46uhO#CZJoNKYuRt`|m3v zA_vr|D#3;;m3948x5uMFxGlLk>mTX-HsxijqKWpOit0R98!g4msY@CW!y6U;M#W31 z7YB?gyV}Zo?GtP4ILt27(fSK-F~o|k`#Gm0z)`9p8KtyCZ&T6rk9x7NxkQhf>tz$^_#r@vF)=YIaSxMPBLrk(Ze6-I=cLxr z-Tl@_$;HLxmV<+XfdDdj#^FO!No&xTRm_k3s&IQ_I4$8b;|yz zgoK2&i{#l^A-!@l>3VbquK^`!E<57l#f#IM=>G3hV`KOI{QOjdiTD9W0_T*8h!f9E5X<8Q=Lv#YL9=skdTy&H!Of95YnZd+1tplQcjJpp13!f zSyxxbEBfVTw5Xq~_Js@IStu?>5ka!Sc+8T?Ha?+CoTC@@wJu$nD>kLkXiwXXl~adf zPTzDJ_#I|$-krz8MbHAz$%bLNy5b8jRKWV2NkNmitCttf@1?VcM>q3lsYP?-^jL`4 zo3@KuTFYv)z)>)kCrhAFff~!XHq!AIm6h{XS0BfBIpz({_wirV$_y~ncy;}11iy%P zb81?e?-KL+ss0tSaQG#1VEpIk^57?hcht1rnvp)Mc>a8rA7wunc20R~+%L;Z2>{W*d3MMI*{TDCn|m5Qon@3;RvE<~+YEEG`)sv{(1XJgXcc zqeO6|dTZR>TPTatrp2$tIXSI&bsv04(z$sv9XmK*ZTgMqhalAU9C;ajf%mR-{2dL^ zfHieR#T>xl8?$AHB7Jw@GPOx&DY1v6+tWi6^zy77&&g764*v4bj5ka%aG%ogdf+C} z3TZG{(oOb=szen&Bqx8hO8w5P`1oJ<&dt7iESG3{?kG)jpY_K_S0EN`b}fBqh$u4i zp22&xL;GwpsiPlqoC1d`DF4j%q^27tV?6GuG1jbVJs$7=Ko`%`^vC#w%f?iXcA7xKiB?@6i<9f+9gZ|L9B~i+i zURL)e`P_^al9Q7kbNnAZ{Nmagsl)U+4U;Dlx(w}I-K#32Dmm?~iuYa(obYQtsMf1n z!|wM={Jg71DZl(7-nCJdsTRCmNV(TBPA+`|2=wa>8;NAR4`db zo9OUKOA?(M=7gsK!Q)A6x({X#=ilAaQv_pOqu;ktLJZ37r&(B7BvyI)`1t4*4B{SZ zs;Cq|+Z!BzYx9dqT)*Ty_cuik0e`NUIQ*TZnlO8P;MPSC^uq7{TZ=Nc!^eu8E|Hq` zzDJ%J`l#q`uSOuLl*P@xDMn1?c9WnVj0l!yIr2|uRH_rdPC z-ZJjasKyx7j@+4B1`!CkHxn!F75?sKHm`qQd|&?m5w_s-?Rs6#~C zx6yd0Cjn7%PEJm3khHLB8v?zTl9XheZTzU_&_+mec1esfJCI+!*|I36p>iPfyoSbN zgODe$*p<%MYp(y|J;8&k_V4!H~D&P)UrlcD=PBv^QX6DqVS^ zREMpmbK0}4M?bYPS<8NCE4exi;X_migDFbBl#!V!!1udnPuk7T9>k`x34wOG9P2 zK!CBNiC8M-oUC=4?NWB5&Gw)LKlTWVtDG*}LR-}t7MT@$wOD}V2ETBzc$Rt+Ttjxc zGL>(d@viFo_wOks?c70%%AP-;sF#-_<6IjPbI4KQcsjVKA~QYc5b&XDehX$jM>0-E z!eG_Z)JUZp;@{%0!E5E}W=>7FpJLrBim~8Mf*!`p=-dX$f>C-~Tk3U{+z3*x@c+0L}%qQp2o3`oz zsx8UkA7t9aL2bo!=Cug^qQ*wThK6Xg`e1~RrdO(J^b6g*JGjz=gT$oG(IxMD$=Ca1 zrHq_h`np>y$!}BY`?&CyuYN;w?2Fe4z~$~Qa*WTq`1{uuMLnD3VNJe5ka8dNQkLiD zTsGn?etY%8-OKV_f2z*TUF?Mj&X=;Q*~W@ZF1a3ZpX>6&2BJzC~5?z}o5sMa3!Mz+v?aPy2QYnVJUl&kypqg31*lB2&)% zw$Fk`K|`bT-Z_6=QIqk18kXKz+xw{$YF>D@;0g$*CvwQ7{40?E^=g)78n}al%WMN9 zn|akw)^9JKeo>o6OUpe%viRX>ck%q^&dRzvykCEpM%EwQdbA0bM(69tH4jW#Xk&u* ztE;eFxidHbqJs!VZ}&CB&7_cS2nlee5GAR3Pv0^CI7;Exo zg~F@%XHFj`;@*DnqnLA1t(mkdSZn$V9%@=Mk!Twk87T$a6tHYCMH(PXDaldM(jq>} z0RL$d(1BD}n0*}SWH|^}#GRN@Pn&dc5{k*}=+Gq>@k?N`zFVZ$|Ivku5K}K_g!I9B zbn)=eZ+l>}8rbAis1$Pxu%M{7VJA_+uwW2fy(F_ILO{&l)3h)C43)Kqmp7d>Zd%hs zIj_>5OodSG^(=FDa#~tx&_Y6ezoImPqhzsrbD@TGWFI1H3V#UU?(P$cD1eE3QALGZ zjL0`!r_)s>hbm-70jod^;JaX_mL3&yFsU|+csL^}iXVceOYIN9F*rFp3or91SvE(` zEiaFZjwVS+NG#X}(fGG-*O)%Y9ml=4pG^}G5MW0!QalR-G>|Vv?8=5Z8-CO{wDUu^ zu|yB#Pdv+~jt#PNS6DuBkNRy#M@2P^BaycLGC`DB z8!waIeS}(1pM*DU50u&s6v?V_?eV+vkj!Pj;du{b;orr7*2qG~XQyw)PuKVR_p0YL zjm;<9+J}lDG8WQ>If2nPcgDK2rdpsr}m~KKNz12%1zct{lWm(-Uo3q&_w8u$9~%pIgSkrqu6;wd=1R}bw^X|?#Kr_T58bu&e;meYqiQ)b$NB_ zT%rm}yytiL#X?Z=t*7=fKM&e5S^ujawO6meY^TMJd=21HdH#AKWyGaj%wPQf5-cDF z{X?cfaCEP1y8IrPv1~%RzQj(u?C;`!PJ3v|aB*GwV%TF*Ra zYKiA+F`m2z#dkhbkg-K1m6UP3;$ilAX=O=;z((|Mo45;)b%b%cNN$s?~tP331Lp`!+JtmFuRNsEw*}!-opT$v$l9 z?BiM&NkKP-Hxm>$qz>d)lEw* z;gMzV>KDaFQqj8E>?jdUP5eg=9Ko`r|{is01zL0hKlN?Xe&T&k1|> z)Xad>YW6I(vtiaA(=itQGczZ(D3zhsx`rsnTcLW^2R-O4Cpv4tMJX&*H<<~aUd`c~ zqCsCa*yzUPVvubuN`~F&(;accjmr%s!E4hUZZ(!=S|GU$GqKwov|~@eFo-QA67`(> zK=6-Ol4;aM#~!uJz#seYWLqwMZ?jRQ9k%j`HOWGsc75?uwl68gW>2SlixW zVzEx7QG!QeG*cbRS`3)@S=LI38gtzYW(Vtt|r81O%)P1MxvS4GXWZ@>x&AsS<zm~Jdsk)WW(GDCdXAQ(HN#p?DK^p%-XwG+Mm>UA)^u41}o|&S<@msy?lw| zh)A^ylPo0utT{$hZjn=DpIDltqM9iDYKTC*d#y_0GNCJ+endz$F@k;sZ3g7{aKc;T zq_YFfDkoEW)V9Os`u@lpbal?yoSQ2=di3ay!PNA0zn)jOA3Fjuvx{nK(yl>T4yR)JAZa0ubdZlvb(;iY0}v@>YFk@dIDW}-RzIau9fB`Yt-L$B zKx;ihHF^@1(>0N`5|I#YynMOa;(qelN<#LSj`{-uf-*JO{ElJIcw<00ZTr>r_p=Mm zIYA1JNqTvQ0Y$=-coJab*o3a`MFDC+ByjmfMTy+7@1ZWdSvY=3{c8^-O zvlA!sueJv`@5#x@*YH{iuYgK$!In0>LiNG#Zi%Ob4)*tFUqAKzgd~6)v_qeq7&U-M z-y@_#x#Q`Gau+Rhodr0n6tb zC=)!XRY1p-Iy`)M9cb0OI~`Kmjm=|AcNM`QxQnG$FEZrLis@h+YCzlpx+s3#I~|A> zzOu&TB?!l#k|hwD7s#g&R+(Kh*6hj{|2E_aC1i8_v>Fo_x3&itoHb{uX3}>}og@&b zc5jIL={vg-KJ{ttsXtaf0>41rOo#Y-9Te4_OoYt1XHJZ_*Luhu1pC>Gnkj!PZWcm; z?B2Lr;=VB0l1ormWcdS(cQqxJv{g%?Mv170FrU_8!5HQ&FE2L`{tP7WAVfVP-_^)2 zHrZ#2oe8k3?nk9qoDQw3X#O0(*kCU1y|ozxXpt9%{rItPY-}t%+}0pFI4sq$z=qGN zieF4?@gM>EE;1_04Kg2+V;@o$7K&4e5RWN(0F`!X^6(H$8i>Ybyj3mE08K3on?JLfIc_TOSpzCBB@C>KHahcOt81>o&tCyt%tyojG-(JAg)RqR7V z4PFs#|1f7Kr>{pI)^&2_1APf_Z1Fu#!VMKi{fR5;)RZSVFhFJf&G+xweb*a_ee$3+ zoKLC$y{1s#$jGek56XqzLhFbBJ{yU7{Nu|$UHM)ULQ_x`ur0J8?qHqM#hoDO)b=_V z`o6rHo&Ot`PFju=1HvY>>vX){?gZ0!QO-yt`*o+QQni9nvc3+NS`y0C5tSkzdDCVl z9q%Tzq$9kCy2e-?`e*B4gQeh5pi;@O-^s)-sl+Z-rcl{>k@o+Hvg2?oE04bIz0vo0 z(2a<@RWdTx-Fy#XRYU=I1f0H%Y&OTxk#%R>+TA%Udh_Y~kt0^LcWGcaK7G0Za}Iyv z`E0Q}FcN+b7hnm+1shw^lS)1jHBt?&G5&4TOK!6v?v$k^KOOJx_}S;Y0&b5V_wUmK zzJ#>0yE@C00`&0Bn-M;xI-zO~_ZlZX8tVoagrk1!O_oV)T7%~f9a;c)aYIB0+?Tny!x)4jf4P1^=DgvN44TOY0lYOKtH`7!aKCH2qkBP?Dr&9-2D{8}Mn3J#E> z4HP&<`T@6oj(@yWH5qsObBk1-mZJHW!PLlWZ#TNns8tR1pwEx9hxf;*p}561P182| zOnA!~41fF@R2offWjF(42n4e%V&PMRA0^H3S#CqS{oljIJIg|>-%lRrPmz#(DW*~u z3w)#nMn81#6#kQd9wGO>5pY-rTEOkqdQBDsBEoBdOwJcsoJ1!$`cMB8)93iiZ~#Jz z6z~xSvdKwFE)7-o4A)U6mj$nRN*|d7o)zqS!Q0OZf2ow+DH`hAf*2p|fH6M%F`uqH zjvftD@ouKabJ7dwPpsh{K#e$6j@>h8%16kK2r!9CsdEUolcMT!38tMOQ z6O50H2m9Ih(+Yp<;Ej)pgGoaDU_M^Gdezczd3tfvS&RUaOUblgF*Ic5+ozTy{n_8k zR4h-Gd8pO*&z*G}4RYX)g?=v%=SCSRixr|41l7Dp_~*HG?0s3S5f%(^Of_hX_85#R z*PaShR+W4E1_Zc6ya_$ZRRP?CW9{GjAd6#k+e;lDJov1X*OAciFl}dB2E|Pv=6IyF zY)!=8=jfyPccj{;R{LB{80WJtsHrVz1hwoHYNjQ`C)X{>7C4p5N&dDEOcYn60~INz zt3$rb{Jw662X{e*%T28Y=9aKf?9${WeM7?rhJ$jdA73(_kV&jO?~@2To{drLt%AWA zVT$?iQ{b5E!(S~0jhKL$ZKxeY?x2r+%9_f*3(_SwhV3*O-G_$t6133$^Jn1Xy71&N zlxMl?&Bb|zfi;v%_0Ae#XrL|)3+~2}KF}{X#1h-%AaXpmx=CIrx%eCA4h19mMHv*- zhYI&i@t;S4w|obl#&4+PG_iWKc39pHj9Z~9{UyPt3}VM9VB%imEP}lucOo;CBDi3D{9JkVLj~$rgHHcP@kBd} zH>(tZA@s}(t&$o0Z`2xAPy26lv%S2~i8-@hoHdf;Sat*evXA^G>nnK5jbHl!Uq8FtE-`&HjsG*X}a@#r~O*+cr) z*FNW;wBZNBsDx3m-x>uu0(}pN$AWwVA^fa_pB;J;XGu zQ1^jvi#K;n#Yg-njy+}HDG1^0lOum*al_jGMRGyqUB0t`C_qm)_c_v{)QURo4Cy~a z&x(|82bFRih*6XE^XF&GEo(a-Dy)?CCk{er0&2QkfU*Iq-)^OptiUalynTr+1B z=fKtUk)p^u*o}>usWterde)Tm*E@cmu(!rdJ3utKB_d_53FPz#>E2@?W8yb&@HBc* z;(6OGKaw^>beS5A=^5M}lU6UC)OqZ^6;xP~P{>Xm}RkC4QUhX63ebwAwe4odZqi0cPjl2#|} zq;MRPw%YD1Lpp)A9De$AW^c*8b82DH(b1q?ZES%+>k3pPSfqGykih^ZaP95}!O4j8 zyO5Cg+RI5rWv$1MtLZgaM3DXIiOR}rLsZs&D56wRFXEcRE=T(GlIt# zm`TsPtC5nSu|ZER=w4iZ-f15gcn<)BrKRNnsI(wcx@(WICzZjS!?c9)z7?TyPMBp1gDI+BF>WieC|E^<0?iCmE*;WNax7Ac@k9y}X!z zX-{vjI^pn$Xt;=^la>A?-OH+~J-erIiO8A3`zxjR=PU;;>KbUXd%IjGtIc~kS1e=K z^AMT^(VN4AIBG3+<0!{*xhFQEU?+xSfuC9pMMqX6 ztbYurl*tOGLR{=P(1B(0>vpjbtIpf+sUZq8=V<>{%MSVV{x+-z_wO5T41*)1_K(h> zrs(+k+MAXcl@Dv%8nMq8;sZ9~NOs;!RTXLv$?Zd8I+u9rAZj|ie>V&?5H677)@Z2U zPo7w=*6otq;7Vro;C`KhuLK0t4aS^1ydPqYl+;w8t*G{?<{-#B_8EYHs*_B6x?y|o zo-uHSFo7VTfGk?jtY|M3r2Wlh^FtC~g@C}^7zOl@ zw2UrLFGIkXRxMr=&@`(u0H^{4B?LS0tf6FUYHf!@6_^RGcp|KE4#81-@)gz~Xvvg?xt~kCv~-(UAlnlU+x8wbMO2QJ#^sZ=DrshNi6B^| zeH+>I#Mf7ZIxSR>9UU}LbaYOn{rK@<4wamd;XiDn-s>;QEy*(46Cxm(cwAu<+JU11 zS$sX{|FAeC+^FFbaE zd=?Qk-+wlcUS5XaR%52MY#|;1#0&!MRlus#!@U^7d{T0eN!W%qDyv=V zQ9*GgvMxM~qFgZLl7vf}G`X0m$#|-+#BM!ywSbtmxfLt3R3N|kCBOzuUv7f!<}t}= z0x9H;%)OPaH}gp;B!RG{C%n^{C1wYK2 zCF-4t*E@4p`UqY(*xP$x-(_wNAAbwvWq^DR*$U~{=W06`x|qgB_49TT2ni#QL17qi z@pEXj99RFf2)>2S?TBF;3( zh$ue3U}TJl@0b{yg4~JN^BfD zfSZP0h6iZNP3##+Pfb0*Ct>bJC1P;ffY=HQhtv%hSp)t3-;1}o_Eh;y=VO<321D(b zNAAq!uhc+5xzKX1F856>=h6n}Oz4+}AI+Sey1B(4z2drD6L!gBs%Q97qiJe0hpsfA z%+HA+HJGfXjx3aKf6v^B=NR{v*AHy{oV5zY(*wvdI7HqIe-M~dp$}?Ie_O44fqJi0 zCg*Y;bksK0ro)nvRkTI{tX~dy!f?vPINkARsh#TST<4xTVoMgf5yUmcFh6$I)g7m= z4Zj@|YyQ^IiP({(v*R$bKB^Y)0;ch|pB&`&l5mK>+8vXGxMx$#;tcE(2KNn*{z zPE)zW!3`QY-Bk=_8q);x1fsnVEco5d8E;(t4_KIPu#{mmAX4HgsML7Fs#49+Q!XMs zm%_H1fKLj^^cSpNii?W_g1RJm{~sMH>7W9aU@)5J1pqwuEiQWGN-n2qhuH!EE!oh} zBmW5{!Z*f1EgO6){FfQ z-R}Dq3I?{Avd6U~oA`L3u&_Nl1|pOT7qTJhdT!cj zvyzWyU<UEO-%5Swgd8< ziG7tkyWGb#55xQfrPTy@4T-pY>0eLD2JCodxS5~xH-HzJTF?q0rw``fJL&k>2=bS1 zS7k{xMWfI>WslKc)$A_05PGO=7V9ENioj{OJ$lqPe;N5)O!3r%q>_}_YDmjXX~|9A zWcy`2R~tutis-S%oDdZ?2Pz#n0#G4m8_0PXU;yARB_)$c&A{M`N_^HWFPxWZCuZqJ!?<)gHuvQO$y?mN(;uexiu zr2Q|sBHxnu*YideAOGf**KQ9kl4 z8W&yACTD`1$dP!v0{Ku%eM;7;!so1f;c@{?SnE+jkUo`Dhj^qTv|zA1_D-8vNiCoMa*&&9&(`xvg#`#}4(Y_U!Km7%YkTNi>0mDav;w}V?#a{-_|75g!AIuew+3Ls*&>0J=M&3H9ncK5JA%r1YQn=W;ByTL#$sK_R@Vq_L5(oZi!W6XB?A4a-X($sZ*B z2FEEo5O?ava?XbZ5JN*SE3rs+K_Io75VBl`7#oDRr$+yb0pA7LbBc)*`p*{@7S;^p6T9YtZ8HomTf7(*9qs<;QN^sQ z!WDv-wrpqf4`;6}MptHi$7rr|#+vxBpA6@ z{JigYa)hV$OxwFR_nrRyGiz4rE@Lyem7Obtj0(}b!oG3`lFWQ5!&Sor-CDF1NcEag zP3;-s+x2YiPp^w&!orZ>bpR9b`K@$d=Gx%|BgLBDikrd!HSeYV4FR{pn!1y^n%Y$+ zY~4wvB<)9PM+A*tQ#|eJ9~3yqP#^hx(I@SNYujU&+8*I2LD8pmm5iL?gb-wIH{s8= zt{^7!v0MLGt*2(n*K4U5-P0p&1&2s3305TBTJBA{zSR{kJdy za~}|z$9}#ms0c|eP)!cWLxf@6r@x{3E<|oIsj5cFES#k2_|LKVmZiOGc(I^2?wUlk zM}WTP=MQKefP2hoWt8X(2#NLi!t*|Y!m4grPaw-5*cQ(^v28R(Bk zsy1~(uNeOZ@>gOZ2C;BB!lgyfJhEchAe$SW|3h~pM9W)^Si&k7mo!X+-8CcA)4)Y= zcQ5~XA9eshvXO2qh$G^dQ_r~x13X=pS~IRrPCBs{fz1LQ88p~Js6%2G0NeABD{_XL zkgAt=C)PGY0+JQa=mMoXBXCoHJRy$& z-K%f=7MKEV`YOr+k(sF5TiQ!RAqkw?uGGZqr?MgZfovWf4XDW@-5TE)KsOcMDLO04 zr7%=;4g-7YDV^TmZxR_Dt?4R3 z2P~Fi0$=>t#O>06q%a&6sG&6e(0XfgNKsz*J~{LjC|posfEEE2i3|QC2~NU2h=F-u zgOl9NF4oerd}sB){fX{O-L9={bw?AOtL{s3AOQ#N*Nr4qff{DbJP+E2WF)|#dXzAP z6C_|8)v)T2^9cJe0O5hVPb0m3`}ShG7}5sdbZjo9^4^LCuz02;Xxt3)%20}6BzJki z54Plu3_SU~i{Gj9Z%x0m3q51CSF^uuVgoE==UaMvdX&;KLZ<>C^8$1g4sab5>o7>N zz8woYq0^;oonCxN9fAA>AzU=6L4Q2fm$7&s&uUHJ4zS$Igvo36*pg3(1rt!^_U(|9 zWM}aDlwSj!bWnO>Ut>fo{|n1(5E%02x%ZpYc)a**U8Lf}?$P!^eE$6TY7b_glXP@$ zxY`=SppR(SaK9OLI%jXD_z_GCo~>0>S5G&3fU_Tgw95t$ndF$gig&*E2tZMfifY8O z&Z{`w9)L|4Hl#78#0fRu(9$NDDFUX*P z429ssU-V=4BOT~KEGas6mEN|@@OLE1+hbo6nj9PBfuc;`Ogi+3y7qs15O$XB+5;>Z z^Fk5uqOrEk*(`8#u?gy5VW|NYZ&o>)`Yrq3Iqn7=$d~i=9oh(a^vD>#gnUZ~>I^iM zVM{M2Hi62%B@qXNmiLaGggAW(o9GtLcxyTG+n@SI zM(P`&rODcGo84Ea#1)g-RP44ld8f>uMEg%j?p~-zQebYebVTRZJZD=RevZRE$l-Fy zug2ClV7|aQr=SFUNILJ>H{tq|_)}RQUndnF+x2=ZSG#HYP~MvwWqgRn~$G> zPah|K&xV)(6)XB*8(KDQnt|Hp_iq0lq9WK6bT+#l%*c zBO=R()zxit@RKXWcdf*r+$Tq)j2B_w^9FTFv6o^by79JlS-YIF%`g#BXPfewABfGh z!5_1j!9E{;7M0E^vSpXuq=y~B{d?;ctuAb_^BA|75lclSrMnn7WWg$SG}>B&7>kG-xW+Y22eg@w+oNxo1H0hy}K5} zNgO-2K5nrsGpWoxvou~q@pk6!>kqu)djImOjMbhR@`^y2k-2=*PnB(!-TYK4eqN*w zql0MlE3>U*+-0q{*%dZDGLgh?zyEsswmhlaBwjQ#$aad##@y}tcgB{v>0VyV$=tdc zwz9nyw}o|+xpRQYu)|z2C7^C#8?JiuyeaR9T$anYo9D1Yzf7>tF{*AK8pdk>V|k~YH&m*dGq&exPbKg*y7{emBM3BP+= z&Y8Kadl!09qIq%?BhvA3fG(fed$Wsc6<78T#Xk8le?Z=qdHa4DLsM{PM{0FFCp;Y0 zIBzksaIFKc8b(D)l?-gY;VTEZ7}5%*VQVSu>DUHT2OC0Daq8S+^oA;*Jiya$6g4#X zWNdL{@hWt-iaORV2ZoSNlbC%tLkn`Ox(|6%AGO59#PC3Z0V)vZ(xf0}TA-sCagkTTky;_caexJo;uV`JM%=PV?| z!Xw|9kS%R6!?ostc`&Sx$->)yrl)yKIBoiQ-%VZ@$T#Kc(qb_SYkO}Le-dsu1GGC^ zs~=?a-G={eY(y(TQ)`JqIbZS9mN909gWK%)S{%}rt~P64{%RO=>J7G!8a9>b>$cT4 z<9g3MR~wBoR$oTh%y|QKSzC1P+{msYK%+xq{2_1d>}p!8o^JC;G_0zH&TfCaFSZ>f zcg_fD*@l$jP9HVx?NSD#`3hotSa_W}g58`hz+zWon}e2bENN|>mettqVoRb_`P}j9 z2sC?ZzZEE%@E3f-ho5V6UBG*K*AEMD_nbZ{`Sf3f2m9j%ShO;q?d4V$&6_44ZRIHz z;-ep+LCdUxjhS9uh{N_4r|fw4-??y_!F+`LruFvEIJ>!$ZJK147<$d+#z}X~ zJi#vK1GCu#F>ZLC>nEx$Z!c&6opAFk(Ra#E54GJT6h;arU#OgQTDr|5*`b*+vIt{V zn9+iPiY<2~*SVQ;AKSdsm9G&5jgb#t>>$&7eB_ns;S1)0?DA$EF+JkYkS15};Yk@B zkTSAeO|^xj0hMy|HSRS)IjL*A;LW%3YyXFDDzyoySA28^lo`wf_kbWCxq2WIF$;Ig z-Q14v*e~|#`VVhsZf|{*K0m`fzUTkkjk5m}^8Mf26zp=x$S4}Nn4=)(fL^dZwD)XE zADn^$DI*@rjqkJG!?t<%kFhhf>1$cGF8&P!j5$-Vv$wkMT^hVdBf=e zgMTb9EbQk@_Nb6b;fxj+ICntSW;;U@$vxO*GKAJ6YrwoS<49@_HRMcIyADdv!bu<2 z9ed9T{rPO4;APleUVX0cy#Mk<5v26!4!}tsC32XM#+ zoI3DMTtwCTON|_L=&b9;ekAZcv__~ISzTADE6H=;ZIyJx2+%PT!}o=Qs?ig`aCuTM zy=>5GeMW^OOsGRZ3RqIiPHc5!LxV4^M@8K4JmigEJT-u4e*cL+Nq>m9RnttYa zc9Mu%Y-$!us9Kh;^B1(?h!-5Av_A~g)s&8hSHpZ3M?bh(Sy|Cx*StZVOoz%6uV`SF zbkX?O*gUIjgAhU*88I(2FByjIOU1dxxeLIu$3<;;zz{%=rKP94dx>7L)=JAxw6B30 zFaL=`y<*Wzk4~QN$y!>u?ErTvx%&G1H`KOmMM@n&Xf1iFKKk~Amdp&0@PuLr=bYD^ z$n91mSGpVY?~mLjO%HBL<+)FCP@6KE~#PJgVD88_AoI>9{iZ zzWeS9Y^;T20`y{0R3^$Ob{!6V7>?)etUIF%d;5mn?v8oX&Npr3t-h2Gxe{BAWO_NH zIFJYWhilOF79=8Esu4-WSj4VR#~JNGBVlq`T3egJDMhBDv-=x6;$k`;zUy&R%F3VRInEhDIsVZ--al9VlL_z(730!(8l1|_b4#+x#(YWgh z2N)T)54*!@54dgYY9zu}mb9NfPzSIV7p6$rPQ`8r>&o+5DhnnheQO!5bbOOLuFy1- zVCA+&8jAnF+WXG1Cey9m*vC;sMiCT&5d{=cL`0CPQdDF_rAt#n07a=H1PIY_LwbP+kXTxiwFrAapf<`4|pkB zUTMN_Q#`k^$?)r*o}OuUR~LK$xg6U#l+`b257`paF zT#!X#^5U2e-$n#eQtBwrF7ERF`mp@U)lO-%>O+E8GU-ORujS{jmG1jlE9TOxcISJO zQrorm?Y;U%`D8bB{ns^~+a7P#yw_Op+0v=_M55g|sExEfDS+g|St?!?R*!bb8g{_) zmVWuvh{YSju4-VjEEZzJ9xcXQ(u?pU@{uPWa~fG|5WX;Z4!AO(w1GklQW}2GT<1T% z$tg{4W#I+!;&Y#7>W^z#7gljqlKIDxY%;&c)AV^tNa&%1)fN{RHhVrZfK^N?=f2aI zua94AK8d^BPZ*#`f{53YL3Lxsh@F*#YxCRuc-$mfB1h%}vGQ;~8ob8#evW}l*n)M) zB>tFHWf5WbuC`4Pf=~H&eO7!~K3YYK4ft`p(NGkUCe2iAU8;Kv@Y5PIEV~IsFs*Uph-Q+56ifPrA zlH|OqSu^oY_XEEz+m~q@A@}|LBU5zV9v`I@hFg#N5jBI|yUOR*zs=R_G(Cv9d4BEi zr3b&PX&FN+Z;ZWO;GDLZ5<{^}wT`n52vj#YcxsbouzH32^{ADvG|h)!N*&wpl=8aQ zc!@~wujWqsDqMJ$)Rq$y$ey1m@G30P$5JP-8P&HumP0o7(DFH0DPb*$+Z{c43oLe0 z1(CpOScwq&Q;;xh*Ct4AZ~luv%%~qAzFYMEK$fp@S=D;1&M9X@h&1Zv?8Bp)mWM>L z7RS|42b|XC!{J}|NfVlW zi?)TmfyZRAkLwg=8m+kG5^pSdYBR1X^VDP+A2;Ql5f znWun4js9|rrGB<>00&Q;%+D>l{qu&7>(v}z!BkvHK+7NNW}~iqPDgcRPsD}Hn)AK7 zsxEwrroyGp@r%~YEMZJ?)Ub#Jtc*qN5j{nc!u=z@p@tb(%d=Qm=_LJ-nhELnq?YjA zz6Hh$O}DYQ*mz{9>LlIt5=eVD$k3;$W2`d%tJtO}18M%`GyB1h&?WR_z9VO0_*NDz z424SbS&!9=$C#v1g?CP~rc?Jn0Gl++v8AMXTyd&KAuZnp!ZsOad9-;tufD2^?a+&} zz9tf}y>M0IMab0?us_>(xyth6scxlxgKacv5>4pZzf(#IYa$rN)mc3C8kV;Dh2~Yu z69m@`%g|}_f)l253)Icr=LU>GGe-^j#bB^UL%AnLT5@Z?UA(*a&G6Ct4yD;F8b<7c zuj2P}UMwv`rJV`e-HL9T)_W!y5)+*qIbY}Alg}PvGmRFGH7|W`tVveDiwb46#&;@P z4X-(G5TTYevoSY)jmV)WlORt@fS+`~6-idlM)n@W%-!sfsC|T1v@u|JZIE=1cXuOb zfp;h@HQY)V#*6J0<4H_|9Y$gAqvtG^qtaB6TWhfOx6ry>>IpGo@C43M4|~{3Q1@Wz zq$65bUnHrNMXB2no<2spgcqVK2V0J_4`dD&TJLSGi;gby{PPay1|cwCo)k*B^(Auh zck*id%fa=v$>$Vvc^&2U59G=ekY2Dq68i6ld)|-tiy)p!Mxk1_EvI9zfO`za6z!Z{ z9T{LECb&+fJN?K}6njUA@0cta;qZ3{;E#h#bvH)Y1VKxWP+@jZTV{w9JLAC+kI>yAtGx!TRBJtys7%i(FPlSbzD@FMvPcgtaG|CjNiSc zA;|GBkI2|MxW@320_vNk(%H0}3q>gd6;6kHC^)b(&F#=$PI=JWu?v?ocs<` zngxSCGoRSlggDA6zmp{jF$KLuo&J4Cd`&-`=2|{5VOJ3}*kOZx$HX^kAMdmO5S;X& zkt?KRh`)zypu_*fkc>)5EYn$nMw#9f;~U3LwYBC(#(t*I{O>{foR(-_;6$0`$%pi6 z_Ri~)=C~5aAO7j}GfH*?kd3-bU|D_fPc5r*M|!1o-QpZd(PjCtJm*+GmtFlIize#g zNm(Rq{oORLuw_N&j+prhyE?Eik1YDxUjbMJGE=5q&# zu%Dz!|HIqL|GVw+KN-ht)n2=TXvkR{$R4K}W>&4+VhTae+me#uCg@Yh&duHP?AbF= zoYjK=xWE5>RZeB&`Xc4iPyhN9g+f?B6WR#bAfA~J@4Wc zV9WA@%*Vn>YB&Wb?M7u^LA?`ONt&&Kp6PSe)|>7e-vJM>Q;F3@69rSLy53a_Uwx#c z0%|05()wYcd$;wdq?vS=YxuS6!NGJyS{CUk3|Ef1Z4RZNejg6V2I?^>@B(0u87__x zqv7!8SEh!NMaCB$ZEZ7H!hqnO^d*Ou^M+yF3%Yz}#8GrOm+ zPad9M6SQC*%KR_Q98q^9?{dp<$${d!12qEMP+$h+#IaSN+j3^AC0Og6;c>BxDf}~6sHM_zKwqzn3 zyU?ei-wEom_JO#AIO7wJZRW3dxi}`@y2=mFB_>eo8cIpmAJ8$j6?dhCZZ%Xx9K-OM zw|6vHqL4Mpq06}42PL3{Kz`>D)(7UJBZtguFQuSe_uyA!UXC5RV+q=6R$arACUB7;PXxT0~X0=B{0_YAlbai!fn1OC> z1CI?&Qt-uwE-$_<8Tsq@cq2u_cfFTH9Teaaf^l-Upf0m`SgKlr0siJt?D-q0eVCdK zO#rPa)ME4v*r7^+A;Q&|zB;?x6t3Bvs-t0S4jug<0IaHkhORd0ww?K0D1f;y&J1h% z^;Zd8q2cI5W8&WI!oq!i&HbQ#i#4H=u(KnH@+2@HGo-%?i(O=p*^rA$wfBS)J2zef zhcMphcmxMo#E}bcE*{(b^BqBi&y_1#!14q3lsi2}TA7AkK&5GS zc@q7SQhtb?9mlJLr?BC=1bArUpMFJG2z6BQfkz!jdU9UAeCbiC{@R0!PzI3+2&J{5 z+0-dXl#R++n@4e&wryL%hxb=bk`takY9W+OlA9VA#GtskS?bZ6htLCk0vM^HFIrA` z0B%lvxR+_2q7li7l?rg*jqqsHI<@w)5&dB$CHH|p@3gnKOF@p;Am_!f?t&WNh{T_) zd&Be|kGMAI@Ub)KzZT2D_8dhUC>Q~*nFK_+dX_6(q-E6%dfNz9FJx7I0+aZXelmU-h44!GJ+W zJP2|Q1-rtWQK*kmWq9?#TpQu~LV_01pqvE0VYt01Nux`D8A^CyC|8lOsf!>OQk9Yd z;A+U**Y^Rkl7N5o|CC~Y4P;Pp;p$6=U)jT)`DFc(GN2D#T?yR8ZMBXj6`wc<8K2qB zFb@GYR0VEQvQFBP@22)1fBE{eX*FjXqsW^l^e11Q$B`$_Hk1VnHa?wV6szLXC93z7 z;>9AwU7-Wg6qprbvM+D49cz4^3cow%xk#f9+)nQ^z^)ad>oR~U~;Ce0X_mu^psi7GK(aO{~O-ALN&lXcHkg;R&^pMMfW zU5SxPQH45Cyyao99dhvmiN$SdLLA!GE@x7&;6h2>E}OLG>Isrpu5RdpM46-Hhlbak zS~ti`t6#8w=qB^i=YPkTR35(ebu+*W1>1U;eT(p{w>FMZy#VujIPM-x;ojrLif&e> zv=B#%w7>$nDmHo(bI=$}Ts68w-wuGkz@HkoC7NJ2m@v?fw67Kqc+o&gTg}&g`y28l zQ#yKyFKRuhO;~L9Qc}u-BJztJ>CkxCK(bm`8TovN+ii)%EiEmWAhj3_E&G>q{im-V z^Py{RK7_u%o}JstU+RvI-b<=F=;pfpP)w3!?K5qknYC{jl7SMXQci_c zSH10EnuE!e3A?D5YN8U*7>UuxSiN+^vDU^m6(2(55q0OX1AZGNJ0ue@R-$6PdHFgw zgSs93%(uf$Nu!&5Q(-$9(4%uH&tT>xoSJ56@6O<*b}0MovX`5A(t_Wu;I8$sz)MN4 z^NDb8#?G@5XBY;L9+!u}zJ?{4+fiV3E}LoGn_XUB?x7S`I_(ijLhweKh_SKY)}JR| zwxQh^qxzMH>4x^IJ1a?2sv}Sq8U9}bNr?Pf5B}Ez$iGFKJMUI5_sW9GH6FsqG;Qz=oq_YpIYt& zAbM66)1z5XW23{*cPqEqyzy?&>MjrR0=>A9>CJhlZ-+MRj`|4t<`C8#&cH1&28b33 z1kqeh5e)DEakb6-VjJFwI+IAUSuYJ=xlf81-phgCMao`TjT+Us<^B^ad`GB)VT}`} zPb3`2^jE%yp+H^$o*@QM?O$C(2kszI4ya_Co3ei-!UiXBD>cZXs9tK%GFz-D$k`Fj zq)@WU(hAnNgZMjV?z2@LAiq-3hoc;E?Pg*omV9zG`BwnLwW z*vnuVstN7@j4oDOsVOASHrtGEy>jhZ9CR;)4ky}M5bc>0?cA!^iNoCk7KziRJpmqv zxIvnETMOgO7z+g5_}Wh|Pd6Pm+oJMxzsojCf7rx<&W)&6W3cPj5+D0!g0Zo0`S86e8qS`#l4be9F74M3wA`U%s;h@QE{wmc1*AdosemP6Rjhy<8* zu@v^UBA6@@eaM?hRaZ-aGPe^VT>#&5u_F~^rcZVC_rvxO_v0!9q@h?&%q2V8s1CaJ zJ}(Ksm?RLwAkBWXy$Zt~0BYt#7)4$G=R@0!I3G4~pj}_bczT7T!CA5xJm&c1Q-N zgoN8?EV73+DUx)`be^BE*h!%#k}4;Nl@`Yxpju3w1}XBdZ`LQtoxz#hfjq6|^mADy zct=f4k>B*1g9GK ztlCfr4XS?px$d@+2#VfWhy?!y{0TX%5HfWF`^+dfcaDj7P33#eIy zcUJrou%rc!R^^phQlkBrD{>nwlMiIFW}sd?TGO$#U-30m)sif@##vmghZ45>%s$X{ z=KzRLhj3Qi67}xDClk$;aEmRZsu>Fds2nYJFW9?cUk+Uk#Y@alRVQa3i%kwL!+~PRqJIeszhYIx<7y3%myAI!JDlW} zA!)r=6heJwjHe>51S$D)ICkJZGLkQDQDD}PbJ`di(_sNw=t2AQrzlDH+nLb2VIZ9Q zd`jXQF!hG{*LuqWJ{qpGer1`vG@t5-E(Zf%`LP?3bPrt|PU6eEzx88M%Y+L(vs^^l zyo>{&m(_a zEM=TcgT)V-XYL{afQw8q)kC%gCVRs8;gIRxs5{&VYt~u0sXryifAU-Q3 z!yI%OARNo~U|bA$g`wIgAt7Pg#e|Aj`=?I{R;ANDCWyBtI>%GzA(PpiYtI3c%klZ1 z4H_M#Kun2;sps=9;~@ykpMb2*l?ykbBS*YMa>v+Iz~{y{liC`QNo6oozf-x3Rodg5 zA4Wx?6icNbdeM)Bn$h|Y!`9uP&W$%%`kr0m5*O5nEW02feu}>zhJQazFq3C^NY!Z} z_sgB2cv=YRBqdT9W|G1CA&pF)%V>lgq;Jk0=pcNT)teL&H_Zf?09iJ-rJy#O{v znVfw7%|v^19QW49n)M5^UdLZAL+N(?Z$O!pCoXgllrsJcrO?VadhV8D`Eu0F_nJdM z1o*!LzW*n5;U5Dz5c~;shNdW9@Ggj)z9{fy7a`C#q$q$rf9NQYsoiI7UI*w`!-1}i zC|#%TnKx&fWA?3Kk#wpR@VWw5b>8e(1Ui2}ITMF}7Gj1#dmN$6208)HO&lPqp!}bH zG+8$KNZM(`2a29#EwkUjsdHVxL`n8wr_YHKrXS|xryfiw_Q(SOj@8Xui%K(_J8J_V zMvV8BD=`3$z?lW=PH>J(3ds$Ad*I8Dxq4zvg7RsIL?L4v66V%7UICG)VRGv$v}6u+ zz)1%gYrooMDd15~py^LnDECxfZyVB`YvpSKV4YJLgL>y^E=m6tS%IN{w&`hlJT#LW z=(W||w?*AyBk&FW0~{FexA!_Jm=gDHl8M_c#T2(~I{j44?&`m%IK{)G7t_`%H;E%V z>jr5eQpRUTGt@Wr7kAw^LKoValJ%_~G)B1k-@wXE=58DD=ff{CW-9$EbP-q=DOsF3 zF^{@g{6rz<*ae7u)!nEDc$XG4RP|q%P>+b%%s~Q5#UDd!RTt zuS;KY&1aEETT*3^IDgbxfE^1jnEVQ7t<>h(=Ffz?R1uB+s)Vl1yvH*^OzgM#qN$D$ zwdtVtda0t>cZ&RdGALczSf=bzARn8W3Kl4|mLv=bWGhaWy1?55Y;ywc4)}yAEC-OW zBY@aj3T0HHA09Lr&=o3^OXXHaMzvF^M?4nDuYqt0ypiK z)u67?pz_>JO)UvVh5#v8j6ZV8LGl+2P(n=qhN65Z>2h`2@^cIT7(>U@^1}m?>&KJj zRV!;%eGmX*UQJ}M51=W?kt5mv6P%d21_$`e%&)k!7IjlH_NeAf$h%L#1rdY-h7NY% zs&fqc&euYg3{6%_3W*X-O(***byUt6X!=$IB(i0{bFz-jiTG)uXF6a6=B9qP5Br$P z=xhPH-Zm*I;9SQ=Z<3gt3C=P?s2DB`VJJe9k+z%&WJgQ1Np1BdaZ?L@jRxHGM%EMlN839m^ zev_G(8n``f#%DFm+!BcxyEAsA$J&tsUbJq2u|3gwD~Q=dgZhg=Kn^#CNGdwIyE;7N z)K-Sq)dTw#^$)u0M+8<&u&E&i`$fs(6cj2?Yv}SuU+UrroSR`SvN2F{hy2l2)e}zA z*#oKV6B=~u1CS*P@!&mJtm)u(?j3oyi*H^4IB5zYAYg`OFb@#G4iZGAtcah^+qrV^ zv2qKEU|{kkD^OA-R^U26%AdrKKG~|{+xxsR=C#2tb)T#F5iPoW~rZ|ei3tKB+V$8@j7%Q zr4Z7y0BSC62MYNEHU z-Xj+XiT%SC53A{_3-t4FCv$z%$I?`V6Y#k-%Mk&2Bds7%3@EzMC+Q zIaugWl=UJrZGJP%o+tOKNh5GpR&;c|+zj}YFf!E^#$pWM>DJa(Sm&F=71dm5lMVbt zd)KW}=RV0jDF?sYsWg*$!ZEb|sWI?eFnk1Ns(DBDi8x5he01me1rxkXn&yvka-&WAFyfuuZKcZeXDO=chvZ6<2kqU z#0RJXtsmnoyBQRJRP&_cZ8EH>?t_|HAywfEE&7c3{(0d*B?4A~cNq;F-b;bS2LYgK zM-d=`Gs~!;#_<6%N0#l#DmY_?f?+m3k;sH&c}|~7S2G+&a3Y2C2!;;`F{UO)E%(Nm zl&iWnrfh?|7F`;t%!d-<+(TOKNhGTc|WE2pSPQ$tJNZh>uskM@JjiBnR`;nX9eNW_** z?!6>lz)#;>E6Khe9bGEE&e$Wr4y9{+A5@C^IQr9N=(36T8yl$iUVr*Q_`FB%&qGh< z>#6&-vzF{j4(b|pp9=PobTE3KrYa&`)RW+54{4_s;%&B=F)+GF5F^m ze{+58)90`%*l4`3T{A4Kvn&ebupFvF1Fk~5#>po5$HxFf1x+rfpx!YWH86zVq0qEZ1WeKaG z4>ZvPt+ohVr<7F{f*JetaO`Ib7vIbaX-xX|uON#E_#SHy9!S^pcRbH8t&*ZQC{v28e?lUV!U#02-yIWxAfW-vO^4yPwxFs0=*66@wT} z;XJuW)Dfl&H@7Ig27!YdRnmxeF=FO1p;<29@y(c@xAhj4rKn`!@2N;SN}UUk{hS`s zzqQLb=(mQ4Ibeo_Yk*X2faqIIpNo{SQ$18XbKG+Px({v$Ke5oGjI| zH7(_CO+h9N&K^Jvfoxmj9r?39Nr@ehd>k~r2DVo1^GQq(XX+KYR_mF^E2L{6VwFwA zYb6`kqJCUDu!p}{-Y7zsAOO*N*Tbz;-kt!!(<7#X2u;kkv?E%tEK?G6VxUbtnbcDm z;)kGBlc9KCjiSZ2c{&N|AFRB5VxwFV1D_9ggGECrB&+v;Tt4zRIhIhS;aa5&0Ss+; z3P#Yg<(X}16-1DweoO=t;=pPa*_7)ENv?A6QY?)Zo3PRDw=JzPq`FZfZh1G{PDDK) zI??v}T=q=3K6s|Aj<0iMA6)R1A*o_KkL-U)Hjx;D6ra5E;JU!GO`(zIQkJ232gWjW z%{ro%o6Q~8i>-zev!vw~k>ngAn>I)XKqYL&>fbGfCjm;i`ua3y)1*6KQn?Oi;97KZ zF&rh=!{)$-4Hiw@M}zq|>zDNvstYjgCCtFQQxZym`{#xd=@JW9y0V_d?yq>wnknFB zu?=+@GsOyVSCehGY~P#cvOP-81rLGRiEZ7gd^w{`68;}wlcwEdxZM>o);s{pVR&;T^mM~XeV?eK8sUDLQNNSz`zUw0t%F8UXXmaC)Q`5zb>JCp}GDdKr}CKQd< zNGdcF%#jfWb3*8BFO15DFC}Qs(1)SiM<=>et`=6VW9<4)4Q^Q8hIrjP;72PWeLlhD zA1oiu$gl8)L^)?}B@U*(vdLZW`qkPWM&V>U^~(Jqh3Xt=)o^jMTjdp~0$Hehmub7Z z$EXcrVL>pHFNr$PJ9jqCJft7%Rp44(!SuTXC+oyQd$`>`H0*gru$Wcdhm|q$5Gyq` zH5+6R#GYBKfrB{hLx*e%n`$JDodeTA@^3?T@y9P;HX{zH_LKoXAvdNi`!&46O|Z|3 zu5u<#7TB$AG_xzPG2T|#(#frWnq%4*)3JPFMc$-SM&4NXlzH4XTaJ!8OsB2LhbcaQ zHl&=e9@E?JRH}}wGRJU_Wl-_oeHGW(a)ot-- z)VuOy&vmWRiEigwBW0&;(kCTrmZAK^{&9pL0=B&W<_N(*MQ8c{AO3d}EdL7_&%bz3 z%r}_r*!gryHpX4n6QL@V#f9U1Wt*!X_|w{?Z&x!>58Y2LH~T|eqt|m;_k0{}syLN) z4P|sS3K2U0FPTSk2h+TJo z>137gBS8Wk$9vNoHuar1Dh{+oxP#8(?&*YJlBml#jxA=_a3q~J>`D@Mc9HHa8i($T z6!c{0T(JFRPUs{8f+lBnmAxc74)skC)W2}nIb`hh-$AZ?9}UPE1AWWgd+T{iX=~vr zqCNtrl*MEU;stD8=){-M;vXV^`*o;R{ZWjhnH%9X-&^3+h96?{jphvynyHXC>qoaI zd`+Su)I@}!r#$S!sMza@=T|2PWnJU1;r33aU;}8?QmLYm8D6SYd|Y(237e`YBd%$U z{$4FM=FRtLve)=MscI_~B5&BR5Wz#(nMz8oPKRH5ECSiB)y)fkS4ztMzI=)wAEVMFB`kF&L}$ilWRQd;CvM7C~3CzZdP}xJ@cN^tNX1?nq#Oj zo`nVS-b{b2x@E5xI%2zD`Zk1Piosxde%|Eu6yF{AtE;iV_0;X+?ygbGXxidjw`|eX z69|XWqvvj9;IE=KpKxPE8n3aVebHjai11q+^7rjwTp>>&o?UZ^b*N`yTwjxGjm{_H z|4ugrLjv!1XveNBos$t+#1Ns|8R9)v{Ok>?FY?qt7i{EKd(5qpYUfj25Vq$oMxPm%w; z!0SzSpN@<3r*Qw^sXImD@An4IcDd-O0Y6qrNlCO6rHLh(Y}pvYZ7B`MGK&(#*LdJq zMZ&m{yWg&&zD?ff-+--{{&WsIco9gJXn3tARZk}PHK$uca-_#qvy^+V8V11V9Jf6W zBLdoI0FaCo-3yP{N(zUL(lf2l8cQbyEje`~HOWe0cMUN_{M8VnFZZ-+T36sFLvSzG z_N>58{ZJen|2p%023*d}^a(Dt=VIf^n?Ze8x!o~_K!JsE+KJ3A9)l*sN=ZL4yW@0_ zPL%?}zg1E)at%7xVBJccPSG?{;19n?JQX1q6P{KC1&S^;-2zgvCMTBk!OXKY#w9(wXfe!ygGtMM&oLSHj@_pbU?fO7tfXoP<{TDfyH*U>ek6C&1 z=hmJbR&>ODYhn5-EU$f_7vLBpCxge;B=hLg$3<^v5PV{*i4Z8(zlgi$(H1J#f=0?= z%-VHxRfyX{Sf}Rv78LTgZJ`=@9e39B^>7v%iwqIRbd+73-D|v%*_jk*?B)-|vgK5A zu)S#MFP>^~L)VJM1)2SOQvEo<75C};VB{>)w{1o5;{&&Isp@|m+a27 z26wO2zeB3V-pW4S4sM>1l8XL^VCb?p7*etIvhjqwd&AvaA+#56af0!S#PJ7i?$15p z_72{VGOB)AFnaaxsHg2y;-xpe;V!li2|U#W@W}<@C;D!7-hNL#Z6PrCGvei!{!R|} zvT=S2F7<>U+iMcQFePyq`qa}E?rINdXZ{lb#wh;1-^bI&7P5C1w(?(>J#cezv32!^ z?Dwa%fiZI8Wd?9>XIn_|`VVdhA)Tv*NHvNOB&s}$4y3I5E ztSQO9aUFNxEM|#UW9K@(?BloTJd2uAW8#)S;c_e1AD<$JZfDCLd8hW+bWMMC_W#jc z!{zwyxx;pFoz}0F+x2pZX2qrQC3N<1{bCvdiJORPN2PE>O#`&xOy%aw9=aor==baP*v%2pSHyim~ zCO)5sT0FlK&nj2<-2{l&)ZJJ2LMEc!*5knw_?xjYquWW3P#a1oOS(fgu2Z;WM5U`k z0Jm;V$LlN1n};ivQsUDM?jpEkK?`exy(sRS;se*-w|5{foGKdZ*u01vsi?!|#D9){ zOQlLpUc28=88r&EjC*+d^Y;n&f~~Es*M)eLoZtR_C&dNw5U zL1(MF*{aRE4xW`zu=zvypcNwmmM$&C=RMq8@mYb@IWyKdPrRzOA2OOYO7_3^Wun@C zczU{Aa|cX|sQ0MP&nJzc6Zl%^f|=i*wJg`w2wbh|_O=bdB}1)G4);zO@Kp--R_PDbg7USf!z+h7AfXzgGn(t?vnuf^f~9-QYvW*dR|BN|?2 z**4>yZqptAbZ>c7I`~lh@bK^r3g^DN_;~ea6={?2TIpo3Y~Vh>QH6Pwitwqb?Nlu}W*Qc)i&E2)SlaCsErv|gsAt^GS*ZoNH5s5MfZJ@|U~eG-bR zED*?4Fn+pmx2wDRv0y3=kMlG+Mc59W0-1093Zt?f$dHhB{{^`i{>nTAEXRMTAXO`s zDA-^4qpc?F$<@#!WGI3U8F~;A`rU^&`%i6(xV;k)_ae~!zGS|w4qDy!dOSToSE#6L zaDB-)vX{UPe%-+58}R-fR%cJfcpt4HZ5$jP;xWX1r&2t)33jj$!CcvT$Q!bqlsl4) z-3VHci|n-C{t1Nktukbfugs!_3225mOlPD-!fC8$+raImtehOlJ?O$%nMs%n zrf%s~Cs43o-AbobE{X}Pa<9D>20s)P6>*$lPxp~kE*MGJX#%?v5K8?w(M``uE)@=H zlOkX%s)CPvVG3S(IkLA#JpXRl*z1T0lik9+ z&vmU8Cj}MOa-;6@WrM)LCfjV9?gT>xx+9<}y;xEnrNhPi6vA}#b1xIL__RF+=_Z7% ztIJrIOFSFMl!Ef>>t^Z+rlQu?)^2o{eP5J)EI1zeS2C_d$SgdUH<-hl}Db-V5leGFtW zcQ=40*Kph{M{4t=I#HS0>2vqt4ijL&&7lT1H{B-;(cg4(66- zoyN+(ASzo+kNC57P)E1Rz_x?^G!8l2s|=m?C9JQzn%BE44{i`Os<5z-x3Dd3qRz!^ zbV*pC<>;?5f1>DvxeF&l0zdqy>Nb=Lm=^|MV) z8?6}6hN>!&pgn|Tt+w3ti%S+#nmZaflP%Qt@#7v zJ&)yR7Y-Eus;{eXXCr|+CwSjv$`|8exPzUXAiJsu{y1U^f`MM3lW_hx@~ za?j*Xfh<+=6Tp*s93Oa~6H)A^n-O&@#x)MqgV}OLa$SGST6~B&&2g^uJ?_cQn3fGPJ`L|cVnyy8uuu%AVW!vSea!?b<5Wjyv1%`5R*P|PF z(+(iMaA2vXGfHsZ0A`a;f76!A?+SMLR9g!uoD}LYOSac%#!mPeB3RT)C*3!twrId(bATd>0#})uA|G4U$|7uuG(=6rv{k)P)<4F zG^ybsx*zOMeD2AreSFAKjOFn;_LD_*m(ZOa&IGHY{k4OI&{KO1mZ-AQ9PLUZ&`?y(WMnW|N^7CC{10Lyx;djdhgdfVuv$xIEvRBn?)^7PupLTk$MT0*xiTb5$U za=LvEiLe)GkfkNNPL6yO*w#K5|GiOYq81ll3Z~YHUU54y;TI9T*(4~u29LhnH?>?f z=KH){Y9Js|eP;$>IO4iwvr|^UD-65Q4WK@3OEF$ybAAe0<+@b~x6!NTD>&ApTBxm#<)Iy260_)JoYtM4SVla`PGSUvdgCWy3l zg8B2Pl+A)?gD1~*ULuAfAtEbpl$lJxu7k|=i^%|g%{Q8vnV|q!8E=`!^!m1cVQwf7 z@d7}Z@aNDJ%Vf!Oy^r{z%L9OTf)EX(nCVO5ui)uXYjpv94KRxpZL~(M6q<;AY_-wz zhp`yflpNEc3;?q-3Jsg1X3DfwTZ)r^F4(~xGwjUlvqnlhpWEf8C4U=l-IqWG@QZ_G zNx99eI+)eDVJ!gIE0@+8*p|jfJ_XjpGjIee-l+2qRW0Wm6&WeW{q5T~oGS4@ARPB| z<;c_210EEBU0${Yjd?C&>;fE%^c`?*q+kGu(mys8Mi9eqYHG&+@A%t1PWjT`YZ@kJ z!w1_txoDy`qqOD&f*M)DFib=G$Nwu}|G#fw`u`XC|M#9qlT}>%0audAqO*C8X!>Pw zZL>w^dei(q^>;qJ$&L>LQu7@5M3OanZDtNIdOZL5%e!W-2c-l{v%D^ZgMbY3!kC|2 z8_mD-lc)C?O_g!~Zj&*;6S}D{hSSM1 z&wsyPGj5%IX_)y)vF zyyC&HuflF2TDtxwbRn`QM_R3Vf**_zqtSB*yl%n_?@)EMwGDX3 zK~)EUDh37ywl|`pF8IsmobP`;cbn$IJB>TjJ>5TlGC*#ExMv7#tVRJ%-tc1cg2yce zJOTH0Wv|coHciy~q9Xeb)#8=bRSd7b+@y&j3sTHoXMnu0u8O?>;r-ESf4bNr$P;J} z&224C?!J6U@=TQR@|7zjFXr}P+Ul#BrfNch$ejlz24ACZ@G+%Wh^BY6w?oJ&DEJ14 zmle}8GKfC;_{iE(-JH5+6@#P#-mj5X`{uQKp`l7I(x39zw$E+VXGOo!D44%~#lt;v ziSmQqLn(Q_*S|-?9BSdoB`!};E{Xy~w z6DFIkwfy7Bxc!t-BGO-8FyaD2yIi=i^3MR=wD#SHMn#{t(g$VB0YKAB4DRddCM*fJ z6w4W{(CukyRh3Ad|HjMi>!T$=v6U@iOn(HMcI*0VFpe0zFz3x>quAj#ie*H9qK#7< z#$aN+W!Dz*rL1zk?~VCQLn_%W8Fg2g8jbe#8e7KMIv5GgdLiI!d99I2s#V7C2%?$3 zg@3fmHJ9rqlUq!6M_j-;U|?lcRm@G@;{!q2ainaypquZi99(RmH8U%#roZ}q-T7q^ zyD1ABId1LiJc+-ybpVtwof%*U@aRHrp8^` zT;%+>rFRO|k`Jd-mlf#=kH?>uh33sf?ZtRSX0(c2Ngfrselc8+pH4(r_-3j|iYDhE zy&c$cdA0<8`Z>wTa?EP|`7(@WEz4-l*Wbe11o;eIMXPr)60AB*WquYRL&(nBm=$y@!X_oCv5su z#Hl)V5B(@mVA8kR>)QKDeQVj|#-Y_oovmP?JMHZ+Dg-{ure^N>#Qj(j2kJvjNj7gk z>|lVTQh~9uvL-*5s^c7uhe_xfxeS<_Y`(vftnp=TtADxAxWwR`u-AFxk7Ba2(bG+S za{wkn?0Bti(+tBN>9NZD>&0)*?>q-;tCIit^3|(-2#VR#uuo6Fkx!3aejK%0*Xf%6 zOfoduNgTxDHur!3ByER;2hVdo3znJE54GM=OL)0OE1!6$Yzn9*3=~i7hm4H zCzv^4=W($4wA=Q2oZ9a#|K-vmBTkYne{(;6Zyz6$w36|>SPBXX5n0(%vr3puTtWhB z_th6G)o$Ze_QzLiV|Te|F6{2__wlvoJ@{}j;@jrY$qk>o$r?*_qou2Hdnzqo<;BJS zu@a`t9pc86KD^Db1C*UFMd>3wLve zi1{pJ^YrMm_U3icVuwH?RC!)tI^p*7lkzyce_^LlvfP-zZ`;k)H3gnFN-gHdeEl-H z$L23(Nb-^VHOiZGF-v3Am&y5L&4^+=wXWhp;|W3E#kI#>5iU`qBHkce1jpdHGn2$} z(9@#w@&Rw=wJ{f;smWR#fG#!22rBm1Lkmf{h-|e)_PHCIV5QSr_O-bKeNV{lv}f3b46Q0tuIdLNNYUhgLzss9zQ-M97h%)LD9OVbpE`2GM@?UM#e0aR{{v*P6zSqLa;3(i5?aVeNyd+lND49@ ztuhykC^tj)VHv}0tP1&6gN@LVV=h}Qqama(z_CG{NoAVq2{rj-JOWA9_}9FtsHOPx zRl!jz_ftG>UVG6!H(U;)5=d~v;mK(Y5^aEzzu+zw&BF-|!rk#c@y?b>td zkvj74NDpwZHUnBbEq%Pb7q`vV7(V|f-U(;)@K9cJF2O85o91n*lLyYBPxEAE@WX=$ zZx>o&uYQIECGI1cRFvUv`pC|s4|@0P?YV(fn-5`UXYVdGM3nxaO`8azb|7W1sjgNi z8f$ExCXl?Sz@C#{Sr{!vBB7^k*p1X9r)ST|zF6sna8HsZCk@*tqrDmoUl^7P!8Qz@ zB3eII>EQABA>Mi)$E~c&FE0a_Jd-B|^%hpN!A3r9SKB!{0m<-4HDXGyIzflWI&}kpE15B+XLi%u?R>$h-i$ z(8`RtGIyg;E#>J4y*FqrLm)-4khHY4H`sJo2^~SCDcVl{ImiLtF?5WWglEc#i2Qc2 zM2ysodcR2bq|bh-#ic)7LZ|YAQ>{>iTZ`Y#ub_&lY5z%(8+6~Xwd3IsKptG&+&JvX z$%*G-!uU!#TpS&x#bq-gLfsAdwJKd}7BMaItRQjW5~Q(lY0IBi?Z>D~na{MZ3t@i# z>UjuT@@0%!}J#)@1n|wdv?rAQopv0mS!je&V zD_e(?ChBJ5!+yBZkV8NK6SJiAr{mMj-`_lW-Gv#v#Y>mx&0YPP%Z;nPN(z_ZgX~5n zb+oky;8;}OD+&Ri=sHQCN=K?&(!D#QZ=`TXO;{-Wtbx<|u20>~f5uHwI4U|@S|xI2 zm>OZL(#KowE*)!#FzQt+nfcxP=Z_tF@U6+hN2VfMhB!6qI5k|0+JrM5*b=16)ar=W zc1})?qyph5F5i@u7FyNeD_4@__`+%bh|o+Tm#!sSaiqiSZj%nM4C!EU=(#N`{Q7kKeiAG* zU88_^*}R)V9pvQ+^AfkshT&-utT*^!zN0)c~)W~Y0liU0Ur zQ$9?VEUm7NOtV{eIcB_+?nUfO#vPez%Oz`=3?lvBQt`RCxHL8l*s+rMSa#2OOh8og zAHUNmh^7!X$SiayN^!Zi1IyM*EDpzRRMtO+U1RMu;5DpjE9<-PUFy^^(7G<3Q$2np zxN|13)6=oFQ{nRHayditc|{)m zElX~+S9zIfZQtjX>npWC=d7 zS2rJW@P0bX{#j-8xOhSo0LP@Hq{iQM;6lO~(R%byr`@GMJjZv{boAP-jFmGmFx->P ze%(D+Lii*9MY`a8TKbvEM(=Q$yumDQ?#(~OOhs`dhY0tOHg-}{(w|7T+@;fa6%KG) zJBUnz6fHXqujCFzWXt*Wkw2Pd?>ffdz72vUy0)otBt|ai5ZpH37^MPN z=H#$pnh{6lQ#}s1`wWVG8ehsLtCdltHBdeHxV9I-x1VY#0~CP;KuxK=c2`WtoQe~$ z099^SMVUM8KW~Yxb6XXftNh|F-YGWh5~W7TNr;Qz&K>+%f#O}PauVy*uHe9S5eRBu ztiDTPfz^5=%2-?Q(Jp0cWC_NUh3&-2yB8ZOc^#^YPA3I9z@P>eZ)r?0QYr` zMi0|vL)r%9XyCqa@9zYMjjL5*K1jcU+LJa~>Eh)(w-woN&pbIa;<1)UFgH z<&;!75*wEh^?9zhWfL7UW~(R2dS`iCXuIHcvwvLkCvw}&TYbvP11 z7*fA(tcT*cez8|EY>SOYu37;A_JWrawGu|bkE-WNXH0}@jm72V&0Fy^feYSuQXBo{ z<4a2JP7eai`S3PPO5EoO(Nr<1lnAr!>sKQH#Ai~>@F;mI18aWU`!VSA73ztYPHRx1 zNlz`2afW7J2)`d+gnbg66SV!vPm8MQXIy-I#?_rkLkonhAe5gf4+U*OZ$%2KKX~xq zMuJw(CF{~#q;!FHx}WkJen&4orRNi|)DJeux58JP2Y09w??_E!DpFiejx5cLSqfLX zq=0HKkJS%Y*j6V0*uC`hZ_$6=H0wX*|BCMa@GSlp86fl9bTPMBu9Bub|Cn=drp1*X zxKhlUta0o5#Q`%mrw{Oqp!gtZ7T;Yhf@2$6{7Sl3;nU~MQwpcYGW-FH>EVNF)9a72 zzYZjb7b;F2KO`^5GPyi7O?{#(y~=+BcCq?$+fm4O50-IVabi+4k|UhL3^Md_?~;jylVCj$x3 z-h{4cPusVyq%4jlf^S<5K4sAe&Mh~dVR%UH*4X6SS=J330lf15?)yyDk{u|V*9sJYq(hFSL2?AF&>Q#rU1M<9aTIcp894xF z48MO1&=elHrZPQbQg0erlX68?X@MxpxM~2n@q#ChQmMp#yEAlJ4~w!YvkvH^)CHJr zPUDtH4~ID)3tAsBZyA~IU2F-kJ>6Ou`hCjY$`guQOIfj{7^`04SwB2bcmFkl*n}a; za*uwB0(oa0UoH+QPy`ZPJR67djyd(yZYtXcOwZ5@?+tF?+{V{}N$d+}5~0~{A-BUM zP?eHv4waarb840$q>x{*$&Y4*xKgU${UdTbIc@LFa^J__Cv$65Ltg1xlXOKXl<05E z*~mouDEXbO0TsK*9U>NIC;;sZipG}Wsun-kUpwoMdpJ`&`Pn(#%aSS&Xd+O*@CRatJF{f>!LI(aKdwR~8nc00B^Qe;sK<63p5G7VkH z8}+otL@x;SG}aK8)4aqqwG*}CaYkjSLijD`v-e0_=ro-IrNKG)nVXElYqKF``191m=I+x90w4k%R~AUtU|?i? zSqT4IyVVMjl97oDQWR>_EO?T#6rYg5nK{4#ei$wrO-T{sSb~BuI^A&Ry&%ZJd*dBJ ziJg!wVnt#n+iPQELrlKmJR!u=0I=nw25M@)1Wm3a0Qgfdg`asj+pr0ViPVH95SxMM z8v?#K5d~%dd9q5!kfh$*|7HR~8ZZ)swXpXYIz?51c-Qnlpk}I#jsmt4gw-qTtgI5{ zq#$zvaND*Yhm}Z59HqIcMeGtq*q7*|2$fB)zOmk5IioS4ALxx!HgNKY^4iK=^25pR zvL9DMtNeDD-m$mRZVgQpulSR;qt8yw!0-CL-ZMcP!OhZy6p#fnk?;cg$fFd*z3*xf zcI@QVCqw9xcWJ@}O!PJ`(2mbZp*Q-(LlhsseMt^EwmXEC9ql+-dFw7;Cyv3R_bBs) z+FrUK%@el2`F-`9rU|lNEju2pUMW7VINr>@fhhpz=W?e3+t&2VfD=*oQ}FDOF4UNl z-L^Bjb}f5Rf3yVUjQ5p3D(n)E74>@k2S)vktU)&}xX|c^o0(}34jUQa7z_eN2wto)nUEdLC zSUqb8i%FtC;R#-z>9d4OpA~`4GJuZ99uX*p&4?#wQ_$r;kUHPFe};mc(=VSJT{A*A zfE8>r5Jfr|tPn{YU$3Vjlo$;GckmX|26iR3_4u{xSt+g_7zS$Sa&WCE&EeVJjftxw zR=4s9f1-(bu-Wsh1i`-ds1?{D8aVc1f;wsL{>L8kgM)YC7e_tZI%|D^c}J! zR^U=;uRpQ4Z4hTLu(PLz>gwoBx>~BMM;xDkMB}S3@3lff3_uK?U^5pG#~=qmv~nT# zbuM=BV%r)xnrm7?y}|ryrld=$abb0Jb)NYENH{Z2oj*t7FVA-U;(0sn-tvy(PplegtoyW~%923%^^%zOhp zQhF}%l@Y{$1==wmDVRsp{v^~pD!;+}0f_lD^etdHjARHYK-VbHih$xq9nlfx@uC)HGM z>I-cCXx79j4$uv8`lBfb{d7Zf@yuCqZ%Dqt@rps2>z^lr{dYg<; zvb?)|UtVl9-f2ACoXp&i87xXH{$>puI^FhB$GDgan#l{{^RwAi+!9eU_+BIa25XU! zy~fje8XQmG9B?f%yqw7yT-3uso}Ig&9K?C$s(@Fbpkf=*e)^>77=TK2{8MqJ&Ym91 zuC6YvBAO_;)vNA&r3(zHkL4P=u;vyf5XUg5C8=kn3&$8 z^8ssaX;DjHbsNf?EG#ViKJzPXFF+ez#hZWcCZuwlPhA8+)r#h_9A~?3={1eoAi{R^ z5V*-To5NkW!Yme20@BbRUjU$z>qTgZfha33BP&aVD@jBETHP$(m$}iBa1?rw=NcUY zMbG+ONQ#j$ZPIM-SAI6-+fCduu$7rWVO zG5w93z}arQSrzsxHI{jX7H4}_CuWfrS(H;=4&Ay30XVHQFCwQTErc5=rvQEf*qu*a zC%JPAw0DT6C@VdH0w0to`ZKHi3D%zILZ9V?UTZnuxkIlfANrw!dp;Y$A^>b~Bb5Pc z|GbZv##siUx4yBB;J}&qao)(+v`xa4y8gnrKttYawPnkxj<#(LunJRW-{^%VvY>TK(f%-*Z5_+PI-V(+#*@T{ac_;GF^OS^NYiM z-sHF0&nm}bo{7Snaso;SJO1*GM~}-4_`q(x0R9MY#ClFRUa`!bD31cN21qgYdY10@ z*j4|!KmTQkwogTv5!CRmMi5idGGA@V>_M7C{pPh#ED{-O-imy{U^)}#Z_l;R?(C(_ zf+O2CH&q$eKp&}KDa{uWTR~~&i|*#jF*+|+C{3Iqdn%d5Ii2>5~hjS z=g(pmh;Gf6QOL#AIUszhj1xhlA0CU&=;+CsR*(hgwFj|>5B_`u%P1GK5OP93Xemtf z53{nC2@O6XGITkZxAq#R7TA%MfNNhBa?{dZCj-keeLm7OrJAWqTy#dtU@fuFtrf3) zbEPJ>13lbv@_-%Yn~ccaRZ~e#IiJf0k`vx|l8!kKnEK4Z&eFOKBPd>=OGbwDiOGl{ z)%Kgk@KU^e@yZR5h0{@J|iZqsqp zp6pYoT6T6eIBx(t6e=@9SY*9>JaV9A#w1pDZH!^0BE0AOSLrLqotWAKS}agUUS$U- zA+Xlb_I~4tSRdUHZSF5Ml<|%p4|b9pkECK%C~Oq5W>vsoH6@&wo(2OaJ!t7~>1&nb zSKj4Ti0#~MYU>UTy{tkU9S3_e>S@@iAfrRH!N9vUu1Pf&bsn@(<|yK;Y#aBY;m|#c zy-J^dx&WpF2krB3XpzLm6XG^r9$Y7M>>UtPE@);d)^quQ7~>~G%SBWEgl4<4#iW+@ zbl4V}K6A!l99Kxvo`HkTwUcS3vzq%4h z&()Kc`jw{STdz!8i5se!Nhg={ge!854o_Xupgn5 z<$;zj)@|4hXh~5{0*sTzMIIvmwx5gy)QZNVDpFymhet=$F`eGH>rpDa+a~3)9S(`I zU$0Y={n{avrXU_ep{ZG)|A1V9TIO*`n-+RK%6xf5{>$nkn=bBuq5|@Cn8iXU`bS#a zrB```YGuKpfKdc&{E=vcONnlTvcN9Pc*kW48lY}qCIZ$^F&;adjIf+osb7LFre&Gi z-e6bj@T_SC@O?5~u{=_NK39yu_)1P`?R<2nzsI&f`hJ~R#rS#SF1Rp&c*f(&)?4p* znu;RgfKM9b7HuKS95rH%wUM7W3$3FD%hN;)$*&XLpHHCW_i`t&j(GGCa8w{fi6kBx zont%Gcw>PE>na>)*7ylQqH)QVBiAX#(xssSfG9DkK(pqyuJ|ezRTG4MMk&suK&N|G z&_%R77q~N<4R%YOyE$xjb=pd~JQL&ya43HfXP)j35m1*WqB;tlmgRayqVMm4rxJ0P za_8g?HWRfjQTHcmT}9O;_?~Oj0}=m&Ve(<8%BtfX7Xq$koneqKi%=1lTD2H^=v^hE z_#`WG(Q|)3NmuZAR~Rs#e&`oT(oiQ}`pY*NzPv@Fw>OMcQR(=v(BJz1H1z-58q)K> z(?9aR$RYgqm}v42d(FoucO5bSCFGC%i2<(!_lhv>#qjrVrnkNG&E@)lG2&%fDE?q| z&Y1t-ZV(Pry%>5~QV8IPfdZ!EArD=Z~)Z2?Ix0O^B|}-dRJUKYovnsSQtO&NfmtJFO^r9lYz?tw3Elb3$<#-5FDlApz7m^L=n*lFA631NKTq%j z<{{)JsD32%LJn?PZTZUsR}Fq{uxflT=I6*AB9=um2l{j@c&@)~8y3G(@Z^GGE)^(G zgoTB9W^egVNmhaiH5diIFRra66NsrIfa`Lj)_U!#4M|gGW-Ojnn}B2rl!2!y zFILwe#DZzVRqFPrH5u@jqUo`#BlguM=|Z*U*#Ic=(8UnTa)BL^G0eR-RcY%|*6h*8 zh$HAb9|>SJ*WGHf;;4A^@IHVBGP_mpYT|<}d~(+$q`_RL&|~rYEr^)1jX0C4G)oG4 zZDfu5%WEsBn^Vapj-hrfJu{GY zX1l~7qj2dQrLyAmOTK@rCXTg!~T+o`~`Q$!#xt z-@Nu_sU+Kk5AYX2q7_gO$W?Vx^Z}9JTD#W!TNMYHFah1$G(f(da*{5Sw~^g~2b5&z z!0)014&tSJP;QXRyqq@@__m{!=ExS*p&*|eM|oj6q%R==;gSRiN8jGYJ*!cV6$OL@ z#xzFc#LC|C51N-9fCGR#?D)*d$@%$su_6B0MAm- zK%wW?mcJgr=OQ96#q0+m5a5Yi851pPt=b)@L1RK4iXm!A0Tcoohg2;L?ertE^okTl zA9(*0r@u84oUBm*>Thp!iohAYsEzhU{{|2L56DU|*2`w+aLKOT2N5I-?umqy)XFwT znhW6Uh@X22X|@mo+JD^gP%QCb&-*dwccf`0Nz13mQlw7FbIFvL;!9mGRLZfhC|UlJ z0l6xe;BYb4Qkb(AE8ga)z`qozJ>qS~3|3(d(Ri*2{)~zq7g-lX$}?U^1xr zNX@zWP?v0w<9#2_6C_Yb^cd4h^r=Syn3E?8MqDmc>$|nYIcq6a&6Xe8z0c;8cR}q$ zCj3!sJtZwIEyPY1VTWfG&!D_HvZlA=cx+@ zPY$ZCVQJuc@-#c|(AE^=ts^r57<`A*Fd}Etsa}CCE;EZ|Y}93n>%MiYDmL9FYo8DRBKc$+ zYNJ6vm5+Y?2nAUr+|Z8m3dc2C9PQNzTuah2O2W;rLtz}bA{Zb!#ism(x zJVVozn&C_C!w8Ry_*69=-(yu2-T8I~|fT#yLvU_AUzhS?;gp?(|XyvvpMwFQ)wrG zUz=PZ5U`p;-HWJaqAB{_e?eT&6u2vMjQ>ln#7S>f<-+_~>x;I)eI$Fc^pCF_g2yDG zNBwRhM*e<(*p5}(M?(*DKh4!CRl{^@eO8PB%`UpV0F-V(0Xcr^UqQFh9pm1P3z)>V zoeiNjN6%zr#7adXsHo)v{#Nqt0!r!om~GeBi;-gx}VHO=aljOqx>s z=b*W2l>39~9ePc*{Kvo#J7m1}mK9LiSX)ySXL9MO``Zl;6Z{`$E$>cKRc$LI@vGCPm{HBAot=A)c#)>|CM+V)~Z{SUO1PRPv(Mixp9OMPXPG7lGmYdSSX{M)hq zCmz`9FHO4-ezrWFxNjf!cY)^Z66kM#-$njcUpmMC-0c3p6Rcz>-%0;3F2H~D2&n!Z zIHJ-lIjKIK)*?VxKwaCIpKDxh{COH`SAs~N2P`WmB1XCx&ff+_O#!MCsW#fK#X@e! zm$tEKhiV$B?b?E zcrn+uMtplpIGdGs;sRw+wuJF!!J-AS&qzHV&k8(@bGh63kk%_sSu?D2ZY%n#6>qZW zn(>gIJ)o+9@C2a!ytX!WP!T$xKy_ zMB_#0ehuE_4E!&*iYVImRoQ@!f1?{Yd76RGTz`eoM(5h#KPP$Fl*t)gs10I* z#v#uJ79tYY3IUli07wC-{3GB7a2R0A?$jxAG}aT#2rU*cOmgotfL4jjq-nQH;pdJ+ z&VuX{1@%GS-suWBrT_%a=>UFi5{f)bdECN~i$j52;0oPelG9lF_XNxn=b*VQX+Spy2$hAVmN`e#V&F;T$H=>OpcUD| z_FtxU=i;J6=O$uQk}K&EdJmL*0VKbC`SMQ-YQF0iJx%6rFxRfCgbWm_0CuPen`63Z zIrJS|F&8<_RvQ~)J>dEbZx{k7%#*Bf1M@`lBx9iLg3nng{O9NeLxHuj36ILUOL>AI z;|!B^R2&igH{c{Px3HK|6QAiko%GslJIvBYnD{z3qBVTtx@|4X+97rCvmg7%ZnZ64 zLChFZkFwX_o`M<{_$vXhoVC98_|fO(rlI#?Gybtgh*U2-&_Apdw+H(6Q;3}ypshS; zwj*jAG=R*9hJ((KWc&u!5_ECn6ax3(jaR_Th}|7Np_iDYT;E}{iESmmfE5)*%l%At z*=@Ys3_4S7p8#*&U!BmOsrSe~29ug0b@rNSoyM29xwl=9vtf*pHQCPjJVI4vjq!im zJJL)*mr8{*n4J%01sX~kxAl;k0_t0S4dy0YUB|^>vV7Fh>B$iabgv}mMzyJ$I;Oi# z)en1GUf>XV)mQ=kv_|w^F&5#Y9OPD4Hmx`f*1#`h)8IT+{}_)n)$POeo#a)Z>tS7@ zPmm9$?YlN4U8jo8BC1wLWQ$X}!>AOCHK8AEeX>eMf{Q2HLPJ$$n8vGIryHYf?v<0q zP5REA(qTA%&|oT4A`DrD*ZDl;OS=mu|3n3ujnX!G(h=%PkzH%Te^B)~Cr9{HATl=- zol-}fQ?i@Qp`(Hxs`Dq^Dz?q?w9PQki66>c79W^spNMo^GxzgDx)7KW{AzoVCesBjs#khafB?bHVD*#VpzJpDTOT*4Fn=b339S~Zl<>b^I19G(HSU9M&5V-==pgWO&=cC4L zn$K*Jk5znRYO`WN`KD;h=g-dbXat1Vk}0N0-Wc{%v8J9b;3$X<_#wi+q3-mRI=ONEZW=2F8F4 z3W$@C{#Y(QZ*Sv2+%!==0W@G{Mo?3r1TqPs2kcdk#b{5i;WIC zjULiki+88F4M&(##?U(tq=JfPG-#{71=u`6LFPIACm~9}1#xk4d2`#zfj>Cv-FP{>&6S8Kv67OJ=P_jv9@`wZ}ibg#wA~$ zuUfzfOs7q9{!SL_kEOBfY#Ty(1k7ph)k%3A~7c4Upce^b({u=_1lXuc1l_ zJroJjXXpRknRRE~4>Rk|n!D!1_<@)wPx73y&px~S_V2ulo<2ttgiXUPu@Zto(Vj-vbOMucw1}ig@Ls;6WzSdFl;@LCk?LuuyDS{Y< z%m-X@dbWz?IPF)Q8`57_x$!{ulIw;X9$-5Ce97z7AVMTCI5(NcL<=?*iv!eggow7P zh$gG7>UfptfrqEvE)sIGc&1T zGJ`W6Im6C8#?y9MtEzzNfE+NMQ09f-hlYpBE%0?S@n5=ERLByTK$@WC?>1i22g|5G zpj5wiqjzj<`5s-l3AYhs$-;Ut`2rzB$u~4RwGidkZfK}zmePdW(7DJLr_`$T0dyHY zFI@rI%E_U9E33Hr=dH_HqNVIR5PR<*ihuy4r>V|ho7X$`Nr?IWI-iyWx#!tkFV`f( z-Sc?-m8@zEJ~1aq11cV|$tcrNkdx$6+9!}UHD@!Fr&ZH1v@H+eTBtQP`G8C&YAs`ZIVadR#fV%BN(8JWspzSwaF!JMIc|n*?gCw{b8(#2dNjiCY^-q5m^ec9 zw|yafuq2gGKd&sry8)5i+63TabtvJzc}FW~?tDHwO)$QKf{FQp<1R{Q@`sSiJ)7|| zA~4LL+Dg!UObIX`O#v4du4ZjXfu%n`n5AFo{XgNYtL}UQB@Mc5>89i!co~atw{NTKc=pi|$zhpDo@sgLM(}XuJ zalnWC^4rCuLZCC~UQI~gqRiE_Qt6cWR`~7OvZ!tLig=GeI^xE1Rh>`O1aq=45kNes zL}>f*Xuw6;QTm||SWC;VFf>4U_o1iGkZZbk<&MhK-K1`_g;UlD`A?ytg1?oUw>)lv zq9#$~`MiNGoO0Tck`-sR`A}F5gAYhXvO7GEx(tjU~DT-ZQX9%@0X!JyTDH_Ca3l zFaDe51~7$C`1&2H?dF%_vMk?8ot)w}Bn9&CPw)K+x<>c_mwS}+b~#{Fg^s#-A@a%h z;(%=3uAipl%k!iC(ekA4*{%n@Onf{y^gX0Sc|LwPUA{+3u4nh|UujA2-@X(Q3cDPn zf6cyV;_24wI}~hBedV&()n?wc9Di}=!1?-09zPQN*(xk*h`KNhvBR;f3mqd#tQ&Q;dR# zO#O759UThmQ+4PlEReiCH0_8?wRNaxs47zS5vm-}lgv7488W(UUKe{Hh~?5Nk%Hd} zCtUFYHZp-px!rl2{H!{;k_9eyb`3|z;>kc9&TVL91ZXqHbr6UoD{Je3j@hmeJ+ilN z-#&6(yRm-jb6D8($|gN3|NYpxChqm-47$Es^T|5 z^vr~SIf9VB2=j;wsO;etLln?L#`voxZ-Zv7K)Hp_~+WPD!m zMb)uAW;Q_|r_p3O^W<=s<0w{x&W|hOHX?BYF+73Ns-;h$X68JgYLWWc{ukRD?eGaWIn^GY*aG46?SC+SHU;_=cBNj-f$pgx%=*g z1y*^JWN*=zdd)-m&S*SG9JZ#Fadk=iM`EzR`B2)7GX(giv|ya6j9&F2R}FB$Zy9ten(8C|eU?ebvZj_+W^?mnQ!}%?@^Y<( zg@tQ-LqIi&KvS<=@o5X8>*(szw6jANR+@H3TY{M3oFSP@9M1>FEjh2UhD^gWJZbom zUwdRsOg_{>JUsbUSBKc&-&dDhofwIWi;I`^tG|5t^4co!C)EtQ(_i$roov_R0*pbbO#AR3(y z@ouTY!ovIP?9Sz_jRFjoHhvE<1oAkK(K>JU(N`f1lJt?jKp2znBfR&1$HU6jcBnmq zl?fH>H0%s)HQ>!?8X6*D-JwaJlpi-9bDMVDpuHsb)Wqb=noX>)DX=cvuE7`1;ES!6ER1qkPYAySqA1Q-MtQunCq~xdmri7YgdQ!O=l*@%=&rI}hJUp%$|?Tu z%vU2kw)UbX(+&3hNtFwUG_OJ8wYAMoQv~gk>srvGqd5~32Hxr*iVHQ@mv;6IShqoO zjUZa#vd`~6S;id~WDF>(om*Bl;RY!j_wG3)eVtQAdj{o|lsp9)!(~|ZTUuJGo0?_< z$^a1^5pjKYLz@{mIzz0FEe`W)YekX2Vdg=8R%?EG?{o_yEEUe}iuUvJ@ePfR-m{!J zi^A@;xlr|E_s~AS8_$td;d+38?y4p$XiD5^;{o5G9sWh^pjq8Deo~ z--a%31PC+BEaO}=XDZ_3;w(E;Qc@U7#Ad-(8@Y8RrN^Ah0(iO*`!Y4uABU09yuy!- z1bor25<63T4=kSv`nSdF(J%k%H0Z+2&;P{k)#ButK?mrUynOG2fDySltgEGES~(rb zYLKd9U;q>r4buz*#kV}@d0nlx9SPM{P&;PKvn#^flJdZ}6l#F}`m&weXSe4;IV zO!leGG{x+=2{W(&KEkYRZ#(Ji%ktW`BizHJtXXGKTw(P(ci#V=q`>lQbV))NTU%Rs z=mNq*PSy5_aR$7%rVi7e<)56kR`d5JI32C}%J)xck&Rt(AMl9ob}UjzVs4*-OK~w z6ZEn>d0umXG>qWC`Zu#OwRMaZXA+BF|M}W(Gx6+(S6+`gF)EcsI+9LBAf93`Oc^+c z$#y=2?$8GX@jRt}?&yUeYfPhS3!+Li$X0HHk>-iK&ePrtg*#Uyr^+;*K3zKnPCAlj z4DeSA!ce2Ut#gy^(?du5J0>^7jittQU~S^q42vcHo&`R!=a?@5MjjPO7IropEDK!O zYGbIZBL)gS)VuC>1!ZLtFRo3+9k_92eVrr^)AT6F)KqDdZjEHh@O z)gY)3b>>Mo>(}F0lU-n1W5npZt@U8|0LUhBVBWhn;z-)^;fHV{3uPAav9RZM#)pp| zU4bjPmP{$MF~Pn*7q4w$%T*6bdz)`A|HyL>hpP!ZFE5DdL75Z-+a}?BfGulZqJ)or z#9igfUVcL3j|wc?oa^5Ysx&7V-SH`UbA7qin!C*-XJ^ELA%JN}=Eacn!Vd?wmK6S` z6Z=5Tx4#Uy3>Ruc-gfgjzS?9dBC_&A8Vnq3Tz?(yzKfu9(Id<+#e5L)Mpgv|(ZIx2 zN5>^6ZFEjsc%x}_inMap>xL$MpSfH~;5Aj~Qq|{S{i&OLqugy>pH9+u;vw_h3Az@K zeiD}cmzy2~D)RC~-j16mhgfuNSfKL@Zv_Q~E_dl9Q~ciWR72y7+k08GPF5G5n;5K~ zFCnEVFae`n*-eBbX`EMIs2dm*jF0O>(f9dD#4WbP^xI%BQB-v$3iDZPv>F4`g=pxq z+2x5MfA{F5U&0rK7Ut)_M}_Lyg$zYTMyAfmU#@SYCk0aGF=Ub{*)3Uy<@C<3EeF!# zPj@vDG4!&J3MWeWuuEj2Bpz1hS5AEC;^fS7Vr^AN?gp3H-FSNyHUN zQW5d-H@EE$9m)b`A>85iORVAB>B-^q2A$?zektIr+oP5Q!sFh<79ZjeP1^Tb{cno( z%Z+7zW?Ke(ZrG083Ra`S1gL9{m<2`0jbMGQ`3^qOnbuOSaZcpGno}JF497(a8HTTU z2?j`7zP3gxq}sMRmlt{q!tS0BG3J6z zMw;PP7JD`3!rD}w=r3tEF-u7hIJbgVRiXUYK4ZONl7{@LE1_=jK*axXJCynrz%wyqpkYso1jRElfj0gA|*i zSb5BJlh36?*iP~(%`fqbLapJUJ3XBaS?Sfx3G}TrSaDCh67lB`M1(g z7w>vpDxW@QFB3a879AZO8}$1Es#w3)&Gu*Q!mQVu^xf^ie2khIDv@UEh~IfpNlRP1 zrk`3tG_0A-h=Y?;8<(&5R>CuzwY_D zLIy0u$(fBcG%NOpuvu33cXoFN3&}RINlH$uT&81#dEv3mcm9*i6Px@O=Bqf<@a*5A zk|$Mw?pnXT@CyhbNk_J*g#4%2rkwx!wyzY&+v-a1F!k2wcz0wMn2&$#&X?=@C9pWq zf~U|TAzqM|*Fjp!yDx;ji&v!7D1T z=xf=NO~f=$787|RO}IBlsTF96l-T3JlqVElw!-EGMV6Mw z8rhF5s>`Q$%1la-7(?}i5x%D96JsBId4!*Syw%g?Y+u_?Vm`;UXfgCmc1=xiho2jB zy*b0bhE(T7PF1f~D|ig#dzXS;`;(in!y|NcP=6aAAAj!s?mPj(GzBr)Ipa76CT9uK>rbx# zVG8^rEKEu8_cMx?7C04wz=QJNUg;lQ!M|5!vN!`TGnVJ!tOx=EvEbAT@bY)|wX#P2 zvaKgzcu5(sT0i+{_U#)sEAk?I_W4f|rO+B;S8dRh^mO=`y$8IIXCp?QFET#B^9gzf z&cfeD^pYjb8NBzBG9@Tq854FhpsDc z4Qxd`6!ND;eyz~(m`-Yo>EPYAqQi#bI<~a!pX0shY(#UKzsUy5R|=Wjy#I0KCQ^@L zdXkW!2iGg!jLSfaZLF<%_Dhu&?Him_{+FebCuku>Ym+2bT6qwNv+^ zQH^mRc&1iZ3>5-@PzJ$PYPRVcCB<6|zo%ehSU=rURsMSFZge68Q!$#R(f?QK3n6cX zF6q-)%#<5mr1eq|OEHp`&AnH+#?p-apETUrUwhmD2G*7PXt2>W;Q;>{Zk^k)quMTo3hcZr(Ot~Ie`;82+DRE0gde_5f!CDyOUdBLUz^EH(_MUzfVYi> zACmvMF4Oz3H8yZbAAg(2&HvR>#^1Hc|8GC~fAh;Gvb6-2w5JDiB9q=6$R4o-K0R7r z-=0fRm!Jhz<$eF?hJV*?0|iAzEe#DmtNoF|K?^v-pe1}b{-L#|zP`u<%So&4ot>zZ zlp+7pFL}H?%#(L;QTr9rhAPAFk zS2bDej^#P{6+-xxJJ-J+tzMiwSVXS|sAOkl$p8QuMsxtOxdG9160dY2GXaVH@cH`u z2D9#)Fl@OHJ%F=SVwfo?C~{L%8>3X7JP811+r=8DT3{;O{r&sRx6V5FUxJa7Q%PNm ztprm$PV@XCX6@}y6sqDBOpg4T8hvSL>2V<1R~t9;2CCn+)ovjco$b-afd<5EhtdBLdEGa zRCL2DMgH8ALV#KWE+7M_hArTmFvEQjsuDC##}0?ePS_Z={RIpLy&X4VRtJ(%xAlV- zrZ9h!40w5;g6o73H1H)NB4YH;Pc-fB>CrJXOx~zApUL$`xy{&MA?V!E(NSW1XIwzK zL*w#Bn!_UP=+2@6rCq|=I01Vhbm>^=qVA;!p}BsgVo#I(4^d^JY*kd;4m1P=U;LA! zuZ6GB<_ojUt*_2r)@5FXs$#c4z0j4RiHS9RJ5KII_uV9CLQ*=BjMk4-`NhS3u3>YU zVBWlWbAAK^Sc$9)S18XHJ_8>G*qg_WGH6>0GyIKNI5?DpgM&LzsNrOB@3oTfaB_&8 zRd?L9=t&l59I&&nP}9(eKxk`gL%=%g>kd=mZg@;gHVly5P3ro{q$FGKr!RSQ%L>Z9L|b2RwroOzigdcDf<6?6^G)2lALaPo;lg z0HUU51K}CKJg*QA_5{D}IRD52OiS55zkoo^S<36TgRCTFq@~}&mm`ytkw1ROc=Jq8 zPZt4g$umI^v&(vd#WotLfHtW0_42B*=KR1n4L3oYV9e{1O#%SuK3dXuPSttah8n1= zhq2!#E6843TT88e3~WH3M0?B8OA3#Ou&o1jetkfUF>=|>fsslzasWwo5g-XO>q({?IPl+nrlvM?nVOJ& z+_%&5pTNCl2frNh9Onwz700H^YX*rA2({{52Ep7@9C$iKK58JlnpvBrl$Ps=zG zT%qirD9#E2r$>k5)kmz7`|k@w8!M{8ZG^#-?k-ACZ^rq?nskrJBw1=}YL1$;J8bmm z?udbYvKCEj>jfZK8Qfgk<@w+&fde0pn9cd)g;7Ig$h{D8|Rp%W%RHtnq~Ww!6Z@!X44X z^E4iU5|NGX=VLe#;rv%0#Lhla30U8!F8Kcad+cyN5?S%Y?*-lKyCgPPI8G;EDs=Cx zm}bo^4h{Kf&8JV(K^cD~BZ(DtN3IvHtgQ6I!5&sYM$p05Arn`=?46ce&j`gG}{G$2ga85y4sGR%X~ zD%H#T>*Tj%%8yANGu^Y4md5Y2{rvoTrDXs|I{NWDFxY+e|KJGy`b_l% zHHAO`%g)%mc#&?+sa$Xtqj`ZIqjGoV(nuCi-9l9N0k`3QlM|I)WyUL)fj0`DQ zskCAA7tA-KqoNj8l&!%7$4kqx+)Jk6W6E5?u8gqgXtPeQnZ`5w$0zSBNlkSPzqM>V zexDhn>a?d%NcaHO$|Ktm;`eYmPHCOm7H=I(S~4eQ!U!^K4!bq+dx@)ot8}gkDk`MH zK|dcjqdwAfIg%1II;3VVP?B%l`7RdKZg2^z&8$KFx#=q6wZ#nVKW>vv!M_to@^y+T zRIM&&r>8%L6Ji`QmtU=@Gn+lFCXxWv^jJcxGXpkg+W`pc_TnWw`O?GKDPoPFuw;6- zrQWn0)s)L?7p_2E&;!Z`x~Xvd&={*2Y~=bdEiReQw6!U9;?tzY?NN*h?d|Q)_ZA@B z<_Z;k-AST4{f(cCK>@$paRr5`1xXe-a;NQB^nR8&p@jGY%3`|+J}$n*u1GWuHw!a! z&X+GOoIRbLrR$7?5+6lL0iW+_^{T@_d`i*8P8ReJTA`OziJWn!u-2Gy_Y; z#wWq{mJK%{L8IEgHyF8SFNTID=b^7+(K2=lSOqbFB>C{?}NB|G~Zd z|4;sZ)rkMEpDJ3>@e9;DM}2*qX9JsdcT2w@Tk7k@zn2uT;P%$<3?GvaG|JuFO_lzo zxTW3J%GNwPT3_yHbB^HK>)GdcIr?`|i~p2ZnMNMZ2H5$!-uy$lQ};X9_YmX!1p!M% z%y!L!YDRlUHKBg+1kRliaXi`^JnRpZDVCyUQ#4Z^Y&h*CrW5woBC8*s)yFOP9jBeF z`|U36DN_+9`R-vibhdCsWrw4gX_OQJS3Mp`#z&`~-m7!Jp$PtHb6U3P)y0fYBhX=2 zpJSUz@4c$jEBX_LPa}S;xO-~I)>2c;ob0yk?vI>WhR&_7ny;>&*vr=HLbw22*}$c? z_UVyR@zWHX>&zq?K1QFOZa%8?t=lPpUqii|lypsG7yri>>)sXqgdCY#9WIqjx>2lS zir!|h*f&UFUM|w9AIg~ayK8BDYHz=))rTuGDC({`J>lXrST&g!FW)U=&fVE39yw%? zOfWkYY)fO#Joqv0dTKckBTyymgv-nDpYv$x!4{|N!oVFMPY~g?dq3jt*1@5k--D8) z8AUc1OvRIV`sz<=PM>*W+*CR|&{s^(Mw>g|T|GD$I~ZZrc-_ytO8(WO6Pv)fLlGr8r{$ziwRx9x8H9+CHs=D zUCB8k!(olM`mde;8U~?-L!8h?-GMvplH9qbj?jpU(fHw)tk@ejt&fq=!jat_?U~}+ zB9%YahMRPsdJdLsUym3#*uVbj<-H_}GAyUc2{&-pOQNcfR5__X@$#HO+8obHbj#D& zkN7Ok$|HO5<5PdMD)`9VZLx#jz->-E_S&OUBGWB9qHx;!?^NktzJ zPi>C9wZFqj_E26j9+hnGf}Lz?>Sd5viq1&QKK~>9F4*EQE>eCE;|!Je&oM!PhY*zQ%hkiL-ur>}{LEoVj2ZSDIETo8|n%Q?=U zaK7eMbc8@RRPore^tSb6Eo=4&y2Vn<=)j~bCC$yIj8Y0I@eN~~#Sc7rn_my%&H63Dyg|=18nID1$8^UyA z>Vo}xvB={7mxK1Yb7$uH$fgVN-9H8aG*PMC%VbzqW!M|*iGTkmsmFY&S4YQSKaQ3f z8ePMaAZTA-|DyFnAA94DERBF8ugRgK@coXh*{$w^&f-K|0#9;PXs$S lDud%$1%%Y`zi~U`^kM;1tYZ^B1rGmSURp&8`PlgNe*?0b614yT literal 0 HcmV?d00001 diff --git a/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md b/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md index 37ee1e2437..9732f09e61 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md +++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md @@ -27,6 +27,10 @@ Learn how you can use Microsoft Defender ATP to expand the coverage of Microsoft >[!TIP] > Read our blog post about how [Microsoft Defender ATP integrates with Microsoft Information Protection to discover, protect, and monitor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). +If a file meets the criteria set in the policy settings is and endpoint data loss prevention setting is also configured, WIP will be enabled for that file. + + + ## Prerequisites - Endpoints need to be on Windows 10, version 1809 or later - You'll need the appropriate license to leverage the Microsoft Defender ATP and Azure Information Protection integration @@ -41,7 +45,7 @@ Learn how you can use Microsoft Defender ATP to expand the coverage of Microsoft 2. Create a new label or edit an existing one. 3. In the configuration wizard, go to 'Data loss prevention' tab and enable WIP. - ![Image of Office 365 Security and Compliance sensitivity label](images/office-scc-label.png) + ![Image of Office 365 Security and Compliance sensitivity label](images/endpoint-data-loss-protection.png) 4. Repeat for every label that you want to get WIP applied to in Windows. @@ -63,11 +67,15 @@ After completing these steps Microsoft Defender ATP will automatically identify 1. Go through the label creation wizard. 2. When you reach the Auto labeling page, turn on auto labeling toggle on. 3. Add a new auto-labeling rule with the conditions that you require. + + ![Image of auto labeling in Office 365 Security and Compliance center](images/auto-labeling.png) + 4. Validate that "When content matches these conditions" setting is set to "Automatically apply the label". + ## Related topic - [Information protection in Windows overview](information-protection-in-windows-overview.md) \ No newline at end of file From 0ab4221d704838e08108f0fdc2fb6a8e41128842 Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Mon, 27 May 2019 12:05:21 -0500 Subject: [PATCH 16/34] Update windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../user-roles-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md index 70a52291c3..58b35c2ec2 100644 --- a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md @@ -60,7 +60,7 @@ After creating roles, you'll need to create a machine group and provide access t >[!NOTE] ->The Windows Defender ATP administrator (default) role has administrator permissions. The administrator permissions cannot be assigned to any other role. On groups assigned the Windows Defender ATP administrator role have access to all machine groups. +>The Windows Defender ATP administrator (default) role has administrator permissions. The administrator permissions cannot be assigned to any other role. On groups assigned, the Windows Defender ATP administrator role has access to all machine groups. ## Edit roles From ffcc924230dc23cedf5dc50a941d1368838ef701 Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Mon, 27 May 2019 12:05:34 -0500 Subject: [PATCH 17/34] Update windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md Co-Authored-By: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../user-roles-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md index 58b35c2ec2..27c96c095f 100644 --- a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md @@ -81,6 +81,6 @@ After creating roles, you'll need to create a machine group and provide access t -## Related topic +## Related topics - [User basic permissions to access the portal](basic-permissions-windows-defender-advanced-threat-protection.md) - [Create and manage machine groups](machine-groups-windows-defender-advanced-threat-protection.md) From 1497bf3aab2e94b45bfb6b795701c7739c120e2f Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Tue, 28 May 2019 08:29:04 -0500 Subject: [PATCH 18/34] Update user-roles-windows-defender-advanced-threat-protection.md --- .../user-roles-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md index 27c96c095f..d20e9fe3e2 100644 --- a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md @@ -60,7 +60,7 @@ After creating roles, you'll need to create a machine group and provide access t >[!NOTE] ->The Windows Defender ATP administrator (default) role has administrator permissions. The administrator permissions cannot be assigned to any other role. On groups assigned, the Windows Defender ATP administrator role has access to all machine groups. +>The Windows Defender ATP administrator (default) role has administrator permissions. Administrator permissions cannot be assigned to any other role. Only those who are assigned the Windows Defender ATP administrator role, has access to all machine groups. ## Edit roles From 4b680098dc03cf665eb03aec49cec1bbc10b74ec Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Tue, 28 May 2019 14:45:08 -0700 Subject: [PATCH 19/34] Updated what's new --- .../mdm/new-in-windows-mdm-enrollment-management.md | 4 +++- .../client-management/mdm/policy-csp-servicecontrolmanager.md | 2 +- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md index 568389f6f7..6fecea0699 100644 --- a/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md +++ b/windows/client-management/mdm/new-in-windows-mdm-enrollment-management.md @@ -115,6 +115,7 @@ For details about Microsoft mobile device management protocols for Windows 10 s
  • [Power/UnattendedSleepTimeoutOnBattery](policy-csp-power.md#power-unattendedsleeptimeoutonbattery)
  • [Power/UnattendedSleepTimeoutPluggedIn](policy-csp-power.md#power-unattendedsleeptimeoutpluggedin)
  • [Search/AllowFindMyFiles](policy-csp-search.md#search-allowfindmyfiles)
  • +
  • [ServiceControlManager/SvchostProcessMitigation](policy-csp-servicecontrolmanager.md#servicecontrolmanager-svchostprocessmitigation)
  • [System/AllowCommercialDataPipeline](policy-csp-system.md#system-allowcommercialdatapipeline)
  • [System/TurnOffFileHistory](policy-csp-system.md#system-turnofffilehistory)
  • [Update/AutomaticMaintenanceWakeUp](policy-csp-update.md#update-automaticmaintenancewakeup)
  • @@ -1868,16 +1869,17 @@ How do I turn if off? | The service can be stopped from the "Services" console o |New or updated topic | Description| |--- | ---| +|[DeviceStatus CSP](devicestatus-csp.md)|Updated description of the following nodes:
    DeviceStatus/Antivirus/SignatureStatus, DeviceStatus/Antispyware/SignatureStatus.| |[EnrollmentStatusTracking CSP](enrollmentstatustracking-csp.md)|Added new CSP in Windows 10, version 1903.| |[Policy CSP - DeliveryOptimization](policy-csp-deliveryoptimization.md)|Added the following new policies:
    DODelayCacheServerFallbackBackground, DODelayCacheServerFallbackForeground.

    Updated description of the following policies:
    DOMinRAMAllowedToPeer, DOMinFileSizeToCache, DOMinDiskSizeAllowedToPeer.| |[Policy CSP - Experience](policy-csp-experience.md)|Added the following new policy:
    ShowLockOnUserTile.| |[Policy CSP - InternetExplorer](policy-csp-internetexplorer.md)|Added the following new policies:
    AllowEnhancedSuggestionsInAddressBar, DisableActiveXVersionListAutoDownload, DisableCompatView, DisableFeedsBackgroundSync, DisableGeolocation, DisableWebAddressAutoComplete, NewTabDefaultPage.| |[Policy CSP - Power](policy-csp-power.md)|Added the following new policies:
    EnergySaverBatteryThresholdOnBattery, EnergySaverBatteryThresholdPluggedIn, SelectLidCloseActionOnBattery, SelectLidCloseActionPluggedIn, SelectPowerButtonActionOnBattery, SelectPowerButtonActionPluggedIn, SelectSleepButtonActionOnBattery, SelectSleepButtonActionPluggedIn, TurnOffHybridSleepOnBattery, TurnOffHybridSleepPluggedIn, UnattendedSleepTimeoutOnBattery, UnattendedSleepTimeoutPluggedIn.| |[Policy CSP - Search](policy-csp-search.md)|Added the following new policy:
    AllowFindMyFiles.| +|[Policy CSP - ServiceControlManager](policy-csp-servicecontrolmanager.md)|Added the following new policy:
    SvchostProcessMitigation.| |[Policy CSP - System](policy-csp-system.md)|Added the following new policies:
    AllowCommercialDataPipeline, TurnOffFileHistory.| |[Policy CSP - Update](policy-csp-update.md)|Added the following new policies:
    AutomaticMaintenanceWakeUp, ConfigureDeadlineForFeatureUpdates, ConfigureDeadlineForQualityUpdates, ConfigureDeadlineGracePeriod, ConfigureDeadlineNoAutoReboot.| |[Policy CSP - WindowsLogon](policy-csp-windowslogon.md)|Added the following new policies:
    AllowAutomaticRestartSignOn, ConfigAutomaticRestartSignOn, EnableFirstLogonAnimation.| -|[DeviceStatus CSP](devicestatus-csp.md)|Updated description of the following nodes:
    DeviceStatus/Antivirus/SignatureStatus, DeviceStatus/Antispyware/SignatureStatus.| ### April 2019 diff --git a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md index b879cef048..d8eed119eb 100644 --- a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md +++ b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md @@ -6,7 +6,7 @@ ms.topic: article ms.prod: w10 ms.technology: windows author: Heidilohr -ms.date: 05/10/2019 +ms.date: 05/21/2019 --- # Policy CSP - ServiceControlManager From b56cec66934ee006a0255f22b342e7b09b7ea152 Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 29 May 2019 10:16:56 -0700 Subject: [PATCH 20/34] Added new policy to TOC --- windows/client-management/mdm/TOC.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 3e6ae32cb4..54ce71766b 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -245,6 +245,7 @@ #### [RestrictedGroups](policy-csp-restrictedgroups.md) #### [Search](policy-csp-search.md) #### [Security](policy-csp-security.md) +#### [ServiceControlManager](policy-csp-servicecontrolmanager.md) #### [Settings](policy-csp-settings.md) #### [SmartScreen](policy-csp-smartscreen.md) #### [Speech](policy-csp-speech.md) From fd36b9c68a09dec9ed667dc362cedd34309959ae Mon Sep 17 00:00:00 2001 From: ManikaDhiman Date: Wed, 29 May 2019 10:40:28 -0700 Subject: [PATCH 21/34] Removed prerelease warning --- .../client-management/mdm/policy-csp-servicecontrolmanager.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md index d8eed119eb..18c9500905 100644 --- a/windows/client-management/mdm/policy-csp-servicecontrolmanager.md +++ b/windows/client-management/mdm/policy-csp-servicecontrolmanager.md @@ -11,9 +11,6 @@ ms.date: 05/21/2019 # Policy CSP - ServiceControlManager -> [!WARNING] -> Some information relates to prereleased products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here. -
    From c7450ca03b86fb9ac23aff1cd698a239d99e92a1 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 29 May 2019 15:27:48 -0700 Subject: [PATCH 22/34] update casing for conditional access --- .../threat-protection/microsoft-defender-atp/TOC.md | 4 ++-- .../microsoft-defender-atp/conditional-access.md | 6 +++--- .../whats-new-in-microsoft-defender-atp.md | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/TOC.md b/windows/security/threat-protection/microsoft-defender-atp/TOC.md index cb802c617a..02693d3915 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/TOC.md +++ b/windows/security/threat-protection/microsoft-defender-atp/TOC.md @@ -98,7 +98,7 @@ #### [Managed security service provider support](mssp-support.md) ### [Microsoft Threat Protection](threat-protection-integration.md) -#### [Protect users, data, and devices with conditional access](conditional-access.md) +#### [Protect users, data, and devices with Conditional Access](conditional-access.md) #### [Microsoft Cloud App Security in Windows overview](microsoft-cloud-app-security-integration.md) #### [Information protection in Windows overview](information-protection-in-windows-overview.md) @@ -360,7 +360,7 @@ #### [Configure managed security service provider (MSSP) support](configure-mssp-support.md) ### Configure Microsoft Threat Protection integration -#### [Configure conditional access](configure-conditional-access.md) +#### [Configure Conditional Access](configure-conditional-access.md) #### [Configure Microsoft Cloud App Security in Windows](microsoft-cloud-app-security-config.md) ####[Configure information protection in Windows](information-protection-in-windows-config.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/conditional-access.md b/windows/security/threat-protection/microsoft-defender-atp/conditional-access.md index f4a0532ef7..b3305f93aa 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/conditional-access.md +++ b/windows/security/threat-protection/microsoft-defender-atp/conditional-access.md @@ -1,6 +1,6 @@ --- -title: Enable conditional access to better protect users, devices, and data -description: Enable conditional access to prevent applications from running if a device is considered at risk and an application is determined to be non-compliant. +title: Enable Conditional Access to better protect users, devices, and data +description: Enable Conditional Access to prevent applications from running if a device is considered at risk and an application is determined to be non-compliant. keywords: conditional access, block applications, security level, intune, search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -17,7 +17,7 @@ ms.collection: M365-security-compliance ms.topic: article --- -# Enable conditional access to better protect users, devices, and data +# Enable Conditional Access to better protect users, devices, and data **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) diff --git a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md index 619b30d34a..b25652932d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/whats-new-in-microsoft-defender-atp.md @@ -100,7 +100,7 @@ Query data using Advanced hunting in Microsoft Defender ATP. >[!NOTE] >Available from Windows 10, version 1803 or later. -- [Conditional access](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/conditional-access-windows-defender-advanced-threat-protection)
    Enable conditional access to better protect users, devices, and data. +- [Conditional Access](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/conditional-access-windows-defender-advanced-threat-protection)
    Enable conditional access to better protect users, devices, and data. - [Microsoft Defender ATP Community center](https://docs.microsoft.com/windows/security/threat-protection/windows-defender-atp/community-windows-defender-advanced-threat-protection)
    The Microsoft Defender ATP Community Center is a place where community members can learn, collaborate, and share experiences about the product. From 9a4579a84928a8ac45fc2bedd3fb1257be675e23 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 29 May 2019 16:08:10 -0700 Subject: [PATCH 23/34] update casing for conditional access --- .../conditional-access.md | 28 +++++++++---------- .../configure-conditional-access.md | 18 ++++++------ .../threat-protection-integration.md | 6 ++-- 3 files changed, 26 insertions(+), 26 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/conditional-access.md b/windows/security/threat-protection/microsoft-defender-atp/conditional-access.md index b3305f93aa..396e2730fb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/conditional-access.md +++ b/windows/security/threat-protection/microsoft-defender-atp/conditional-access.md @@ -26,26 +26,26 @@ ms.topic: article >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-conditionalaccess-abovefoldlink) -Conditional access is a capability that helps you better protect your users and enterprise information by making sure that only secure devices have access to applications. +Conditional Access is a capability that helps you better protect your users and enterprise information by making sure that only secure devices have access to applications. -With conditional access, you can control access to enterprise information based on the risk level of a device. This helps keep trusted users on trusted devices using trusted applications. +With Conditional Access, you can control access to enterprise information based on the risk level of a device. This helps keep trusted users on trusted devices using trusted applications. You can define security conditions under which devices and applications can run and access information from your network by enforcing policies to stop applications from running until a device returns to a compliant state. -The implementation of conditional access in Microsoft Defender ATP is based on Microsoft Intune (Intune) device compliance policies and Azure Active Directory (Azure AD) conditional access policies. +The implementation of Conditional Access in Microsoft Defender ATP is based on Microsoft Intune (Intune) device compliance policies and Azure Active Directory (Azure AD) conditional access policies. -The compliance policy is used with conditional access to allow only devices that fulfill one or more device compliance policy rules to access applications. +The compliance policy is used with Conditional Access to allow only devices that fulfill one or more device compliance policy rules to access applications. -## Understand the conditional access flow -Conditional access is put in place so that when a threat is seen on a device, access to sensitive content is blocked until the threat is remediated. +## Understand the Conditional Access flow +Conditional Access is put in place so that when a threat is seen on a device, access to sensitive content is blocked until the threat is remediated. The flow begins with machines being seen to have a low, medium, or high risk. These risk determinations are then sent to Intune. -Depending on how you configure policies in Intune, conditional access can be set up so that when certain conditions are met, the policy is applied. +Depending on how you configure policies in Intune, Conditional Access can be set up so that when certain conditions are met, the policy is applied. -For example, you can configure Intune to apply conditional access on devices that have a high risk. +For example, you can configure Intune to apply Conditional Access on devices that have a high risk. -In Intune, a device compliance policy is used in conjunction with Azure AD conditional access to block access to applications. In parallel, an automated investigation and remediation process is launched. +In Intune, a device compliance policy is used in conjunction with Azure AD Conditional Access to block access to applications. In parallel, an automated investigation and remediation process is launched. A user can still use the device while the automated investigation and remediation is taking place, but access to enterprise data is blocked until the threat is fully remediated. @@ -54,23 +54,23 @@ To resolve the risk found on a device, you'll need to return the device to a com There are three ways to address a risk: 1. Use Manual or automated remediation. 2. Resolve active alerts on the machine. This will remove the risk from the machine. -3. You can remove the machine from the active policies and consequently, conditional access will not be applied on the machine. +3. You can remove the machine from the active policies and consequently, Conditional Access will not be applied on the machine. -Manual remediation requires a secops admin to investigate an alert and address the risk seen on the device. The automated remediation is configured through configuration settings provided in the following section, [Configure conditional access](configure-conditional-access.md). +Manual remediation requires a secops admin to investigate an alert and address the risk seen on the device. The automated remediation is configured through configuration settings provided in the following section, [Configure Conditional Access](configure-conditional-access.md). When the risk is removed either through manual or automated remediation, the device returns to a compliant state and access to applications is granted. -The following example sequence of events explains conditional access in action: +The following example sequence of events explains Conditional Access in action: 1. A user opens a malicious file and Microsoft Defender ATP flags the device as high risk. 2. The high risk assessment is passed along to Intune. In parallel, an automated investigation is initiated to remediate the identified threat. A manual remediation can also be done to remediate the identified threat. -3. Based on the policy created in Intune, the device is marked as not compliant. The assessment is then communicated to Azure AD by the Intune conditional access policy. In Azure AD, the corresponding policy is applied to block access to applications. +3. Based on the policy created in Intune, the device is marked as not compliant. The assessment is then communicated to Azure AD by the Intune Conditional Access policy. In Azure AD, the corresponding policy is applied to block access to applications. 4. The manual or automated investigation and remediation is completed and the threat is removed. Microsoft Defender ATP sees that there is no risk on the device and Intune assesses the device to be in a compliant state. Azure AD applies the policy which allows access to applications. 5. Users can now access applications. ## Related topic -- [Configure conditional access in Microsoft Defender ATP](configure-conditional-access.md) +- [Configure Conditional Access in Microsoft Defender ATP](configure-conditional-access.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access.md b/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access.md index 87e9fe515f..e6023b38fc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-conditional-access.md @@ -1,5 +1,5 @@ --- -title: Configure conditional access in Microsoft Defender ATP +title: Configure Conditional Access in Microsoft Defender ATP description: keywords: search.product: eADQiWindows 10XVcnh @@ -18,11 +18,11 @@ ms.topic: article ms.date: 09/03/2018 --- -# Configure conditional access in Microsoft Defender ATP +# Configure Conditional Access in Microsoft Defender ATP **Applies to:** - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -This section guides you through all the steps you need to take to properly implement conditional access. +This section guides you through all the steps you need to take to properly implement Conditional Access. ### Before you begin >[!WARNING] @@ -43,12 +43,12 @@ There are steps you'll need to take in Microsoft Defender Security Center, the I > [!NOTE] > You'll need a Microsoft Intune environment, with Intune managed and Azure AD joined Windows 10 devices. -Take the following steps to enable conditional access: +Take the following steps to enable Conditional Access: - Step 1: Turn on the Microsoft Intune connection from Microsoft Defender Security Center - Step 2: Turn on the Microsoft Defender ATP integration in Intune - Step 3: Create the compliance policy in Intune - Step 4: Assign the policy -- Step 5: Create an Azure AD conditional access policy +- Step 5: Create an Azure AD Conditional Access policy ### Step 1: Turn on the Microsoft Intune connection @@ -85,17 +85,17 @@ Take the following steps to enable conditional access: 4. Include or exclude your Azure AD groups to assign them the policy. 5. To deploy the policy to the groups, select **Save**. The user devices targeted by the policy are evaluated for compliance. -### Step 5: Create an Azure AD conditional access policy -1. In the [Azure portal](https://portal.azure.com), open **Azure Active Directory** > **Conditional access** > **New policy**. +### Step 5: Create an Azure AD Conditional Access policy +1. In the [Azure portal](https://portal.azure.com), open **Azure Active Directory** > **Conditional Access** > **New policy**. 2. Enter a policy **Name**, and select **Users and groups**. Use the Include or Exclude options to add your groups for the policy, and select **Done**. 3. Select **Cloud apps**, and choose which apps to protect. For example, choose **Select apps**, and select **Office 365 SharePoint Online** and **Office 365 Exchange Online**. Select **Done** to save your changes. 4. Select **Conditions** > **Client apps** to apply the policy to apps and browsers. For example, select **Yes**, and then enable **Browser** and **Mobile apps and desktop clients**. Select **Done** to save your changes. -5. Select **Grant** to apply conditional access based on device compliance. For example, select **Grant access** > **Require device to be marked as compliant**. Choose **Select** to save your changes. +5. Select **Grant** to apply Conditional Access based on device compliance. For example, select **Grant access** > **Require device to be marked as compliant**. Choose **Select** to save your changes. 6. Select **Enable policy**, and then **Create** to save your changes. -For more information, see [Enable Microsoft Defender ATP with conditional access in Intune](https://docs.microsoft.com/intune/advanced-threat-protection). +For more information, see [Enable Microsoft Defender ATP with Conditional Access in Intune](https://docs.microsoft.com/intune/advanced-threat-protection). >Want to experience Microsoft Defender ATP? [Sign up for a free trial.](https://www.microsoft.com/en-us/WindowsForBusiness/windows-atp?ocid=docs-wdatp-conditionalaccess-belowfoldlink) diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-protection-integration.md b/windows/security/threat-protection/microsoft-defender-atp/threat-protection-integration.md index 1c97445131..14c2504769 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-protection-integration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-protection-integration.md @@ -40,8 +40,8 @@ Microsoft Defender ATP provides a comprehensive server protection solution, incl ## Azure Information Protection Keep sensitive data secure while enabling productivity in the workplace through data data discovery and data protection. -## Conditional access -Microsoft Defender ATP's dynamic machine risk score is integrated into the conditional access evaluation, ensuring that only secure devices have access to resources. +## Conditional Access +Microsoft Defender ATP's dynamic machine risk score is integrated into the Conditional Access evaluation, ensuring that only secure devices have access to resources. ## Microsoft Cloud App Security @@ -56,7 +56,7 @@ The Skype for Business integration provides s a way for analysts to communicate ## Related topic -- [Protect users, data, and devices with conditional access](conditional-access.md) +- [Protect users, data, and devices with Conditional Access](conditional-access.md) From fceb77a74a11a6dcda2076de1cc00a01263cbdf2 Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Wed, 29 May 2019 18:20:47 -0500 Subject: [PATCH 24/34] Update windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> --- .../user-roles-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md index d20e9fe3e2..e9e4a5a090 100644 --- a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md @@ -60,7 +60,7 @@ After creating roles, you'll need to create a machine group and provide access t >[!NOTE] ->The Windows Defender ATP administrator (default) role has administrator permissions. Administrator permissions cannot be assigned to any other role. Only those who are assigned the Windows Defender ATP administrator role, has access to all machine groups. +>The Windows Defender ATP administrator (default) role has administrator permissions with exclusive access to all machine groups. Administrator permissions cannot be assigned to any other role. ## Edit roles From ac3bc9460a48140b99f82dbbd5df8b579f89a98e Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Wed, 29 May 2019 18:28:12 -0500 Subject: [PATCH 25/34] Update windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> --- .../user-roles-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md index e9e4a5a090..62d5742ecc 100644 --- a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md @@ -82,5 +82,5 @@ After creating roles, you'll need to create a machine group and provide access t ## Related topics -- [User basic permissions to access the portal](basic-permissions-windows-defender-advanced-threat-protection.md) +- [User basic permissions to access the portal](basic-permissions.md) - [Create and manage machine groups](machine-groups-windows-defender-advanced-threat-protection.md) From 4367b6fdb1785ad0b7a03c99eaa8eb3f3159d884 Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Wed, 29 May 2019 18:28:27 -0500 Subject: [PATCH 26/34] Update windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md Co-Authored-By: Nicole Turner <39884432+nenonix@users.noreply.github.com> --- .../user-roles-windows-defender-advanced-threat-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md index 62d5742ecc..17cd72f54c 100644 --- a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md @@ -83,4 +83,4 @@ After creating roles, you'll need to create a machine group and provide access t ## Related topics - [User basic permissions to access the portal](basic-permissions.md) -- [Create and manage machine groups](machine-groups-windows-defender-advanced-threat-protection.md) +- [Create and manage machine groups](machine-groups.md) From c30ca570df2f5f1b25497466f9d5777b64145e47 Mon Sep 17 00:00:00 2001 From: Orlando Rodriguez <49177883+ojrb@users.noreply.github.com> Date: Wed, 29 May 2019 18:40:18 -0500 Subject: [PATCH 27/34] Rename user-roles-windows-defender-advanced-threat-protection.md to user-roles.md --- ...ndows-defender-advanced-threat-protection.md => user-roles.md} | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename windows/security/threat-protection/windows-defender-atp/{user-roles-windows-defender-advanced-threat-protection.md => user-roles.md} (100%) diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md b/windows/security/threat-protection/windows-defender-atp/user-roles.md similarity index 100% rename from windows/security/threat-protection/windows-defender-atp/user-roles-windows-defender-advanced-threat-protection.md rename to windows/security/threat-protection/windows-defender-atp/user-roles.md From a9e5ac5ee637b31b23d5e7a3a7eaf78b63f283b9 Mon Sep 17 00:00:00 2001 From: Michael Niehaus Date: Wed, 29 May 2019 19:00:29 -0700 Subject: [PATCH 28/34] Update white-glove.md Updated doc to reflect that flighted features are no longer required, feature is now in public preview. Fixed some formatting issues. --- .../windows-autopilot/white-glove.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/deployment/windows-autopilot/white-glove.md b/windows/deployment/windows-autopilot/white-glove.md index 88ac95d477..5e871a2c28 100644 --- a/windows/deployment/windows-autopilot/white-glove.md +++ b/windows/deployment/windows-autopilot/white-glove.md @@ -15,13 +15,13 @@ ms.topic: article # Windows Autopilot for white glove deployment -**Applies to: Windows 10, version 1903** +**Applies to: Windows 10, version 1903** (preview) Windows Autopilot enables organizations to easily provision new devices - leveraging the preinstalled OEM image and drivers with a simple process that can be performed by the end user to help get their device business-ready. ![OEM](images/wg01.png) -Windows Autopilot can also provide a white glove service that enables partners or IT staff to pre-provision a Windows 10 PC so that it is fully configured and business-ready​. From the end user’s perspective, the Windows Autopilot user-driven experience is unchanged, but getting their device to a fully provisioned state is faster. +Windows Autopilot can also provide a white glove service that enables partners or IT staff to pre-provision a Windows 10 PC so that it is fully configured and business-ready. From the end user’s perspective, the Windows Autopilot user-driven experience is unchanged, but getting their device to a fully provisioned state is faster. With **Windows Autopilot for white glove deployment**, the provisioning process is split. The time-consuming portions are performed by IT, partners, or OEMs. The end user simply completes a few neceesary settings and polices and then they can begin using their device. @@ -34,7 +34,7 @@ Enabled with Microsoft Intune in Windows 10, version 1903 and later, white glove In addition to [Windows Autopilot requirements](windows-autopilot-requirements.md), Windows Autopilot for white glove deployment adds the following: - Windows 10, version 1903 or later is required. -- An Intune subscription with additional flighted features that are not yet available publicly is currently required. Note: This feature will change soon from flighted to preview. Prior to this feature switching to preview status, attempts to perform white glove deployment without t flighted features will fail with an Intune enrollment error. +- An Intune subscription. - Physical devices that support TPM 2.0 and device attestation; virtual machines are not supported. The white glove provisioning process leverages Windows Autopilot self-deploying capabilities, hence the TPM 2.0 requirements. - Physical devices with Ethernet connectivity; Wi-fi connectivity is not supported due to the requirement to choose a language, locale, and keyboard to make that Wi-fi connection; doing that in a pre-provisioning process could prevent the user from choosing their own language, locale, and keyboard when they receive the device. @@ -49,12 +49,12 @@ If these scenarios cannot be completed, Windows Autopilot for white glove deploy To enable white glove deployment, an additional Autopilot profile setting must be configured: ->[!TIP] ->To see the white glove deployment Autopilot profile setting, use this URL to access the Intune portal: https://portal.azure.com/?microsoft_intune_enrollment_enableWhiteGlove=true. This is a temporary requirement. - ![allow white glove](images/allow-white-glove-oobe.png) -The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. **Note**: other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. +The Windows Autopilot for white glove deployment pre-provisioning process will apply all device-targeted policies from Intune. That includes certificates, security templates, settings, apps, and more – anything targeting the device. Additionally, any apps (Win32 or LOB) that are configured to install in the device context and targeted to the user that has been pre-assigned to the Autopilot device will also be installed. + +>[!NOTE] +>Other user-targeted policies will not apply until the user signs into the device. To verify these behaviors, be sure to create appropriate apps and policies targeted to devices and users. ## Scenarios @@ -82,16 +82,16 @@ Regardless of the scenario, the process to be performed by the technician is the ![landing](images/landing.png) - Click **Provision** to begin the provisioning process. + If the pre-provisioning process completes successfully: - A green status screen will be displayed with information about the device, including the same details presented previously (e.g. Autopilot profile, organization name, assigned user, QR code), as well as the elapsed time for the pre-provisioning steps. + ![white-glove-result](images/white-glove-result.png) - Click **Reseal** to shut the device down. At that point, the device can be shipped to the end user. If the pre-provisioning process fails: - A red status screen will be displayed with information about the device, including the same details presented previously (e.g. Autopilot profile, organization name, assigned user, QR code), as well as the elapsed time for the pre-provisioning steps. - Diagnostic logs can be gathered from the device, and then it can be reset to start the process over again. - ![white-glove-result](images/white-glove-result.png) - ### User flow If the pre-provisioning process completed successfully and the device was resealed, it can be delivered to the end user to complete the normal Windows Autopilot user-driven process. They will perform a standard set of steps: From d564317c9fe04de7427a9601ce5cb6039a6aaa65 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 29 May 2019 20:29:02 -0700 Subject: [PATCH 29/34] fix link errors --- .../access-control/special-identities.md | 2 +- .../hello-how-it-works-technology.md | 12 ++++++------ .../windows-defender-atp/user-roles.md | 4 ++-- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/identity-protection/access-control/special-identities.md b/windows/security/identity-protection/access-control/special-identities.md index 2dfcc827e9..0a07c86b2d 100644 --- a/windows/security/identity-protection/access-control/special-identities.md +++ b/windows/security/identity-protection/access-control/special-identities.md @@ -82,7 +82,7 @@ The special identity groups are described in the following tables: - [This Organization](#this-organization) -- [Window Manager\\Window Manager Group](#window-manager\\window-manager-group) +- [Window Manager\\Window Manager Group](#window-manager-window-manager-group) ## Anonymous Logon diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md index c8fbed37c7..d8188d7782 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md @@ -34,8 +34,8 @@ ms.date: 10/08/2018 - [Key Trust](#key-trust) - [Managed Environment](#managed-environment) - [On-premises Deployment](#on-premises-deployment) -- [Pass-through Authentication](#passthrough-authentication) -- [Password Hash Synchronization](#password-hash-synchronization) +- [Pass-through Authentication](#pass-through-authentication) +- [Password Hash Synchronization](#password-hash-sync) - [Primary Refresh Token](#primary-refresh-token) - [Storage Root Key](#storage-root-key) - [Trust Type](#trust-type) @@ -212,9 +212,9 @@ The key trust model uses the user's Windows Hello for Business identity to authe Managed environments are for non-federated environments where Azure Active Directory manages the authentication using technologies such as Password Hash Synchronization and Pass-through Authentication rather than a federation service such as Active Directory Federation Services. ### Related topics -[Federated Environment](#federated-environment), [Pass-through authentication](#pass-through-authentication), [Password Hash Synchronization](#password-hash-synchronization) +[Federated Environment](#federated-environment), [Pass-through authentication](#pass-through-authentication), [Password Hash Synchronization](#password-hash-sync) -[Return to Top](#Technology-and-Terms) +[Return to Top](#technology-and-terms) ## On-premises Deployment The Windows Hello for Business on-premises deployment is for organizations that exclusively have on-premises resources that are accessed using Active Directory identities. On-premises deployments support domain joined devices. The on-premises deployment model supports two authentication trust types, key trust and certificate trust. @@ -235,7 +235,7 @@ Provides a simple password validation for Azure AD authentication services using ### More information - [Choosing the right authentication method for your Azure Active Directory hybrid identity solution](https://docs.microsoft.com/azure/security/azure-ad-choose-authn) -[Return to Top](#hello-how-it-works-technology.md) +[Return to Top](hello-how-it-works-technology.md) ## Password Hash Sync The simplest way to enable authentication for on-premises directory objects in Azure AD. With password hash sync (PHS), you synchronize your on-premises Active Directory user account objects with Office 365 and manage your users on-premises. Hashes of user passwords are synchronized from your on-premises Active Directory to Azure AD so that the users have the same password on-premises and in the cloud. When passwords are changed or reset on-premises, the new password hashes are synchronized to Azure AD so that your users can always use the same password for cloud resources and on-premises resources. The passwords are never sent to Azure AD or stored in Azure AD in clear text. Some premium features of Azure AD, such as Identity Protection, require PHS regardless of which authentication method is selected. With seamless single sign-on, users are automatically signed in to Azure AD when they are on their corporate devices and connected to your corporate network. @@ -253,7 +253,7 @@ The PRT is initially obtained during Windows Logon (user sign-in/unlock) in a si The PRT is needed for SSO. Without it, the user will be prompted for credentials when accessing applications every time. Please also note that the PRT contains information about the device. This means that if you have any [device-based conditional access](https://docs.microsoft.com/azure/active-directory/active-directory-conditional-access-policy-connected-applications) policy set on an application, without the PRT, access will be denied. -[Return to Top](#Technology-and-Terms) +[Return to Top](#technology-and-terms) ## Storage Root Key The storage root key (SRK) is also an asymmetric key pair (RSA with a minimum of 2048 bits length). The SRK has a major role and is used to protect TPM keys, so that these keys cannot be used without the TPM. The SRK key is created when the ownership of the TPM is taken. diff --git a/windows/security/threat-protection/windows-defender-atp/user-roles.md b/windows/security/threat-protection/windows-defender-atp/user-roles.md index 17cd72f54c..d007b7028e 100644 --- a/windows/security/threat-protection/windows-defender-atp/user-roles.md +++ b/windows/security/threat-protection/windows-defender-atp/user-roles.md @@ -82,5 +82,5 @@ After creating roles, you'll need to create a machine group and provide access t ## Related topics -- [User basic permissions to access the portal](basic-permissions.md) -- [Create and manage machine groups](machine-groups.md) +- [User basic permissions to access the portal](../microsoft-defender-atp/basic-permissions.md) +- [Create and manage machine groups](../microsoft-defender-atp/machine-groups.md) From 124d73a741534f395cf0334a80f2687368a796e6 Mon Sep 17 00:00:00 2001 From: Greg Lindsay Date: Wed, 29 May 2019 21:10:26 -0700 Subject: [PATCH 30/34] fix link error --- .../hello-for-business/hello-how-it-works-technology.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md b/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md index d8188d7782..183203f5d6 100644 --- a/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md +++ b/windows/security/identity-protection/hello-for-business/hello-how-it-works-technology.md @@ -229,7 +229,7 @@ The Windows Hello for Business on-premises deployment is for organizations that Provides a simple password validation for Azure AD authentication services using a software agent running on one or more on-premises servers to validate the users directly with your on-premises Active Directory. With pass-through authentication (PTA), you synchronize on-premises Active Directory user account objects with Office 365 and manage your users on-premises. Allows your users to sign in to both on-premises and Office 365 resources and applications using their on-premises account and password. This configuration validates users' passwords directly against your on-premises Active Directory without sending password hashes to Office 365. Companies with a security requirement to immediately enforce on-premises user account states, password policies, and logon hours would use this authentication method. With seamless single sign-on, users are automatically signed in to Azure AD when they are on their corporate devices and connected to your corporate network. ### Related topics -[Federated Environment](#federated-environment), [Managed Environment](#managed-environment), [Password Hash Synchronization](#password-hash-synchronization) +[Federated Environment](#federated-environment), [Managed Environment](#managed-environment), [Password Hash Synchronization](#password-hash-sync) ### More information From e3bc941b72044766c7d0a0676404b789e59fa3ab Mon Sep 17 00:00:00 2001 From: Alexander Dale Date: Thu, 30 May 2019 14:08:31 -0700 Subject: [PATCH 31/34] Updating some requirements for the System Guard page. --- .../system-guard-secure-launch-and-smm-protection.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md index 73a279e7a5..795e95526c 100644 --- a/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md +++ b/windows/security/threat-protection/windows-defender-system-guard/system-guard-secure-launch-and-smm-protection.md @@ -72,7 +72,8 @@ Any machine with System Guard enabled will automatically meet the following low- |SMM Page Tables| Must NOT contain any mappings to EfiConventionalMemory (e.g. no OS/VMM owned memory).
    Must NOT contain any mappings to code sections within EfiRuntimeServicesCode.
    Must NOT have execute and write permissions for the same page
    Must allow ONLY that TSEG pages can be marked executable and the memory map must report TSEG EfiReservedMemoryType.
    BIOS SMI handler must be implemented such that SMM page tables are locked on every SMM entry. | |Modern/Connected Standby|Platforms must support Modern/Connected Standby.| |TPM AUX Index|Platform must set up a AUX index with index, attributes, and policy that exactly corresponds to the AUX index specified in the TXT DG with a data size of exactly 104 bytes (for SHA256 AUX data). (NameAlg = SHA256)
    Platforms must set up a PS (Platform Supplier) index with:
    • Exactly the "TXT PS2" style Attributes on creation as follows:
      • AuthWrite
      • PolicyDelete
      • WriteLocked
      • WriteDefine
      • AuthRead
      • WriteDefine
      • NoDa
      • Written
      • PlatformCreate
    • A policy of exactly PolicyCommandCode(CC = TPM2_CC_UndefineSpaceSpecial) (SHA256 NameAlg and Policy)
    • Size of exactly 70 bytes
    • NameAlg = SHA256
    • In addition, it must have been initialized and locked (TPMA_NV_WRITTEN = 1, TPMA_NV_WRITELOCKED = 1) at time of OS launch.
    PS index data DataRevocationCounters, SINITMinVersion, and PolicyControl must all be 0x00 | -|AUX Policy|The required AUX policy must be as follows:
    • A = TPM2_PolicyLocality (Locality 3 & Locality 4)
    • B = TPM2_PolicyCommandCode (TPM_CC_NV_UndefineSpecial)
    • authPolicy = {A} OR {{A} AND {B}}
    • authPolicy digest = 0xef, 0x9a, 0x26, 0xfc, 0x22, 0xd1, 0xae, 0x8c, 0xec, 0xff, 0x59, 0xe9, 0x48, 0x1a, 0xc1, 0xec, 0x53, 0x3d, 0xbe, 0x22, 0x8b, 0xec, 0x6d, 0x17, 0x93, 0x0f, 0x4c, 0xb2, 0xcc, 0x5b, 0x97, 0x24
    | +|AUX Policy|The required AUX policy must be as follows:
    • A = TPM2_PolicyLocality (Locality 3 & Locality 4)
    • B = TPM2_PolicyCommandCode (TPM_CC_NV_UndefineSpecial)
    • authPolicy = \{A} OR {{A} AND \{B}}
    • authPolicy digest = 0xef, 0x9a, 0x26, 0xfc, 0x22, 0xd1, 0xae, 0x8c, 0xec, 0xff, 0x59, 0xe9, 0x48, 0x1a, 0xc1, 0xec, 0x53, 0x3d, 0xbe, 0x22, 0x8b, 0xec, 0x6d, 0x17, 0x93, 0x0f, 0x4c, 0xb2, 0xcc, 0x5b, 0x97, 0x24
    | +|TPM NV Index|Platform firmware must set up a TPM NV index for use by the OS with:
    • Handle: 0x01C101C0
    • Attributes:
      • TPMA_NV_POLICYWRITE
      • TPMA_NV_PPREAD
      • TPMA_NV_OWNERREAD
      • TPMA_NV_AUTHREAD
      • TPMA_NV_POLICYREAD
      • TPMA_NV_NO_DA
      • TPMA_NV_PLATFORMCREATE
      • TPMA_NV_POLICY_DELETE
    • A policy of:
      • A = TPM2_PolicyAuthorize(MSFT_DRTM_AUTH_BLOB_SigningKey)
      • B = TPM2_PolicyCommandCode(TPM_CC_NV_UndefineSpaceSpecial)
      • authPolicy = \{A} OR {{A} AND \{B}}
      • Digest value of 0xcb, 0x45, 0xc8, 0x1f, 0xf3, 0x4b, 0xcf, 0x0a, 0xfb, 0x9e, 0x1a, 0x80, 0x29, 0xfa, 0x23, 0x1c,0x87, 0x27, 0x30, 0x3c, 0x09, 0x22, 0xdc, 0xce, 0x68, 0x4b, 0xe3, 0xdb, 0x81, 0x7c, 0x20, 0xe1
    | |Platform firmware|Platform firmware must carry all code required to execute an Intel® Trusted Execution Technology secure launch:
    • Intel® SINIT ACM must be carried in the OEM BIOS
    • Platforms must ship with a production ACM signed by the correct production Intel® ACM signer for the platform
    | |Platform firmware update|System firmware is recommended to be updated via UpdateCapsule in Windows Update. | From 09aafb53bcacd788a3d8c3f04757f88aad7f75de Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 30 May 2019 14:56:09 -0700 Subject: [PATCH 32/34] updates to info protection --- .../information-protection-in-windows-config.md | 13 +++++++++++-- .../information-protection-investigation.md | 7 +++++-- 2 files changed, 16 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md b/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md index 9732f09e61..df1f2839e1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md +++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-config.md @@ -22,12 +22,12 @@ ms.topic: article - [Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)](https://go.microsoft.com/fwlink/p/?linkid=2069559) -Learn how you can use Microsoft Defender ATP to expand the coverage of Microsoft Information Protection (WIP) to protect files based on their label, regardless of their origin. +Learn how you can use Microsoft Defender ATP to expand the coverage of Windows Information Protection (WIP) to protect files based on their label, regardless of their origin. >[!TIP] > Read our blog post about how [Microsoft Defender ATP integrates with Microsoft Information Protection to discover, protect, and monitor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). -If a file meets the criteria set in the policy settings is and endpoint data loss prevention setting is also configured, WIP will be enabled for that file. +If a file meets the criteria set in the policy settings and endpoint data loss prevention setting is also configured, WIP will be enabled for that file. @@ -57,6 +57,15 @@ After completing these steps Microsoft Defender ATP will automatically identify ## Configure auto labeling + +Windows automatically detects when an Office file, PDF, CSV or TXT files are being created on a device and inspects it based on context to identify sensitive information types. + +Those information types are evaluated against the auto-labeling policy. If a match is found, it is processed in the same way as if the file was labeled; the file is protected with Endpoint data loss prevention. + +>[!NOTE] +> Auto-labeling requires Windows 10, version 1903. + + 1. In Office 365 Security & Compliance, go to **Classifications > Labels**. 2. Create a new label or edit an existing one. diff --git a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md index f6c0561d54..60b19e231e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md +++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-investigation.md @@ -1,5 +1,5 @@ --- -title: Use sensitivity labels to prioriize incident response +title: Use sensitivity labels to prioritize incident response description: Learn how to use sensitivity labels to prioritize and investigate incidents keywords: information, protection, data, loss, prevention,labels, dlp, incident, investigate, investigation search.product: eADQiWindows 10XVcnh @@ -24,11 +24,14 @@ ms.topic: article A typical advanced persistent threat lifecycle involves data exfiltration. In a security incident, it's important to have the ability to prioritize investigations where sensitive files may be jeopardy so that corporate data and information are protected. -Microsoft Defender ATP helps to make the prioritization of security incidents much simplier with the use of sensitivity labels. Sensitivity labels quickly identify incidents that may involve machines with sensitive information such as confidential information. +Microsoft Defender ATP helps to make the prioritization of security incidents much simpler with the use of sensitivity labels. Sensitivity labels quickly identify incidents that may involve machines with sensitive information such as confidential information. ## Investigate incidents that involve sensitive data Learn how to use data sensitivity labels to prioritize incident investigation. +>[!NOTE] +>Labels are detected for Windows 10, version 1809 or later. + 1. In Microsoft Defender Security Center, select **Incidents**. 2. Scroll to the right to see the **Data sensitivity** column. This column reflects sensitivity labels that have been observed on machines related to the incidents providing an indication of whether sensitive files may be impacted by the incident. From e8fa6ce8872377e2d0940fcb14d86ed7f1735602 Mon Sep 17 00:00:00 2001 From: Beth Levin Date: Thu, 30 May 2019 14:56:33 -0700 Subject: [PATCH 33/34] added transparency report --- .../intelligence/top-scoring-industry-antivirus-tests.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md b/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md index 849e9ef801..e1c515f621 100644 --- a/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md +++ b/windows/security/threat-protection/intelligence/top-scoring-industry-antivirus-tests.md @@ -37,6 +37,9 @@ MITRE tested the ability of products to detect techniques commonly used by the t Windows Defender Antivirus is part of the [next generation](https://www.youtube.com/watch?v=Xy3MOxkX_o4) Microsoft Defender ATP security stack which addresses the latest and most sophisticated threats today. In some cases, customers might not even know they were protected because a cyberattack is stopped [milliseconds after a campaign starts](https://cloudblogs.microsoft.com/microsoftsecure/2018/03/07/behavior-monitoring-combined-with-machine-learning-spoils-a-massive-dofoil-coin-mining-campaign?ocid=cx-docs-avreports). That's because Windows Defender Antivirus detects and stops malware at first sight by using [machine learning](https://cloudblogs.microsoft.com/microsoftsecure/2018/06/07/machine-learning-vs-social-engineering?ocid=cx-docs-avreports), [artificial intelligence](https://cloudblogs.microsoft.com/microsoftsecure/2018/02/14/how-artificial-intelligence-stopped-an-emotet-outbreak?ocid=cx-docs-avreports), behavioral analysis, and other advanced technologies. +- **Transparency report**: [Examining industry test results, May 2019](https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE33cdd) + + ### AV-TEST: Protection score of 6.0/6.0 in the latest test The AV-TEST Product Review and Certification Report tests on three categories: protection, performance, and usability. The scores listed below are for the Protection category which has two scores: Real-World Testing and the AV-TEST reference set (known as "Prevalent Malware"). From 70d7b0fb544cd7f580d3dd2b5f1ce376b65fecf1 Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Thu, 30 May 2019 14:58:39 -0700 Subject: [PATCH 34/34] wdatp to mdatp --- ...information-protection-in-windows-overview.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-overview.md b/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-overview.md index b67f2d37fc..6722462390 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-overview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/information-protection-in-windows-overview.md @@ -31,14 +31,14 @@ Microsoft Defender ATP is seamlessly integrated in Microsoft Threat Protection t > Read our blog post about how [Microsoft Defender ATP integrates with Microsoft Information Protection to discover, protect, and monitor sensitive data on Windows devices](https://cloudblogs.microsoft.com/microsoftsecure/2019/01/17/windows-defender-atp-integrates-with-microsoft-information-protection-to-discover-protect-and-monitor-sensitive-data-on-windows-devices/). -Windows Defender ATP applies the following methods to discover, classify, and protect data: +Microsoft Defender ATP applies the following methods to discover, classify, and protect data: - **Data discovery** - Identify sensitive data on Windows devices at risk - **Data classification** - Automatically classify data based on common Microsoft Information Protection (MIP) policies managed in Office 365 Security & Compliance Center. Auto-classification allows you to protect sensitive data even if the end user hasn’t manually classified it. - **Data protection** - Windows Information Protection (WIP) as outcome of Azure Information Protection label ## Data discovery and data classification -Windows Defender ATP automatically discovers files with sensitivity labels and files that contain sensitive information types. +Microsoft Defender ATP automatically discovers files with sensitivity labels and files that contain sensitive information types. Sensitivity labels classify and help protect sensitive content. @@ -54,14 +54,14 @@ Custom types are ones that you define and is designed to protect a different typ When a file is created or edited on a Windows device, Windows Defender ATP scans the content to evaluate if it contains sensitive information. -Turn on the Azure Information Protection integration so that when a file that contains sensitive information is discovered by Windows Defender ATP though labels or information types, it is automatically forwarded to Azure Information Protection from the device. +Turn on the Azure Information Protection integration so that when a file that contains sensitive information is discovered by Microsoft Defender ATP though labels or information types, it is automatically forwarded to Azure Information Protection from the device. ![Image of settings page with Azure Information Protection](images/atp-settings-aip.png) The reported signals can be viewed on the Azure Information Protection – Data discovery dashboard. ## Azure Information Protection - Data discovery dashboard -This dashboard presents a summarized discovery information of data discovered by both Windows Defender ATP and Azure Information Protection. Data from Windows Defender ATP is marked with Location Type - Endpoint. +This dashboard presents a summarized discovery information of data discovered by bothMicrosoft Defender ATP and Azure Information Protection. Data from Microsoft Defender ATP is marked with Location Type - Endpoint. ![Image of Azure Information Protection - Data discovery](images/azure-data-discovery.png) @@ -77,7 +77,7 @@ Click on a device to view a list of files observed on this device, with their se ## Log Analytics -Data discovery based on Windows Defender ATP is also available in [Azure Log Analytics](https://docs.microsoft.com/azure/log-analytics/log-analytics-overview), where you can perform complex queries over the raw data. +Data discovery based on Microsoft Defender ATP is also available in [Azure Log Analytics](https://docs.microsoft.com/azure/log-analytics/log-analytics-overview), where you can perform complex queries over the raw data. For more information on Azure Information Protection analytics, see [Central reporting for Azure Information Protection](https://docs.microsoft.com/azure/information-protection/reports-aip). @@ -102,9 +102,9 @@ InformationProtectionLogs_CL ### Endpoint data loss prevention For data to be protected, they must first be identified through labels. -Sensitivity labels are created in Office 365 Security & Compliance Center. Windows Defender ATP then uses the labels to identify endpoints that need Windows Information Protection (WIP) applied on them. +Sensitivity labels are created in Office 365 Security & Compliance Center. Microsoft Defender ATP then uses the labels to identify endpoints that need Windows Information Protection (WIP) applied on them. -When you create sensitivity labels, you can set the information protection functionalities that will be applied on the file. The setting that applies to Windows Defender ATP is the Endpoint data loss prevention. +When you create sensitivity labels, you can set the information protection functionalities that will be applied on the file. The setting that applies to Microsoft Defender ATP is the Endpoint data loss prevention. For the endpoint data loss prevention, you'll need to turn on the Endpoint Data loss prevention and select Enable Windows end point protection (DLP for devices). @@ -119,7 +119,7 @@ For more information, see [Configure information protection in Windows](informat ## Auto labeling -Auto labeling is another way to protect data and can also be configured in Office 365 Security & Compliance Center. When Windows Defender ATP scans the content of a file in a Windows device and finds that it contains sensitive information, it will automatically apply a label to it even if the user hasn't manually classified it. +Auto labeling is another way to protect data and can also be configured in Office 365 Security & Compliance Center. When Microsoft Defender ATP scans the content of a file in a Windows device and finds that it contains sensitive information, it will automatically apply a label to it even if the user hasn't manually classified it. > [!NOTE] > Auto-labeling is supported in Office apps only when the Azure Information Protection unified labeling client is installed. When sensitive content is detected in email or documents matching the conditions you choose, a label can automatically be applied or a message can be shown to users recommending they apply it themselves.