From 469a0c8f8723a6bec42bcd5c2b618e083bc9d7b5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Sun, 20 Dec 2020 22:26:58 +0100 Subject: [PATCH 001/206] add info about the allowedThreats option MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Thomas Sjögren --- .../linux-install-manually.md | 12 ++++--- .../linux-install-with-ansible.md | 30 ++++++++++++++-- .../linux-install-with-puppet.md | 34 ++++++++++++++++--- 3 files changed, 63 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md index cb813cf147..3df93c4de6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md @@ -14,9 +14,9 @@ author: dansimp ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: -- m365-security-compliance -- m365initiative-defender-endpoint +ms.collection: +- m365-security-compliance +- m365initiative-defender-endpoint ms.topic: conceptual --- @@ -144,10 +144,10 @@ In order to preview new features and provide early feedback, it is recommended t sudo mv ./microsoft.list /etc/apt/sources.list.d/microsoft-[channel].list ``` For example, if you chose *insiders-fast* channel: - + ```bash sudo mv ./microsoft.list /etc/apt/sources.list.d/microsoft-insiders-fast.list - ``` + ``` - Install the `gpg` package if not already installed: @@ -328,6 +328,8 @@ Download the onboarding package from Microsoft Defender Security Center: mdatp threat list ``` + If the the test file isn't detected and quarantined it might be labeled as a allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). + ## Log installation issues See [Log installation issues](linux-resources.md#log-installation-issues) for more information on how to find the automatically generated log that is created by the installer when an error occurs. diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md index 35fe0795ab..6643175264 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md @@ -14,9 +14,9 @@ author: dansimp ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: -- m365-security-compliance -- m365initiative-defender-endpoint +ms.collection: +- m365-security-compliance +- m365initiative-defender-endpoint ms.topic: conceptual --- @@ -248,6 +248,30 @@ Now run the tasks files under `/etc/ansible/playbooks/` or relevant directory. ansible-playbook /etc/ansible/playbooks/uninstall_mdatp.yml -i /etc/ansible/hosts ``` +## Testing + +Run a detection test to verify that the device is properly onboarded and reporting to the service. Perform the following steps on a newly onboarded device: + +- Ensure that real-time protection is enabled (denoted by a result of `1` from running the following command): + + ```bash + mdatp health --field real_time_protection_enabled + ``` + +- Open a Terminal window. Copy and execute the following command: + + ``` bash + curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt + ``` + +- The file should have been quarantined by Defender for Endpoint for Linux. Use the following command to list all the detected threats: + + ```bash + mdatp threat list + ``` + +If the the test file isn't detected and quarantined it might be labeled as a allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). + ## Log installation issues See [Log installation issues](linux-resources.md#log-installation-issues) for more information on how to find the automatically generated log that is created by the installer when an error occurs. diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md index 46100ac983..b2358ccaea 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md @@ -14,9 +14,9 @@ author: dansimp ms.localizationpriority: medium manager: dansimp audience: ITPro -ms.collection: -- m365-security-compliance -- m365initiative-defender-endpoint +ms.collection: +- m365-security-compliance +- m365initiative-defender-endpoint ms.topic: conceptual --- @@ -52,7 +52,7 @@ Download the onboarding package from Microsoft Defender Security Center: ![Microsoft Defender Security Center screenshot](images/atp-portal-onboarding-linux-2.png) -4. From a command prompt, verify that you have the file. +4. From a command prompt, verify that you have the file. ```bash ls -l @@ -225,9 +225,33 @@ If the product is not healthy, the exit code (which can be checked through `echo - 1 if the device isn't onboarded yet. - 3 if the connection to the daemon cannot be established. +## Testing + +Run a detection test to verify that the device is properly onboarded and reporting to the service. Perform the following steps on a newly onboarded device: + +- Ensure that real-time protection is enabled (denoted by a result of `1` from running the following command): + + ```bash + mdatp health --field real_time_protection_enabled + ``` + +- Open a Terminal window. Copy and execute the following command: + + ``` bash + curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt + ``` + +- The file should have been quarantined by Defender for Endpoint for Linux. Use the following command to list all the detected threats: + + ```bash + mdatp threat list + ``` + +If the the test file isn't detected and quarantined it might be labeled as a allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). + ## Log installation issues - For more information on how to find the automatically generated log that is created by the installer when an error occurs, see [Log installation issues](linux-resources.md#log-installation-issues). +For more information on how to find the automatically generated log that is created by the installer when an error occurs, see [Log installation issues](linux-resources.md#log-installation-issues). ## Operating system upgrades From fdb7bddab305812754fbe4f1c0ae407d07b70967 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Mon, 28 Dec 2020 22:46:32 +0000 Subject: [PATCH 002/206] Update windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/linux-install-with-puppet.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md index b2358ccaea..2be925e7de 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md @@ -247,7 +247,7 @@ Run a detection test to verify that the device is properly onboarded and reporti mdatp threat list ``` -If the the test file isn't detected and quarantined it might be labeled as a allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). +If the the test file isn't detected and quarantined, it might be labeled as an allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). ## Log installation issues From 808515fa6efecd072fe8c331e804fce10d5b8e95 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Mon, 28 Dec 2020 22:46:43 +0000 Subject: [PATCH 003/206] Update windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/linux-install-with-ansible.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md index 6643175264..daadffbab5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md @@ -270,7 +270,7 @@ Run a detection test to verify that the device is properly onboarded and reporti mdatp threat list ``` -If the the test file isn't detected and quarantined it might be labeled as a allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). +If the the test file isn't detected and quarantined, it might be labeled as an allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). ## Log installation issues From 2de18161ad371f989e2450f398c79b1b6051a69a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Mon, 28 Dec 2020 22:46:49 +0000 Subject: [PATCH 004/206] Update windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/linux-install-manually.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md index 3df93c4de6..c8f20a2db8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md @@ -328,7 +328,7 @@ Download the onboarding package from Microsoft Defender Security Center: mdatp threat list ``` - If the the test file isn't detected and quarantined it might be labeled as a allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). + If the the test file isn't detected and quarantined, it might be labeled as an allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). ## Log installation issues From 4410925f661d97fa1c6ea0936de0fdd56d1518c2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Tue, 29 Dec 2020 20:04:40 +0000 Subject: [PATCH 005/206] Update windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/linux-install-manually.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md index c8f20a2db8..8e6178d0be 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-manually.md @@ -328,7 +328,7 @@ Download the onboarding package from Microsoft Defender Security Center: mdatp threat list ``` - If the the test file isn't detected and quarantined, it might be labeled as an allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). + If the test file isn't detected and quarantined, it might be labeled as an allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). ## Log installation issues From 9bff7e4ad7836f2cda2508de084437fa4e3e2df2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Tue, 29 Dec 2020 20:04:50 +0000 Subject: [PATCH 006/206] Update windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/linux-install-with-ansible.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md index daadffbab5..ea03743538 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md @@ -270,7 +270,7 @@ Run a detection test to verify that the device is properly onboarded and reporti mdatp threat list ``` -If the the test file isn't detected and quarantined, it might be labeled as an allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). +If the test file isn't detected and quarantined, it might be labeled as an allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). ## Log installation issues From 87bfea1cfa9fdceada8116393e7ed217b08b40f6 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 4 Jan 2021 13:49:04 +0500 Subject: [PATCH 007/206] Addition of Value type supported Added information on value type supported and example. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8402 --- .../client-management/mdm/policy-csp-timelanguagesettings.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mdm/policy-csp-timelanguagesettings.md b/windows/client-management/mdm/policy-csp-timelanguagesettings.md index 8ef9349148..178d180438 100644 --- a/windows/client-management/mdm/policy-csp-timelanguagesettings.md +++ b/windows/client-management/mdm/policy-csp-timelanguagesettings.md @@ -78,7 +78,8 @@ Specifies the time zone to be applied to the device. This is the standard Window - +Value type is String. Supported values: +- Name of Standard Time Zone - e.g. Pacific Standard Time, Mountain Standard Time From 9ef776f4eb9f05fa7e5e3273f647ea4501626f43 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Mon, 4 Jan 2021 09:08:40 -0700 Subject: [PATCH 008/206] Update windows/client-management/mdm/policy-csp-timelanguagesettings.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../client-management/mdm/policy-csp-timelanguagesettings.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/client-management/mdm/policy-csp-timelanguagesettings.md b/windows/client-management/mdm/policy-csp-timelanguagesettings.md index 178d180438..8d2b01f4b1 100644 --- a/windows/client-management/mdm/policy-csp-timelanguagesettings.md +++ b/windows/client-management/mdm/policy-csp-timelanguagesettings.md @@ -79,7 +79,7 @@ Specifies the time zone to be applied to the device. This is the standard Window Value type is String. Supported values: -- Name of Standard Time Zone - e.g. Pacific Standard Time, Mountain Standard Time +- Name of Standard Time Zone - for example, Pacific Standard Time, Mountain Standard Time. @@ -102,4 +102,3 @@ Footnotes: - 8 - Available in Windows 10, version 2004. - From a35610bb0c9825a85744575c24e58110ff517f9a Mon Sep 17 00:00:00 2001 From: Karl Wester-Ebbinghaus <45657752+Karl-WE@users.noreply.github.com> Date: Sat, 23 Jan 2021 19:17:11 +0100 Subject: [PATCH 009/206] Update activate-using-active-directory-based-activation-client.md Adding Office to the supported list, as this greatly unknown based on my daily expierence as a consultant. Too many still use KMS. --- ...-using-active-directory-based-activation-client.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index e9c419383d..ff303620fa 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -29,6 +29,9 @@ ms.topic: article >- Windows Server 2012 >- Windows Server 2016 >- Windows Server 2019 +>- Office 2013* +>- Office 2016* +>- Office 2019* **Looking for retail activation?** @@ -97,6 +100,13 @@ When a reactivation event occurs, the client queries AD DS for the activation o 1. Activate your KMS host key by phone or online (Figure 15). ![Entering your KMS host key](../images/volumeactivationforwindows81-14.jpg) + + > [!NOTE] + > For activating a KMS Host Key (CSVLK) for Microsoft Office + for you need to install the version specific Office Volume license pack on the server where you have installed the Volume Activation Server Role. + - [Office 2013 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=35584) + - [Office 2016 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=49164) + - [Office 2019 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=57342) **Figure 15**. Choosing how to activate your product @@ -115,6 +125,7 @@ To verify your Active Directory-based activation configuration, complete the fol > [!NOTE] > If you are using both KMS and Active Directory-based activation, it may be difficult to see whether a client has been activated by KMS or by Active Directory-based activation. Consider disabling KMS during the test, or make sure that you are using a client computer that has not already been activated by KMS. The **slmgr.vbs /dlv** command also indicates whether KMS has been used. +> If you would like to see or mass change this, please consider to use [VAMT](https://docs.microsoft.com/en-us/windows/deployment/volume-activation/volume-activation-management-tool). ## See also From 7f505925ccf7c42859b5ab3d279441775f85610d Mon Sep 17 00:00:00 2001 From: Karl Wester-Ebbinghaus <45657752+Karl-WE@users.noreply.github.com> Date: Sat, 23 Jan 2021 19:29:54 +0100 Subject: [PATCH 010/206] Update activate-using-active-directory-based-activation-client.md corrections --- .../activate-using-active-directory-based-activation-client.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index ff303620fa..e32bd63891 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -102,8 +102,7 @@ When a reactivation event occurs, the client queries AD DS for the activation o ![Entering your KMS host key](../images/volumeactivationforwindows81-14.jpg) > [!NOTE] - > For activating a KMS Host Key (CSVLK) for Microsoft Office - for you need to install the version specific Office Volume license pack on the server where you have installed the Volume Activation Server Role. + > For activating a KMS Host Key (CSVLK) for Microsoft Office you need to install the version specific Office Volume license pack on the server where you have installed the Volume Activation Server Role. - [Office 2013 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=35584) - [Office 2016 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=49164) - [Office 2019 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=57342) From e2749573a64fc6019f690c162a1164a2f111b190 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Mon, 25 Jan 2021 15:26:33 +0200 Subject: [PATCH 011/206] update hybrid scenario naming and add link to description https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8703 --- .../create-wdac-policy-for-fully-managed-devices.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md index bec0d684e1..643145b624 100644 --- a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md +++ b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md @@ -42,7 +42,7 @@ Alice previously created a policy for the organization's lightly-managed devices Alice identifies the following key factors to arrive at the "circle-of-trust" for Lamna's fully-managed devices: - All clients are running Windows 10 version 1903 or above; -- All clients are managed by Microsoft Endpoint Manager (MEM) either with Configuration Manager (MEMCM) standalone or hybrid mode with Intune; +- All clients are managed by Microsoft Endpoint Manager (MEM) either with Configuration Manager (MEMCM) standalone or [Co-Managed](https://docs.microsoft.com/en-us/mem/configmgr/comanage/overview) with Intune; > [!NOTE] > Microsoft Endpoint Configuration Manager was previously known as System Center Configuration Manager (SCCM) From 5c6ecedbc990ac8c526a9fcac3ed78dcf6e71a3f Mon Sep 17 00:00:00 2001 From: Karl Wester-Ebbinghaus <45657752+Karl-WE@users.noreply.github.com> Date: Tue, 26 Jan 2021 19:06:37 +0100 Subject: [PATCH 012/206] Update windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../activate-using-active-directory-based-activation-client.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index e32bd63891..a8a20be029 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -102,7 +102,8 @@ When a reactivation event occurs, the client queries AD DS for the activation o ![Entering your KMS host key](../images/volumeactivationforwindows81-14.jpg) > [!NOTE] - > For activating a KMS Host Key (CSVLK) for Microsoft Office you need to install the version specific Office Volume license pack on the server where you have installed the Volume Activation Server Role. + > To activate a KMS Host Key (CSVLK) for Microsoft Office, you need to install the version specific Office Volume License Pack on the server where the Volume Activation Server Role is installed. + - [Office 2013 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=35584) - [Office 2016 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=49164) - [Office 2019 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=57342) From e36b07e7837124be85832e039c0da3aba058b132 Mon Sep 17 00:00:00 2001 From: Karl Wester-Ebbinghaus <45657752+Karl-WE@users.noreply.github.com> Date: Tue, 26 Jan 2021 19:06:52 +0100 Subject: [PATCH 013/206] Update windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../activate-using-active-directory-based-activation-client.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index a8a20be029..76f4881c7f 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -125,7 +125,7 @@ To verify your Active Directory-based activation configuration, complete the fol > [!NOTE] > If you are using both KMS and Active Directory-based activation, it may be difficult to see whether a client has been activated by KMS or by Active Directory-based activation. Consider disabling KMS during the test, or make sure that you are using a client computer that has not already been activated by KMS. The **slmgr.vbs /dlv** command also indicates whether KMS has been used. -> If you would like to see or mass change this, please consider to use [VAMT](https://docs.microsoft.com/en-us/windows/deployment/volume-activation/volume-activation-management-tool). +> To manage individual activations or apply multiple (mass) activations, please consider using [VAMT](https://docs.microsoft.com/en-us/windows/deployment/volume-activation/volume-activation-management-tool). ## See also From c2e7c0a3d5176dbe8a61a6a4aa7d76a11be6af10 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Tue, 26 Jan 2021 12:22:45 -0800 Subject: [PATCH 014/206] Update create-wdac-policy-for-fully-managed-devices.md --- .../create-wdac-policy-for-fully-managed-devices.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md index 643145b624..32fc319b88 100644 --- a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md +++ b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md @@ -15,7 +15,7 @@ author: jsuther1974 ms.reviewer: isbrahm ms.author: dansimp manager: dansimp -ms.date: 11/20/2019 +ms.date: 01/27/2021 ms.technology: mde --- @@ -42,7 +42,7 @@ Alice previously created a policy for the organization's lightly-managed devices Alice identifies the following key factors to arrive at the "circle-of-trust" for Lamna's fully-managed devices: - All clients are running Windows 10 version 1903 or above; -- All clients are managed by Microsoft Endpoint Manager (MEM) either with Configuration Manager (MEMCM) standalone or [Co-Managed](https://docs.microsoft.com/en-us/mem/configmgr/comanage/overview) with Intune; +- All clients are managed by Microsoft Endpoint Manager (MEM) either with Configuration Manager (MEMCM) standalone or [Co-Managed](https://docs.microsoft.com/mem/configmgr/comanage/overview) with Intune; > [!NOTE] > Microsoft Endpoint Configuration Manager was previously known as System Center Configuration Manager (SCCM) From 65f30854d51fe29295183dc082d0a0a9c39860af Mon Sep 17 00:00:00 2001 From: Steve DiAcetis Date: Wed, 27 Jan 2021 15:31:55 -0800 Subject: [PATCH 015/206] Update media-dynamic-update.md --- windows/deployment/update/media-dynamic-update.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index ea81420b8b..384a442054 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -64,6 +64,8 @@ Properly updating the installation media involves a large number of actions oper This table shows the correct sequence for applying the various tasks to the files. For example, the full sequence starts with adding the servicing stack update to WinRE (1) and concludes with adding the Dynamic Update for Setup to the new media (26). +**Note**: Starting in February 2021, the latest cumulative update (LCU) and servicing stack update (SSU) will be combined and distributed in the Microsoft Update Catalog as a new, combined cumulative update. For steps 1, 9 and 18 below that require the SSU for updating the installation media, the combined cumulative update should be used. + |Task |WinRE (winre.wim) |WinPE (boot.wim) |Operating system (install.wim) | New media | |---------|---------|---------|---------|------| |Add servicing stack Dynamic Update | 1 | 9 | 18 | From 134013a27dd81bfcff391c49a14b045ce7959c69 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Thu, 28 Jan 2021 09:04:40 +0530 Subject: [PATCH 016/206] made blod to some words , adjusted formats this is my own PR, i made some words are bold and removed symbol % . --- .../usmt/usmt-recognized-environment-variables.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/deployment/usmt/usmt-recognized-environment-variables.md b/windows/deployment/usmt/usmt-recognized-environment-variables.md index dfb923bbd4..59de92c6b0 100644 --- a/windows/deployment/usmt/usmt-recognized-environment-variables.md +++ b/windows/deployment/usmt/usmt-recognized-environment-variables.md @@ -101,7 +101,7 @@ You can use these variables within sections in the .xml files with `context=User

CSIDL_COMMON_STARTUP

-

The file-system directory that contains the programs that appear in the Startup folder for all users. A typical path in Windows XP is C:\Documents and Settings\All Users\Start Menu\Programs\Startup. A typical path is C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup.

+

The file-system directory that contains the programs that appear in the Startup folder for all users. A typical path in Windows XP is C:\Documents and Settings\All Users\Start Menu\Programs\Startup. A typical path is C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup.

CSIDL_COMMON_TEMPLATES

@@ -116,7 +116,7 @@ You can use these variables within sections in the .xml files with `context=User

Refers to the Appdata folder inside %DEFAULTUSERPROFILE%.

-

CSIDL_DEFAULT_LOCAL_APPDATA

+

CCSIDL_DEFAULT_LOCAL_APPDATA

Refers to the local Appdata folder inside %DEFAULTUSERPROFILE%.

@@ -319,7 +319,7 @@ You can use these variables in the .xml files within sections with `context=User

CSIDL_CONTACTS

-

This refers to the Contacts folder in %CSIDL_PROFILE%.

+

This refers to the Contacts folder in CSIDL_PROFILE.

CSIDL_CONTROLS

@@ -339,7 +339,7 @@ You can use these variables in the .xml files within sections with `context=User

CSIDL_DRIVES

-

The virtual folder representing My Computer that contains everything on the local computer: storage devices, printers, and Control Panel. The folder may also contain mapped network drives.

+

The virtual folder representing My Computer that contains everything on the local computer: storage devices, printers, and Control Panel. The folder may also contain mapped network drives.

CSIDL_FAVORITES

@@ -379,7 +379,7 @@ You can use these variables in the .xml files within sections with `context=User

CSIDL_NETHOOD

-

A file-system directory that contains the link objects that may exist in the My Network Places virtual folder. It is not the same as CSIDL_NETWORK, which represents the network namespace root. A typical path is C:\Users\Username\AppData\Roaming\Microsoft\Windows\Network Shortcuts.

+

A file-system directory that contains the link objects that may exist in the My Network Places virtual folder. It is not the same as CSIDL_NETWORK, which represents the network namespace root. A typical path is C:\Users\Username\AppData\Roaming\Microsoft\Windows\Network Shortcuts.

CSIDL_NETWORK

From ecb322dacfc851eec24c40f1ab6e925866eeffd3 Mon Sep 17 00:00:00 2001 From: Jaime Ondrusek Date: Thu, 28 Jan 2021 09:39:12 -0700 Subject: [PATCH 017/206] Update windows/deployment/update/media-dynamic-update.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/deployment/update/media-dynamic-update.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index 384a442054..33713148d1 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -64,7 +64,8 @@ Properly updating the installation media involves a large number of actions oper This table shows the correct sequence for applying the various tasks to the files. For example, the full sequence starts with adding the servicing stack update to WinRE (1) and concludes with adding the Dynamic Update for Setup to the new media (26). -**Note**: Starting in February 2021, the latest cumulative update (LCU) and servicing stack update (SSU) will be combined and distributed in the Microsoft Update Catalog as a new, combined cumulative update. For steps 1, 9 and 18 below that require the SSU for updating the installation media, the combined cumulative update should be used. +> [!NOTE] +> Starting in February 2021, the latest cumulative update (LCU) and servicing stack update (SSU) will be combined and distributed in the Microsoft Update Catalog as a new, combined cumulative update. For steps 1, 9 and 18 below that require the SSU for updating the installation media, the combined cumulative update should be used. |Task |WinRE (winre.wim) |WinPE (boot.wim) |Operating system (install.wim) | New media | |---------|---------|---------|---------|------| From 26b8798d0805258207373a870f73a9ea35985f23 Mon Sep 17 00:00:00 2001 From: Jaime Ondrusek Date: Thu, 28 Jan 2021 09:40:39 -0700 Subject: [PATCH 018/206] Update media-dynamic-update.md Corrections. --- windows/deployment/update/media-dynamic-update.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index 33713148d1..f88e592375 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -65,7 +65,7 @@ Properly updating the installation media involves a large number of actions oper This table shows the correct sequence for applying the various tasks to the files. For example, the full sequence starts with adding the servicing stack update to WinRE (1) and concludes with adding the Dynamic Update for Setup to the new media (26). > [!NOTE] -> Starting in February 2021, the latest cumulative update (LCU) and servicing stack update (SSU) will be combined and distributed in the Microsoft Update Catalog as a new, combined cumulative update. For steps 1, 9 and 18 below that require the SSU for updating the installation media, the combined cumulative update should be used. +> Starting in February 2021, the latest cumulative update and servicing stack update will be combined and distributed in the Microsoft Update Catalog as a new combined cumulative update. For Steps 1, 9, and 18 below that require the servicing stack update for updating the installation media, you should use the combined cumulative update. |Task |WinRE (winre.wim) |WinPE (boot.wim) |Operating system (install.wim) | New media | |---------|---------|---------|---------|------| From 47200682bcd68d8d067996fb3935664eda96e65c Mon Sep 17 00:00:00 2001 From: Steve DiAcetis Date: Mon, 1 Feb 2021 10:21:48 -0800 Subject: [PATCH 019/206] Changes to describe the Feb 2021 changes to SSU and LCU. Changes to describe the Feb 2021 changes to SSU and LCU. --- windows/deployment/update/media-dynamic-update.md | 2 +- windows/deployment/update/servicing-stack-updates.md | 5 ++++- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index f88e592375..6b8f00ddcd 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -65,7 +65,7 @@ Properly updating the installation media involves a large number of actions oper This table shows the correct sequence for applying the various tasks to the files. For example, the full sequence starts with adding the servicing stack update to WinRE (1) and concludes with adding the Dynamic Update for Setup to the new media (26). > [!NOTE] -> Starting in February 2021, the latest cumulative update and servicing stack update will be combined and distributed in the Microsoft Update Catalog as a new combined cumulative update. For Steps 1, 9, and 18 below that require the servicing stack update for updating the installation media, you should use the combined cumulative update. +> Starting in February 2021, the latest cumulative update and servicing stack update will be combined and distributed in the Microsoft Update Catalog as a new combined cumulative update. For Steps 1, 9, and 18 below that require the servicing stack update for updating the installation media, you should use the combined cumulative update. For more information on the combined cumulative update, see [Servicing stack updates](https://docs.microsoft.com/windows/deployment/update/servicing-stack-updates). |Task |WinRE (winre.wim) |WinPE (boot.wim) |Operating system (install.wim) | New media | |---------|---------|---------|---------|------| diff --git a/windows/deployment/update/servicing-stack-updates.md b/windows/deployment/update/servicing-stack-updates.md index e2b6404d14..c51a9ff9fb 100644 --- a/windows/deployment/update/servicing-stack-updates.md +++ b/windows/deployment/update/servicing-stack-updates.md @@ -44,7 +44,6 @@ Both Windows 10 and Windows Server use the cumulative update mechanism, in which Servicing stack updates must ship separately from the cumulative updates because they modify the component that installs Windows updates. The servicing stack is released separately because the servicing stack itself requires an update. For example, the cumulative update [KB4284880](https://support.microsoft.com/help/4284880/windows-10-update-kb4284880) requires the [May 17, 2018 servicing stack update](https://support.microsoft.com/help/4132216), which includes updates to Windows Update. - ## Is there any special guidance? Microsoft recommends you install the latest servicing stack updates for your operating system before installing the latest cumulative update. @@ -58,3 +57,7 @@ Typically, the improvements are reliability and performance improvements that do * Servicing stack update releases are specific to the operating system version (build number), much like quality updates. * Search to install latest available [Servicing stack update for Windows 10](https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001). * Once a servicing stack update is installed, it cannot be removed or uninstalled from the machine. + + +## Simplifying on-premises deployment of servicing stack updates +With the Windows Update experience, servicing stack updates and cumulative updates are deployed together to the device. The update stack automatically orchestrates the installation, so both are applied correctly. Starting in February 2021, the cumulative update will include the latest servicing stack updates, to provide a single cumulative update payload to both Windows Server Update Services (WSUS) and Microsoft Catalog. If you use an endpoint management tool backed by WSUS, such as the Configuration Manager, you will only have to select and deploy the monthly cumulative update. The latest servicing stack updates will automatically be applied correctly. Release notes and file information for cumulative updates, including those related to the servicing stack, will be in a single KB article. The combined monthly cumulative update will be available on Windows 10, version 2004 and higher starting with the 2021 2C release, KB4601382. From 0062b68c57db4af372e8c6f1fbad0e51002a98a0 Mon Sep 17 00:00:00 2001 From: Steve DiAcetis Date: Mon, 1 Feb 2021 11:31:19 -0800 Subject: [PATCH 020/206] Updates to support UnoPackage Small tweaks based on feedback --- windows/deployment/update/media-dynamic-update.md | 6 +++--- windows/deployment/update/servicing-stack-updates.md | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/deployment/update/media-dynamic-update.md b/windows/deployment/update/media-dynamic-update.md index 6b8f00ddcd..74fc796879 100644 --- a/windows/deployment/update/media-dynamic-update.md +++ b/windows/deployment/update/media-dynamic-update.md @@ -64,9 +64,6 @@ Properly updating the installation media involves a large number of actions oper This table shows the correct sequence for applying the various tasks to the files. For example, the full sequence starts with adding the servicing stack update to WinRE (1) and concludes with adding the Dynamic Update for Setup to the new media (26). -> [!NOTE] -> Starting in February 2021, the latest cumulative update and servicing stack update will be combined and distributed in the Microsoft Update Catalog as a new combined cumulative update. For Steps 1, 9, and 18 below that require the servicing stack update for updating the installation media, you should use the combined cumulative update. For more information on the combined cumulative update, see [Servicing stack updates](https://docs.microsoft.com/windows/deployment/update/servicing-stack-updates). - |Task |WinRE (winre.wim) |WinPE (boot.wim) |Operating system (install.wim) | New media | |---------|---------|---------|---------|------| |Add servicing stack Dynamic Update | 1 | 9 | 18 | @@ -84,6 +81,9 @@ This table shows the correct sequence for applying the various tasks to the file |Add .NET and .NET cumulative updates | | | 24 | |Export image | 8 | 17 | 25 | +> [!NOTE] +> Starting in February 2021, the latest cumulative update and servicing stack update will be combined and distributed in the Microsoft Update Catalog as a new combined cumulative update. For Steps 1, 9, and 18 that require the servicing stack update for updating the installation media, you should use the combined cumulative update. For more information on the combined cumulative update, see [Servicing stack updates](https://docs.microsoft.com/windows/deployment/update/servicing-stack-updates). + ### Multiple Windows editions The main operating system file (install.wim) contains multiple editions of Windows 10. It’s possible that only an update for a given edition is required to deploy it, based on the index. Or, it might be that all editions need an update. Further, ensure that languages are installed before Features on Demand, and the latest cumulative update is always applied last. diff --git a/windows/deployment/update/servicing-stack-updates.md b/windows/deployment/update/servicing-stack-updates.md index c51a9ff9fb..f79ad98939 100644 --- a/windows/deployment/update/servicing-stack-updates.md +++ b/windows/deployment/update/servicing-stack-updates.md @@ -60,4 +60,4 @@ Typically, the improvements are reliability and performance improvements that do ## Simplifying on-premises deployment of servicing stack updates -With the Windows Update experience, servicing stack updates and cumulative updates are deployed together to the device. The update stack automatically orchestrates the installation, so both are applied correctly. Starting in February 2021, the cumulative update will include the latest servicing stack updates, to provide a single cumulative update payload to both Windows Server Update Services (WSUS) and Microsoft Catalog. If you use an endpoint management tool backed by WSUS, such as the Configuration Manager, you will only have to select and deploy the monthly cumulative update. The latest servicing stack updates will automatically be applied correctly. Release notes and file information for cumulative updates, including those related to the servicing stack, will be in a single KB article. The combined monthly cumulative update will be available on Windows 10, version 2004 and higher starting with the 2021 2C release, KB4601382. +With the Windows Update experience, servicing stack updates and cumulative updates are deployed together to the device. The update stack automatically orchestrates the installation, so both are applied correctly. Starting in February 2021, the cumulative update will include the latest servicing stack updates, to provide a single cumulative update payload to both Windows Server Update Services (WSUS) and Microsoft Catalog. If you use an endpoint management tool backed by WSUS, such as Configuration Manager, you will only have to select and deploy the monthly cumulative update. The latest servicing stack updates will automatically be applied correctly. Release notes and file information for cumulative updates, including those related to the servicing stack, will be in a single KB article. The combined monthly cumulative update will be available on Windows 10, version 2004 and higher starting with the 2021 2C release, KB4601382. From f3d2a3398369d671d0755949b82bf87823e7411c Mon Sep 17 00:00:00 2001 From: Steve DiAcetis Date: Mon, 1 Feb 2021 16:48:41 -0800 Subject: [PATCH 021/206] Update servicing-stack-updates.md --- windows/deployment/update/servicing-stack-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/servicing-stack-updates.md b/windows/deployment/update/servicing-stack-updates.md index f79ad98939..6ab6a9595d 100644 --- a/windows/deployment/update/servicing-stack-updates.md +++ b/windows/deployment/update/servicing-stack-updates.md @@ -60,4 +60,4 @@ Typically, the improvements are reliability and performance improvements that do ## Simplifying on-premises deployment of servicing stack updates -With the Windows Update experience, servicing stack updates and cumulative updates are deployed together to the device. The update stack automatically orchestrates the installation, so both are applied correctly. Starting in February 2021, the cumulative update will include the latest servicing stack updates, to provide a single cumulative update payload to both Windows Server Update Services (WSUS) and Microsoft Catalog. If you use an endpoint management tool backed by WSUS, such as Configuration Manager, you will only have to select and deploy the monthly cumulative update. The latest servicing stack updates will automatically be applied correctly. Release notes and file information for cumulative updates, including those related to the servicing stack, will be in a single KB article. The combined monthly cumulative update will be available on Windows 10, version 2004 and higher starting with the 2021 2C release, KB4601382. +With the Windows Update experience, servicing stack updates and cumulative updates are deployed together to the device. The update stack automatically orchestrates the installation, so both are applied correctly. Starting in February 2021, the cumulative update will include the latest servicing stack updates, to provide a single cumulative update payload to both Windows Server Update Services (WSUS) and Microsoft Catalog. If you use an endpoint management tool backed by WSUS, such as Configuration Manager, you will only have to select and deploy the monthly cumulative update. The latest servicing stack updates will automatically be applied correctly. Release notes and file information for cumulative updates, including those related to the servicing stack, will be in a single KB article. The combined monthly cumulative update will be available on Windows 10, version 2004 and later starting with the 2021 2C release, KB4601382. From 198032fd9f6c339e7ae4d6963dca655db6c033f7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Fri, 5 Feb 2021 15:19:08 +0000 Subject: [PATCH 022/206] Update windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/linux-install-with-ansible.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md index 4bb6d76a83..8b2e7da1ca 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-ansible.md @@ -261,7 +261,7 @@ Run a detection test to verify that the device is properly onboarded and reporti - Open a Terminal window. Copy and execute the following command: - ``` bash + ```bash curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt ``` From 95888c61c75699a5290a6193f406f9a2311e4e6f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Fri, 5 Feb 2021 15:19:14 +0000 Subject: [PATCH 023/206] Update windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/linux-install-with-puppet.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md index a80cb41d24..292caa4194 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md @@ -238,7 +238,7 @@ Run a detection test to verify that the device is properly onboarded and reporti - Open a Terminal window. Copy and execute the following command: - ``` bash + ```bash curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt ``` From 1490d9ba4e735783ebc225a74a9fcc2f98a5762b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20Sj=C3=B6gren?= Date: Fri, 5 Feb 2021 20:23:14 +0000 Subject: [PATCH 024/206] Update windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../microsoft-defender-atp/linux-install-with-puppet.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md index 292caa4194..260bdb6f66 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-install-with-puppet.md @@ -248,7 +248,7 @@ Run a detection test to verify that the device is properly onboarded and reporti mdatp threat list ``` -If the the test file isn't detected and quarantined, it might be labeled as an allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). +If the test file isn't detected and quarantined, it might be labeled as an allowed threat. See the [allowedThreats](linux-preferences.md#allowed-threats) option and the structure of the configuration profile at [Set preferences for Microsoft Defender for Endpoint for Linux](linux-preferences.md). ## Log installation issues From 3381427fbc2601a6f644c7f12a8997745aada5a8 Mon Sep 17 00:00:00 2001 From: Bill Mcilhargey <19168174+computeronix@users.noreply.github.com> Date: Mon, 8 Feb 2021 12:04:23 -0500 Subject: [PATCH 025/206] licensing note - per device added a note in requirements about device based licensing please review and see if this is the right spot for this and the right verbiage? --- windows/deployment/windows-10-subscription-activation.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/deployment/windows-10-subscription-activation.md b/windows/deployment/windows-10-subscription-activation.md index 84fa27310d..123f4f81af 100644 --- a/windows/deployment/windows-10-subscription-activation.md +++ b/windows/deployment/windows-10-subscription-activation.md @@ -88,6 +88,7 @@ For Microsoft customers with Enterprise Agreements (EA) or Microsoft Products & - Windows 10 (Pro or Enterprise) version 1703 or later installed on the devices to be upgraded. - Azure Active Directory (Azure AD) available for identity management. - Devices must be Azure AD-joined or Hybrid Azure AD joined. Workgroup-joined or Azure AD registered devices are not supported. +- Windows 10 per user licensing, not available for per device based licensing. For Microsoft customers that do not have EA or MPSA, you can obtain Windows 10 Enterprise E3/E5 or A3/A5 through a cloud solution provider (CSP). Identity management and device requirements are the same when you use CSP to manage licenses, with the exception that Windows 10 Enterprise E3 is also available through CSP to devices running Windows 10, version 1607. For more information about obtaining Windows 10 Enterprise E3 through your CSP, see [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md). From a53cad8b8775523d6cf9faed1c78d8cb7d93e7f9 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Wed, 10 Feb 2021 10:45:14 +0200 Subject: [PATCH 026/206] Update windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../create-wdac-policy-for-fully-managed-devices.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md index 32fc319b88..b7803dc3b8 100644 --- a/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md +++ b/windows/security/threat-protection/windows-defender-application-control/create-wdac-policy-for-fully-managed-devices.md @@ -42,7 +42,7 @@ Alice previously created a policy for the organization's lightly-managed devices Alice identifies the following key factors to arrive at the "circle-of-trust" for Lamna's fully-managed devices: - All clients are running Windows 10 version 1903 or above; -- All clients are managed by Microsoft Endpoint Manager (MEM) either with Configuration Manager (MEMCM) standalone or [Co-Managed](https://docs.microsoft.com/mem/configmgr/comanage/overview) with Intune; +- All clients are managed by Microsoft Endpoint Manager (MEM) either with Configuration Manager (MEMCM) standalone or [co-managed](https://docs.microsoft.com/mem/configmgr/comanage/overview) with Intune; > [!NOTE] > Microsoft Endpoint Configuration Manager was previously known as System Center Configuration Manager (SCCM) From 8ed56635b105d2b8b00015dd399f74dd71bdf725 Mon Sep 17 00:00:00 2001 From: Karl Wester-Ebbinghaus <45657752+Karl-WE@users.noreply.github.com> Date: Wed, 10 Feb 2021 19:30:13 +0100 Subject: [PATCH 027/206] Update windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../activate-using-active-directory-based-activation-client.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index 76f4881c7f..c1dae11e8f 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -102,7 +102,8 @@ When a reactivation event occurs, the client queries AD DS for the activation o ![Entering your KMS host key](../images/volumeactivationforwindows81-14.jpg) > [!NOTE] - > To activate a KMS Host Key (CSVLK) for Microsoft Office, you need to install the version specific Office Volume License Pack on the server where the Volume Activation Server Role is installed. + > To activate a KMS Host Key (CSVLK) for Microsoft Office, you need to install the version-specific Office Volume License Pack on the server where the Volume Activation Server Role is installed. + - [Office 2013 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=35584) - [Office 2016 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=49164) From f7ae476d1bdf800eb2b543e1117ec4d291a72104 Mon Sep 17 00:00:00 2001 From: Karl Wester-Ebbinghaus <45657752+Karl-WE@users.noreply.github.com> Date: Wed, 10 Feb 2021 19:30:38 +0100 Subject: [PATCH 028/206] Update windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../activate-using-active-directory-based-activation-client.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index c1dae11e8f..c472142ab1 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -105,7 +105,8 @@ When a reactivation event occurs, the client queries AD DS for the activation o > To activate a KMS Host Key (CSVLK) for Microsoft Office, you need to install the version-specific Office Volume License Pack on the server where the Volume Activation Server Role is installed. - - [Office 2013 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=35584) + - [Office 2013 VL pack](https://www.microsoft.com/download/details.aspx?id=35584) + - [Office 2016 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=49164) - [Office 2019 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=57342) From 9b7c051fce99a9933280d920ea9a0adc9a48979a Mon Sep 17 00:00:00 2001 From: Karl Wester-Ebbinghaus <45657752+Karl-WE@users.noreply.github.com> Date: Wed, 10 Feb 2021 19:30:46 +0100 Subject: [PATCH 029/206] Update windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../activate-using-active-directory-based-activation-client.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index c472142ab1..3ec15b4f4b 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -107,7 +107,8 @@ When a reactivation event occurs, the client queries AD DS for the activation o - [Office 2013 VL pack](https://www.microsoft.com/download/details.aspx?id=35584) - - [Office 2016 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=49164) + - [Office 2016 VL pack](https://www.microsoft.com/download/details.aspx?id=49164) + - [Office 2019 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=57342) **Figure 15**. Choosing how to activate your product From f9df2cc67de6f9cd539501fd08c03ecd6bbb64ff Mon Sep 17 00:00:00 2001 From: Karl Wester-Ebbinghaus <45657752+Karl-WE@users.noreply.github.com> Date: Wed, 10 Feb 2021 19:31:02 +0100 Subject: [PATCH 030/206] Update windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../activate-using-active-directory-based-activation-client.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index 3ec15b4f4b..f6bb4acffb 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -128,7 +128,8 @@ To verify your Active Directory-based activation configuration, complete the fol > [!NOTE] > If you are using both KMS and Active Directory-based activation, it may be difficult to see whether a client has been activated by KMS or by Active Directory-based activation. Consider disabling KMS during the test, or make sure that you are using a client computer that has not already been activated by KMS. The **slmgr.vbs /dlv** command also indicates whether KMS has been used. -> To manage individual activations or apply multiple (mass) activations, please consider using [VAMT](https://docs.microsoft.com/en-us/windows/deployment/volume-activation/volume-activation-management-tool). +> To manage individual activations or apply multiple (mass) activations, please consider using the [VAMT](https://docs.microsoft.com/windows/deployment/volume-activation/volume-activation-management-tool). + ## See also From 22de11d95fb5d326d0ba3dafcc6f13927a1964d9 Mon Sep 17 00:00:00 2001 From: Steve DiAcetis Date: Wed, 10 Feb 2021 10:32:55 -0800 Subject: [PATCH 031/206] Update servicing-stack-updates.md --- windows/deployment/update/servicing-stack-updates.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/deployment/update/servicing-stack-updates.md b/windows/deployment/update/servicing-stack-updates.md index 6ab6a9595d..13487eef17 100644 --- a/windows/deployment/update/servicing-stack-updates.md +++ b/windows/deployment/update/servicing-stack-updates.md @@ -29,8 +29,6 @@ Servicing stack updates provide fixes to the servicing stack, the component that Servicing stack updates improve the reliability of the update process to mitigate potential issues while installing the latest quality updates and feature updates. If you don't install the latest servicing stack update, there's a risk that your device can't be updated with the latest Microsoft security fixes. -For information about some changes to servicing stack updates, see [Simplifing Deployment of Servicing Stack Updates](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/simplifying-on-premises-deployment-of-servicing-stack-updates/ba-p/1646039) on the Windows IT Pro blog. - ## When are they released? Servicing stack update are released depending on new issues or vulnerabilities. In rare occasions a servicing stack update may need to be released on demand to address an issue impacting systems installing the monthly security update. Starting in November 2018 new servicing stack updates will be classified as "Security" with a severity rating of "Critical." From 5231e7592100c363180bbd5976a0bf0706600f7b Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Thu, 11 Feb 2021 13:59:53 +0530 Subject: [PATCH 032/206] Update windows/deployment/usmt/usmt-recognized-environment-variables.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../deployment/usmt/usmt-recognized-environment-variables.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/deployment/usmt/usmt-recognized-environment-variables.md b/windows/deployment/usmt/usmt-recognized-environment-variables.md index 59de92c6b0..496e80bf84 100644 --- a/windows/deployment/usmt/usmt-recognized-environment-variables.md +++ b/windows/deployment/usmt/usmt-recognized-environment-variables.md @@ -319,7 +319,7 @@ You can use these variables in the .xml files within sections with `context=User

CSIDL_CONTACTS

-

This refers to the Contacts folder in CSIDL_PROFILE.

+

This refers to the Contacts folder in %CSIDL_PROFILE%.

CSIDL_CONTROLS

@@ -468,4 +468,3 @@ You can use these variables in the .xml files within sections with `context=User - From 96037c45cd156a6b54e0405e8ef5538542362406 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Thu, 11 Feb 2021 14:01:03 +0530 Subject: [PATCH 033/206] Update windows/deployment/usmt/usmt-recognized-environment-variables.md accepted Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- .../deployment/usmt/usmt-recognized-environment-variables.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/deployment/usmt/usmt-recognized-environment-variables.md b/windows/deployment/usmt/usmt-recognized-environment-variables.md index 496e80bf84..4ca2874fab 100644 --- a/windows/deployment/usmt/usmt-recognized-environment-variables.md +++ b/windows/deployment/usmt/usmt-recognized-environment-variables.md @@ -116,7 +116,7 @@ You can use these variables within sections in the .xml files with `context=User

Refers to the Appdata folder inside %DEFAULTUSERPROFILE%.

-

CCSIDL_DEFAULT_LOCAL_APPDATA

+

CSIDL_DEFAULT_LOCAL_APPDATA

Refers to the local Appdata folder inside %DEFAULTUSERPROFILE%.

@@ -467,4 +467,3 @@ You can use these variables in the .xml files within sections with `context=User - From 15770237c9fc41c388259d9b19cfd557869bf34b Mon Sep 17 00:00:00 2001 From: Karl Wester-Ebbinghaus <45657752+Karl-WE@users.noreply.github.com> Date: Thu, 11 Feb 2021 10:33:26 +0100 Subject: [PATCH 034/206] Update windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../activate-using-active-directory-based-activation-client.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md index f6bb4acffb..1d42b159e5 100644 --- a/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md +++ b/windows/deployment/volume-activation/activate-using-active-directory-based-activation-client.md @@ -109,7 +109,8 @@ When a reactivation event occurs, the client queries AD DS for the activation o - [Office 2016 VL pack](https://www.microsoft.com/download/details.aspx?id=49164) - - [Office 2019 VL pack](https://www.microsoft.com/en-us/download/details.aspx?id=57342) + - [Office 2019 VL pack](https://www.microsoft.com/download/details.aspx?id=57342) + **Figure 15**. Choosing how to activate your product From 7650d404ec22f0a9ac7b01491b76baa616467c3f Mon Sep 17 00:00:00 2001 From: Apu Dutta Date: Fri, 12 Feb 2021 10:27:42 -0800 Subject: [PATCH 035/206] Update EUICC CSP with latest changes The DiscoveryServer nodes were added for Cobalt. Update the CSP page to reflect these changes. Also added missing nodes from this structure - PPR1Allowed and PPR1AlreadySet --- windows/client-management/mdm/euiccs-csp.md | 30 +++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/windows/client-management/mdm/euiccs-csp.md b/windows/client-management/mdm/euiccs-csp.md index 1f42e3e43d..cf03244fdf 100644 --- a/windows/client-management/mdm/euiccs-csp.md +++ b/windows/client-management/mdm/euiccs-csp.md @@ -38,6 +38,36 @@ Required. Indicates whether this eUICC is physically present and active. Updated Supported operation is Get. Value type is boolean. +**_eUICC_/PPR1Allowed** +Required. Indicates whether the download of a profile with PPR1 is allowed. If the eUICC already has a profile (regardless of its origin and policy rules associated with it), then the download of a profile with PPR1 is not allowed. + +Supported operation is Get. Value type is boolean. + +**_eUICC_/PPR1AlreadySet** +Required. Indicates whether the eUICC has already a profile with PPR1. + +Supported operation is Get. Value type is boolean. + +**_eUICC_/DownloadServers** +Interior node. Represents default SM-DP+ discovery requests. + +Supported operation is Get. + +**_eUICC_/DownloadServers/_ServerName_** +Interior node. Optional. Node representing the discovery operation for a server name. The node name is the fully qualified domain name of the SM-DP+ server that will be used for profile discovery. Creation of this subtree triggers a discovery request. + +Supported operations are Add, Get, and Delete. + +**_eUICC_/DownloadServers/_ServerName_/DiscoveryState** +Required. Current state of the discovery operation for the parent ServerName (Requested = 1, Executing = 2, Completed = 3, Failed = 4). Queried by the CSP and only updated by the LPA. + +Supported operation is Get. Value type is integer. Default value is 1. + +**_eUICC_/DownloadServers/_ServerName_/AutoEnable** +Required. Indicates whether the discovered profile must be enabled automatically after install. This must be set by the MDM when the ServerName subtree is created + +Supported operations are Add, Get, and Replace. Value type is bool. + **_eUICC_/Profiles** Interior node. Required. Represents all enterprise-owned profiles. From 87062dbbbf3a9630ea1cb5a7f9b4daadf5797b71 Mon Sep 17 00:00:00 2001 From: Apu Dutta Date: Fri, 12 Feb 2021 10:31:33 -0800 Subject: [PATCH 036/206] Update euiccs-ddf-file.md --- .../client-management/mdm/euiccs-ddf-file.md | 206 +++++++++++++++++- 1 file changed, 203 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/euiccs-ddf-file.md b/windows/client-management/mdm/euiccs-ddf-file.md index 38bb8e5f6f..24adff5b0b 100644 --- a/windows/client-management/mdm/euiccs-ddf-file.md +++ b/windows/client-management/mdm/euiccs-ddf-file.md @@ -49,7 +49,7 @@ The XML below if for Windows 10, version 1803. - com.microsoft/1.1/MDM/eUICCs + com.microsoft/1.2/MDM/eUICCs @@ -58,7 +58,7 @@ The XML below if for Windows 10, version 1803. - Represents information associated with an eUICC. There is one subtree for each known eUICC, created by the Local Profile Assistant (LPA) when the eUICC is first seen. The node name is meaningful only to the LPA (which associates it with an eUICC ID (EID) in an implementation-specific manner, e.g., this could be a SHA-256 hash of the EID). The node name "Default" represents the currently active eUICC. + Represents information associated with an eUICC. There is one subtree for each known eUICC, created by the Local Profile Assistant (LPA) when the eUICC is first seen. The node name is the eUICC ID (EID). The node name "Default" represents the currently active eUICC. @@ -79,7 +79,7 @@ The XML below if for Windows 10, version 1803. - Identifies an eUICC in an implementation-specific manner, e.g., this could be a SHA-256 hash of the EID. + The EID. @@ -118,6 +118,139 @@ The XML below if for Windows 10, version 1803. + + PPR1Allowed + + + + + Indicates whether the download of a profile with PPR1 is allowed. If the eUICC has already a profile (regardless of its origin and policy rules associated with it), then the download of a profile with PPR1 is not allowed. + + + + + + + + + + + text/plain + + + + + PPR1AlreadySet + + + + + Indicates whether the eUICC has already a profile with PPR1. + + + + + + + + + + + text/plain + + + + + DownloadServers + + + + + Represents default SM-DP+ discovery requests. + + + + + + + + + + + + + + + + + + + + + + + Node representing the discovery operation for a server name. The node name is the fully qualified domain name of the SM-DP+ server that will be used for profile discovery. Creation of this subtree triggers a discovery request. + + + + + + + + + + ServerName + + + + + + DiscoveryState + + + + + 1 + Current state of the discovery operation for the parent ServerName (Requested = 1, Executing = 2, Completed = 3, Failed = 4). Queried by the CSP and only updated by the LPA. + + + + + + + + + + + text/plain + + + + + AutoEnable + + + + + + + Indicates whether the discovered profile must be enabled automatically after install. This must be set by the MDM when the ServerName subtree is created. + + + + + + + + + + + text/plain + + + + + Profiles @@ -145,6 +278,7 @@ The XML below if for Windows 10, version 1803. + Node representing an enterprise-owned eUICC profile. The node name is the ICCID of the profile (which is a unique identifier). Creation of this subtree triggers an AddProfile request by the LPA (which installs the profile on the eUICC). Removal of this subtree triggers the LPA to delete the profile (if resident on the eUICC). @@ -167,6 +301,7 @@ The XML below if for Windows 10, version 1803. + Fully qualified domain name of the SM-DP+ that can download this profile. Must be set by the MDM when the ICCID subtree is created. @@ -192,6 +327,7 @@ The XML below if for Windows 10, version 1803. + Matching ID (activation code token) for profile download. Must be set by the MDM when the ICCID subtree is created. @@ -256,6 +392,70 @@ The XML below if for Windows 10, version 1803. + + PPR1Set + + + + + This profile policy rule indicates whether disabling of this profile is not allowed (true if not allowed, false otherwise). + + + + + + + + + + + text/plain + + + + + PPR2Set + + + + + This profile policy rule indicates whether deletion of this profile is not allowed (true if not allowed, false otherwise). + + + + + + + + + + + text/plain + + + + + ErrorDetail + + + + + 0 + Detailed error if the profile download and install procedure failed (None = 0, CardGeneralFailure = 1, ConfirmationCodeMissing = 3, ForbiddenByPolicy = 5, InvalidMatchingId = 6, NoEligibleProfileForThisDevice = 7, NotEnoughSpaceOnCard = 8, ProfileEidMismatch = 10, ProfileNotAvailableForNewBinding = 11, ProfileNotReleasedByOperator = 12, RemoteServerGeneralFailure = 13, RemoteServerUnreachable = 14). + + + + + + + + + + + text/plain + + + From f48a3eba273e4bf2cf86a407df0f677c13f7faf2 Mon Sep 17 00:00:00 2001 From: Warren Williams Date: Fri, 12 Feb 2021 16:19:59 -0600 Subject: [PATCH 037/206] Update mandatory-user-profile.md --- windows/client-management/mandatory-user-profile.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index e77a3132db..5b40fc92cb 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -94,6 +94,8 @@ First, you create a default user profile with the customizations that you want, 5. The sysprep process reboots the PC and starts at the first-run experience screen. Complete the set up, and then sign in to the computer using an account that has local administrator privileges. 6. Right-click Start, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. + +Starting in Windows 10 version (2004) Open the Settings app and click on Advanced system settings 7. In **User Profiles**, click **Default Profile**, and then click **Copy To**. @@ -103,12 +105,13 @@ First, you create a default user profile with the customizations that you want, ![Example of UI](images/copy-to-change.png) -9. In **Select User or Group**, in the **Enter the object name to select** field, type `everyone`, click **Check Names**, and then click **OK**. +9. In **Select User or Group**, in the **Enter the object name to select** field, type `everyone` or the group of users that the profile will be assigned to, click **Check Names**, and then click **OK**. 10. In **Copy To**, in the **Copy profile to** field, enter the path and folder name where you want to store the mandatory profile. The folder name must use the correct [extension](#extension) for the operating system version. For example, the folder name must end with “.v6” to identify it as a user profile folder for Windows 10, version 1607. - If the device is joined to the domain and you are signed in with an account that has permissions to write to a shared folder on the network, you can enter the shared folder path. - If the device is not joined to the domain, you can save the profile locally and then copy it to the shared folder location. + - Optionally you can check the box “Mandatory profile”. This step is not required but will set permissions that are more restrictive and it is recommend to do so ![Example of UI](images/copy-to-path.png) From 35e5e3714a2151d5de5165309b8566414750c8c7 Mon Sep 17 00:00:00 2001 From: Warren Williams Date: Fri, 12 Feb 2021 18:02:45 -0600 Subject: [PATCH 038/206] Update mandatory-user-profile.md We need to also update screen shots with the control panel applet that has the check box. --- windows/client-management/mandatory-user-profile.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index 211519bdec..f082708dbb 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -84,6 +84,8 @@ First, you create a default user profile with the customizations that you want, 1. Right-click Start, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. +Starting in Windows 10 version (2004) Open the Settings app and click on Advanced system settings + 1. In **User Profiles**, click **Default Profile**, and then click **Copy To**. ![Example of UI](images/copy-to.png) @@ -92,12 +94,13 @@ First, you create a default user profile with the customizations that you want, ![Example of UI](images/copy-to-change.png) -1. In **Select User or Group**, in the **Enter the object name to select** field, type `everyone`, click **Check Names**, and then click **OK**. +1. In **Select User or Group**, in the **Enter the object name to select** field, type `everyone` or the group of users that the profile will be assigned to, click **Check Names**, and then click **OK**. 1. In **Copy To**, in the **Copy profile to** field, enter the path and folder name where you want to store the mandatory profile. The folder name must use the correct [extension](#profile-extension-for-each-windows-version) for the operating system version. For example, the folder name must end with ".v6" to identify it as a user profile folder for Windows 10, version 1607. - If the device is joined to the domain and you are signed in with an account that has permissions to write to a shared folder on the network, you can enter the shared folder path. - If the device is not joined to the domain, you can save the profile locally and then copy it to the shared folder location. + - Optionally you can check the box “Mandatory profile”. This step is not required but will set permissions that are more restrictive and it is recommend to do so ![Example of UI](images/copy-to-path.png) From 4530c9c4880b73bf28fb36fd49ad17eee1b24655 Mon Sep 17 00:00:00 2001 From: Andrei-George Stoica Date: Wed, 17 Feb 2021 09:25:59 +0200 Subject: [PATCH 039/206] Updating PS script link after gallery.technet removal Also adding download link for the cab file directly. --- .../security/threat-protection/mbsa-removal-and-guidance.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/mbsa-removal-and-guidance.md b/windows/security/threat-protection/mbsa-removal-and-guidance.md index 09dc088c59..8ed4a703ef 100644 --- a/windows/security/threat-protection/mbsa-removal-and-guidance.md +++ b/windows/security/threat-protection/mbsa-removal-and-guidance.md @@ -25,14 +25,14 @@ MBSA was largely used in situations where neither Microsoft Update nor a local W A script can help you with an alternative to MBSA’s patch-compliance checking: - [Using WUA to Scan for Updates Offline](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline), which includes a sample .vbs script. -For a PowerShell alternative, see [Using WUA to Scan for Updates Offline with PowerShell](https://gallery.technet.microsoft.com/Using-WUA-to-Scan-for-f7e5e0be). +For a PowerShell alternative, see [Using WUA to Scan for Updates Offline with PowerShell](https://github.com/andreiztm/thedeploymentguy/blob/main/WUAOfflineScan/Scan-UpdatesOffline.ps1). For example: [![VBS script](images/vbs-example.png)](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline) -[![PowerShell script](images/powershell-example.png)](https://gallery.technet.microsoft.com/Using-WUA-to-Scan-for-f7e5e0be) +[![PowerShell script](images/powershell-example.png)](https://github.com/andreiztm/thedeploymentguy/blob/main/WUAOfflineScan/Scan-UpdatesOffline.ps1) -The preceding scripts leverage the [WSUS offline scan file](https://support.microsoft.com/help/927745/detailed-information-for-developers-who-use-the-windows-update-offline) (wsusscn2.cab) to perform a scan and get the same information on missing updates as MBSA supplied. MBSA also relied on the wsusscn2.cab to determine which updates were missing from a given system without connecting to any online service or server. The wsusscn2.cab file is still available and there are currently no plans to remove or replace it. +The preceding scripts leverage the [WSUS offline scan file](https://support.microsoft.com/help/927745/detailed-information-for-developers-who-use-the-windows-update-offline) ([wsusscn2.cab](https://go.microsoft.com/fwlink/?LinkID=74689)) to perform a scan and get the same information on missing updates as MBSA supplied. MBSA also relied on the wsusscn2.cab to determine which updates were missing from a given system without connecting to any online service or server. The wsusscn2.cab file is still available and there are currently no plans to remove or replace it. The wsusscn2.cab file contains the metadata of only security updates, update rollups and service packs available from Microsoft Update; it does not contain any information on non-security updates, tools or drivers. ## More Information From ea6f029362035706f62e9858c8da9481140a1daa Mon Sep 17 00:00:00 2001 From: nimishasatapathy <75668234+nimishasatapathy@users.noreply.github.com> Date: Wed, 17 Feb 2021 17:24:20 +0530 Subject: [PATCH 040/206] Updated --- .../mdm/policy-csp-browser.md | 72 +++++++++++++++++++ 1 file changed, 72 insertions(+) diff --git a/windows/client-management/mdm/policy-csp-browser.md b/windows/client-management/mdm/policy-csp-browser.md index d2c9190e0b..e65609226d 100644 --- a/windows/client-management/mdm/policy-csp-browser.md +++ b/windows/client-management/mdm/policy-csp-browser.md @@ -177,6 +177,10 @@ ms.localizationpriority: medium
Browser/ShowMessageWhenOpeningSitesInInternetExplorer
+ +
+ Browser/SuppressEdgeDeprecationNotification +
Browser/SyncFavoritesBetweenIEAndMicrosoftEdge
@@ -4069,6 +4073,74 @@ Most restricted value: 0
+ +**Browser/SuppressEdgeDeprecationNotification** + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Windows EditionSupported?
Homecross mark
Procheck mark
Businesscheck mark
Enterprisecheck mark
Educationcheck mark
+ + +
+ + +[Scope](./policy-configuration-service-provider.md#policy-scope): + +> [!div class = "checklist"] +> * User +> * Device + +
+ + + +This policy allows Enterprise Admins to turn off the notification for company devices that the Edge Legacy browser is no longer supported after 3/9/2021 to avoid confusion for their enterprise users and reduce help desk calls. +By default, a notification will be presented to the user informing them of this upon application startup. +With this policy, you can either allow (default) or suppress this notification. + +> [!NOTE] +> This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile. + + + +ADMX Info: +- GP English name: *Suppress Edge Deprecation Notification* +- GP name: *SuppressEdgeDeprecationNotification* +- GP path: *Windows Components/Microsoft Edge* +- GP ADMX file name: *MicrosoftEdge.admx* + + + +Supported values: + +- 0 (default) – Allowed. Notification will be shown at application startup. +- 1 – Prevented/not allowed. + +
**Browser/SyncFavoritesBetweenIEAndMicrosoftEdge** From cfdc25e28fd3379f924041b9e5e44171ebfaf4bc Mon Sep 17 00:00:00 2001 From: Bill Mcilhargey <19168174+computeronix@users.noreply.github.com> Date: Wed, 17 Feb 2021 11:56:14 -0500 Subject: [PATCH 041/206] Update windows/deployment/windows-10-subscription-activation.md thank you! Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/deployment/windows-10-subscription-activation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/windows-10-subscription-activation.md b/windows/deployment/windows-10-subscription-activation.md index 123f4f81af..10f8c33ea6 100644 --- a/windows/deployment/windows-10-subscription-activation.md +++ b/windows/deployment/windows-10-subscription-activation.md @@ -88,7 +88,7 @@ For Microsoft customers with Enterprise Agreements (EA) or Microsoft Products & - Windows 10 (Pro or Enterprise) version 1703 or later installed on the devices to be upgraded. - Azure Active Directory (Azure AD) available for identity management. - Devices must be Azure AD-joined or Hybrid Azure AD joined. Workgroup-joined or Azure AD registered devices are not supported. -- Windows 10 per user licensing, not available for per device based licensing. +- Windows 10 per user licensing is not available for per device based licensing. For Microsoft customers that do not have EA or MPSA, you can obtain Windows 10 Enterprise E3/E5 or A3/A5 through a cloud solution provider (CSP). Identity management and device requirements are the same when you use CSP to manage licenses, with the exception that Windows 10 Enterprise E3 is also available through CSP to devices running Windows 10, version 1607. For more information about obtaining Windows 10 Enterprise E3 through your CSP, see [Windows 10 Enterprise E3 in CSP](windows-10-enterprise-e3-overview.md). From 9f75b5e864d50d3e1b87468af4866a5112d3cef7 Mon Sep 17 00:00:00 2001 From: Warren Williams Date: Wed, 17 Feb 2021 14:42:35 -0600 Subject: [PATCH 042/206] Update windows/client-management/mandatory-user-profile.md Looks good Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/client-management/mandatory-user-profile.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index 5b40fc92cb..f6e740c387 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -93,7 +93,7 @@ First, you create a default user profile with the customizations that you want, 5. The sysprep process reboots the PC and starts at the first-run experience screen. Complete the set up, and then sign in to the computer using an account that has local administrator privileges. -6. Right-click Start, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. +6. Right-click **Start**, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. Alternatively, starting in Windows 10, version 2004, open the **Settings** app and select **Advanced system settings**. Starting in Windows 10 version (2004) Open the Settings app and click on Advanced system settings @@ -170,4 +170,3 @@ When a user is configured with a mandatory profile, Windows 10 starts as though - [Lock down Windows 10 to specific apps](/windows/configuration/lock-down-windows-10-to-specific-apps) - [Windows Spotlight on the lock screen](/windows/configuration/windows-spotlight) - [Configure devices without MDM](/windows/configuration/configure-devices-without-mdm) - From d799310fdcbc0e99e106cddeb8d8ff364245d3bc Mon Sep 17 00:00:00 2001 From: Warren Williams Date: Wed, 17 Feb 2021 14:43:14 -0600 Subject: [PATCH 043/206] Update windows/client-management/mandatory-user-profile.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/client-management/mandatory-user-profile.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index f6e740c387..d1a5769dc3 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -111,7 +111,7 @@ Starting in Windows 10 version (2004) Open the Settings app and click on Advance - If the device is joined to the domain and you are signed in with an account that has permissions to write to a shared folder on the network, you can enter the shared folder path. - If the device is not joined to the domain, you can save the profile locally and then copy it to the shared folder location. - - Optionally you can check the box “Mandatory profile”. This step is not required but will set permissions that are more restrictive and it is recommend to do so + - Optionally, you can check the **Mandatory profile** checkbox. This step is not required but will set permissions that are more restrictive and we recommend doing so. ![Example of UI](images/copy-to-path.png) From c3d5de4a9f5bae117d66d0caafb470737f98cfb6 Mon Sep 17 00:00:00 2001 From: schmurky Date: Thu, 18 Feb 2021 19:35:59 +0800 Subject: [PATCH 044/206] add image --- .../images/device-timeline-2.png | Bin 0 -> 127121 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/images/device-timeline-2.png diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/device-timeline-2.png b/windows/security/threat-protection/microsoft-defender-atp/images/device-timeline-2.png new file mode 100644 index 0000000000000000000000000000000000000000..382a004486beb2b9744c3243417d0f59ef8f7100 GIT binary patch literal 127121 zcmeFZXH-*L*ESprqHs`;QWOL{hl6xbY0^PO1f=&8ib!u#5_%Er(nOkcK{|w*goGv* zPd18OBFqN;mEc0KVP0Yax6b| zyY1A~EPKeO*@EXUlSV|d(>Y$AI)47;EF%*m&9(6S3nyP4SMof~HoA?6Gt_-*b9tIZ z9K~x9JPM17YJ3v?a|`(=Z(jh}|?9 z0)c2J7@VH^c`byml@>0`Ii`w|lYMebAsL+1J)*?%^E++w7y7x!;WFP}Ts{MV++{ir zlmHGz%)1X7#Sb6yj4+CH9fLq(=uWQu{36s-`4OAKW~+61W7<+h1~~U`LxFMR^Yvo> z9*X;LC^fx@S7f!W1m1J8;*kY{y+0Zz`*W4<|{yZP2Uj8U` z$+K3qkzE0txl406(vwU`6w7JyV;;^KFwVcuW2TQu$|s$-h?4xz;h!_~{Y5wQ7`<(? zd)vnq0=aB(b^=@h4yLd(^N**?Tfc*|5L@;`WmrEBm$vX_I|6hQqjvblbbOckPSN_D zT%*dUbSPuMx1*BZ6{CR$6u-Cajh|uL?s-V4w!T$nOE9kUkKfz;c2Mo7tay02`in5} z?+d|iKb(d@lqKEC=4{t?X(+SJoC`VE&&~`oS5#Dl7Bc;!Y2E(!5{RZOpZvIwm)S*pt?5 zPGmfsppRT1z|+4!J|t3-TkX=bZsCwHK2tW6LMkYF#oyB;M&ClRcb# zFaYD-@TUw5wW|R<3`@T9UA^lwHpQmvbB(yzcbVN`G^_NxlfSX&jic|BsUArq%SBa2 z%U>c*cF*VaI z0c(j13<+^=i0WP5F?ZBsakWv{%3$|$@sW&X&(8bna4vvQd^sNDO>pvdolDQ>&Nn|_ zx_Q<&2qE^Qd2H5m>vyw=ZoQsgCIc=HjeBF6X>WGIH;~2k`!#dHR0tS0);RbYts#Sb&>TQ>CsWq1hfXv0wZFE5!kHV8I9 zPWZ}l&UAZ7*T2_q`7R&;E(NAd^SS8b$q+Mq=U!Y|+QO8HiHVzumx8UG9hQ%ai%VKd zOUuVg1B&(bm<5jvdn@UVh@@=U$V?A=mE4I;Zp4*1Z?8;l{8;TA`tjwJYs~_xa)iZP zf9?o}R*0p3fiAbPdU0km6Qj`I{sBBuu|-c&DA90@F@#`Sg^5Y)t0VmiWi|L+PdxErZJ|JLL%+!CTgp@o0sx z5<5}5wle#SARMmP#0ESY)t)9JIdCjf@NnL=A3dKmUZq zqHJw#&C2oZsJaT4_h^o#meo|{hAC*EnIy@{POw>4O(4k|Lv{8 z4x{wTmqJ=%md2(&Jv)O2S2jnM0AftW)vf85GC_AY>gE2(_VrDEEdE=RPQmEH(F zcDjs0uIWq=G&y%EJ_X*JtKm97Q0}((j5GM5DEE$JKYNf>}7B z;+osZ&ybVjEWO$$x=^!NPrtz&VVWJd@{NaFDbF6?O<8PkfBW_=ISD=DFJNj1t$`zH z=$We*fPa85)@|M?UG7%lgxTtKt*G9yNgamaq1~QKjuD&+BMWB~j&a?Ic(_>vZbGE) zNqJksLV{Sa(Z^2wR;F;U+q=L5J(&3RrX=KGA6IUp;*;8frSoZQ$zN*-BLOmX6lSK{aesl z>LumCQqW`1w=Dc;xq-l_z0HOL22>J^JUp25E@&r^vavwKwuDgEgw6}53BTjoYJV#H z9fm+!YUk(Yg>s9F1tkytC6An(oIRK}DK-h0uO?t+bR>&Adx8xlzA|uoC6!w}VM5Tf zikE6rQeIPS-`-xcxzi!iup2AtI#iVkR)d87%EULRjGzsZhfS{I9Wsmh8l@>zZKV3I z&ne^g*4jinkE={qlcdHYL{T@Iw1D`Q9W0iC-=i4v*kv?QZ*<4c=Idm8vP!yL+DsBa zRR3weFoYBqVqZkNqls{jRll!)Je%0vr!11UEJODCC%HE+Xw=MCsCP(?298I)Id%TZ z#C&-(he!0f-X@vol^_gd4ZN@J&%D347}DIHm`gQK_H6r!!Xm^=w~&d~D&|tVYrR@h zU`-|xa5X;eo4+yT2A)%eyHc&7`SD^egXHj8A#|&7P1~fA?O=gk-psY{s|Yi#Ot1ldjnedvI@?JB&1h98@c$8uXa~qf^jOZH z9}m)ev+-oKe<^^up65HosB8Ln#o0{iE&~q5i~X5O$0$H6LR?&*(gVmCt0GLoDQ8@< zM~P0~&5vhVsCH6=J14!rfF4Cb;e%h0XMMN6KO-gy9HTv5m7|_$3baLB23KY5?T|_l zG)j4zX~V{XR2Sj=_90kUHIKI96HFzkP6;WftNzs3X*<))A@xjEH%nTeQN!|?c=mHY&qhTWA{z;Rl@_tx<> zIC*6uPWPsWi}3MCN$lzz7FN6Rp0q!e;_d>xIepadJWz(uW|tm`0hy%jd?x4J^**mm z8*c`FFJzWZa=d^MD*TN6z=9qr8LWaC4}KPg+EPDNc^1x)-Euj~e5Kp=)_649q|y#k zTMKMPxPhj>+QVk^Ew~dK_&7sAj3y5X1^3J4v@?s#_ZZS8H260sU~~FLQ&_vn?p{Bn z#-`fj_UH3j)%FJ42KDhF&}R)ClUki>veRikU|##?np19gWT{(H=(4YNa)tIB2IiR& z(wiWraV4M(kxmBqG~H*X*@xjYvSMdzu*`bO75S}KU@QiCn(RKcSYJIO^_50i&gz#7 zyMe$6gv&LhdcG1nZGJl#@R> zUXW!OKa%w!mcK8ahsNf#?2@9)RFchb{Z)gw5MT+ymzTbBMOV8u2BMw(<)ftMcv%$n zHjSUL!;=UI;YP*}UE%`TnTU}%EzYam>#vS7NDC{_)Va~b210cEG|W>ZT!+_ZP4t85 z)uwfpZavbJW1+jU6-Y8UJaP4vROxdppx_=i_S-8lAIBwCoSS zwpL9*AX?T^Nq&7Y7tDm`aQ8Z=rKVHIQ35xz$IrMePFbT3&+$|H3kSHJ`Op+E{btpiQ*g@U`?XTABH>a5KY6&*1nU zPERtK1xJ8$Bk{izcPx$;so(nOYFXv*T1MiY(mAB}vi@MnHHF*LI7v$Xkji*LzGtl| z(g~6Cl>bvu*C) zv8J4SCo>an6;|W+f5b&Q5ULz|!;r&ck@6`S^dhxgG^f2?+LOhhWgn+4ZB7(;T2k~S zoHV#uIhEt*__dHRx*xPUV_VE^N+K?bHnHbDQbBKfJ&EQHhCfE~rm@OYCD@0~SWY+7izkM9j(aMJ}xZ_bT?JM<;N@gwlTsS zbLf@_R7*VWn>}btlfg$We=iUZ!$Qx)I&;Z|aq0Qag?xIs)#N@m>};-sGnbZ-gzTgx z{=4Jwg$%dra}^yv^m#bNx$D9s$b2)2?h4bz+N~e2+@MEzw z29>Ta^M=;LdfO#O=U13hXd_8kp85|}8bgJl*y{4MK4@ywUoRPox%HArhU(Wt4!kqG z8)}zUlQ?0ElV-k-<{U^wchGZu8q}I;Q=VCQ%TFIOvv-mnU7`1?cDI8qcrjpoZW4Pd z!iV9>sVOD{r3@7)%fFn}W#xjKP@CoFCqj&rtND8kx_5A9?wBKU%JJjDf^4w72?1M! z@5QQ2?(U+XeU@H%&v}IC1#TN zl@GL!^#3R!7l{SGTA3DDm4iVio0+z+97cluc)^1;ygY|% zi>A$jA^+43Rl*mH_s7Shwjr^&AiS=9s>jpTh9;@k)NnbnmkVq-TAPiu7oPrh@&01% zY7~7apBAf`>Z8)#e8M&4*ViBv#&+^DbYs?kbC6|b_`Db%%Cn7zuY-YhR$lPxs65ntM(+?kke z55;RK>^%V4iB~hKNbK&X-gDU4XHe^z_@x{Wf`pE>dESo8Z5sa5Tx|q%$Y1;i^ zi|zsM)vRUp+wn-Jy==sQ*en|b?9VTkjMY?x=)6b$aR=fDRx3l^4LZKTdp6TU`K76Rx~b)` zSEpRJH*D1VOgxW4+%vQL+!aJP0pmv2=lCwx2TgC$9UpMGm$(#UsD1@nx#9=3?AA?_ z3IgnRm*0kPFa>t)^{qo;{RT8{7qb&o&hi`k%Vxqi{i?NdCdV<>lq|DySO zP|3Qr9(BYQRgjiuDV;?=)j6xo)bbq>tG`{SW=$h}zeZcv`7}*rUr8cADF||hsTx>X zF8x_ChprE<^m@v*9i?ja-R33E9KK^m@CNbxK}-%k@5RImVyOl&n#CqHxj0|h2^R_v zEIN^9$uz-gbLU9X)kzhmRyDnN0xf4?83D0csQgs^yf6!Nl{?Y=K8uC#yVgXkgPy>7 z9TNK}zmnHz@-%P)-X)BT$9dJZeX$ZWCGrQmUNyjTWHW8;uhJ~s(bzN;3em@q7vCYY zCUXMnJLM_27gxEWWq9;H|2>%Ubwv_oATnIMvCG!NGxAcNB<=VFIy(edj z6{rg+7_r<+c3z2Zy?YOM+On~VR$(t1`^jIAt^W1cy!m+- z$rLpQvcB#>I;lyZ!wAu_?}TJvpz`L13OKnEfk0r-tZsKOrITzq_ZF3$N~? zmWH*eCXR&0UR&GbZak-JFiK3JQRj94zYy;bc?iA!9X%Rcxv@Yn%TbFjR*B|70W`!) zYmREOHK#R1>egZjhUthi+*~7Gv3E5!qw2P&Qc%>49z=sKqrnu{GFnCDJHHUS%!rdl zTT_ygMt_*6-%A$b^C$9iW&Sx-?U5bHE`y_?Z`ht<3pm)@43~rOUqAFWyfH8mZZIz+ z*lCZli3XFXFko8$z|L-HZMJt|^k5$i_3l=#LMgq~DKZq2Ay<#PM9XcIg`bxG>c266 zasG(*>qGd3m+QpoOEcI9E4^txBNykdv0b}=J3R=5!4_rqq>G|<5$v!&9f=2D&*BR+ zWkH&nkOtD8jna_4*8SbpPAdUziB#_%)eTZPNQL%wlIpaI1@Q_)3ASQ*f$J*OOAMKuPBjGYIh7vKU_{t7U1Bixm&-)itXtqOk z^&ZG67Q^aj&IbtT5hKWxLo31X5`OKczIlDjOwO?NcV)^csnIUA6ka5`u zS76!|0gH8#{`D%HL1II(f(>G;*=|b!V_FtUmy}b$YFW&SM+3kl9VGiQYhAa9*eS3P zc~(W7JJlf4G7WM*Yj9_k89pFetf#kk0pK=KZurV2U<8s{LoJ(K?`|!Cuq4W&CjA{X zDX;S>_ZH$(iE3MIT!$?|p7=)|loA(v=w`|IC9`5guL~4K=UdTAu&7;5MYZ}Fp`9j6f z-1qwv_!lOl+r1#oQ!szx3)0`!_mn~V3{1-mFyA4Ah*FcvCX0XtaXd}hnKDM)=NIRp zwi{skneOR(zs3}yt6Y-{Ub5T3DP*aUmYjOswuR9sn9gB>3Rp`xbX~?ni2y#FMa{~# zP+st)J5a$wf}wHYXQP~kqqJ(Ri7!?Pt{GQ}Se&&PuJ(YhwoBG{MyW7um)5Slq#x$3 zo{a9Ts|NAs@SY*&QowvUE>DXSt@S7uSTixmkQm0mDL?GGNUTBEH0Z{Nz3CRsajx5$ zD_WIhF~zNV%@yPgf%rSD#IHd8(<_nsf%=^}0W<;==J(xuCEM+6yit6{Oq~uZfHF}s z=ut!5S=a4q4Wu|3Rds$zF@_-B0WCVh^5*Lm)&p-s-XDrNNVf_P3|q zh?Xg26{Xp9z6+EO$IevmZu_X?%O8Hf>2pshgC0`w=ohN3__F3;pYrO`rPm;k=|fJ% zfF(JCE45tY&otOBQ5q31;0`tY&99Kx$aYyzOU|~x$Oz4o?)%Z;3Z9BJocQ|n>%;iw z!Z!Ra*!6svnhTE`(VsT(CJp?I%N8qrm+!MU@blB$(JwEtdcJ}MehjnVw2G&LyUld!^4UsX^96pvG zH!bl+p_!;4kccB_B3o|Y!1&~JCic?Ml>A}FB)+?un$&#U2io!~EI3Q7{$M{qk{q{^ zExWVO63rQ2sF@~BHoVARp>o5gr zJayMb&F=au&<|nnY~FfwJ?9&vt`eqC9qmS-Gv|QFKmW1#kAT7t= z=0ADv9+ai#ZK*0!m}K}WIZOLtvn9GEQ~4FM+n^r(S%ctLrlSrKj0Px6uXb_2rUlhI zjaL;CUUlFB<|WDe(lq3`DgQPzCrwT#6?%0ud2|H%=ZdY**dy9It!gDg_Z?j_C0vK9 zZEV8zTb{KH=_!8BEBb(=;<_ji)2grRMGK(Z8cRyh=u1mHdc+BuGZwzVBGK*}OAJBA z>R8?Mj_xzPlF&lbyLu0AY5W}^0O_VVs#_-dU7u)gt{2a|#jQIvq>GNS-o+uHq$z$G zqShct=b%H|r>50y3lnUfuBXTh?N+8QR_J21bkinmOASuL zbmF%QWBg_PNR#W|4XKDy6@(F^lQwb5+qPebj;b!Fi zqD0b1wfJx4Z^Hfn0LdE}O=dyk82jSik;5Rm$jMO(KY?I+igngg|6Rf2#ffUXui&@* z8bKN##hKH3gV%YR~6>n(oz zbyWW^lz_Z79wpP!zAngnBR5mox;H`vKWDZ$WATi33t!=0?mb}rY%ofOJd@B$hwNB} z4#;f`*dSUPbh7VYuBG39QtH(b$LA(kSdsak`j5QN*CC$h@yT4aLpoYuPLZ01~&#mG{RwrkC|8_Gkds6C>t?@JP=!j*fE;?HZ|Xr%F8GeM%L ziS2NGWruX@#z=rWnp$acz&|LA!QbGjFXD&U)_@~g61PGr3j_O#6mEHH=;Rc<+^M$!-s7mMUziWc^!w@Ck?_^ zUYQc|1;zHi0qosup1dNKbN~Q=?+F>fJC67;``QOe0W1#%)jxI~xT1+uN4*KI=(If$=DV30Z%He+ z`fqq!GMTrPP8vJ%ljV+UqYeo#ywCJs12DhS6zxVF-l?aMNu~i?4@?eB!& zEQ~Nzu4$UZEY?%9O3eFqlpp=R@QR@+zqNu|@+8-7T1Xnc@Bs!eG}ahS+!D`%ylT3p zGbHaWUD|Zeog}Gz@ovLq{fni`-n+iCEe)oo`SC4f)}MxxXfpjY*!12gS0W zs?co+-4Cw)i9f_+A%f1ktBb9l8}#VLKA&Gq1B%5MT`mVTIX42%FlPGChJcfq^Z9Yv z5@8@O0*9@6E&p!~Lb980>R%u*O_|*lQ^C5M+R1&y*o?fqyc*1vNX${lSMh&xSFdA( zydnRQyB>bfz4>dX^Hh?AqMwTT-xMtHlu*Xozj96R;WAA()a(*s7H;R}wcsLTZ*QX6 z^;yQ;98gzU()f)~{P9J`ll%t7PW^?3IZon5=S--SH3)>8$AanUD04dH1$pS__%S>& zuj~1?Y=nt4@R#aGGQbUH>vR1jrt7SYhCgr7)<4X^scTNr&*)u^b1x^1gfBtHwPR7k8oL&w{KBy?M`OM`)^%`%SM7y^2GRp z(p08<{b0fWT=^qkTZu!w8|=3R0*QoN4Yu$Sv&4>~RRPYHfAKwZ^ph@YVZ#KJTGJ{% zpyze!4{wLi73pfyIA~V5EwD<;Ynm8j+X)rvp)JZ#FowM#)w1LIf7d?@2>48zI;y9Wb6WI<6;t^r+8w-au79rzE8Wg^e~gx~e+J+AF@@d!RRzfN$x z`y}V#{g>Z*vP|fxCn1ZBlqo+n#9PoSTCe_@@0fcSx)q0eDM)8s$q(ZgMXd?x3)z2@ z-@pKW=_0~pNw{K7jPTI8ZU7!04hs3fC#jSUbH*Fn*=^7LxQEXs{Uh*m13sR9io~nC zqgCCwgmFU=7^xpUC+>8@ncI10Q9X=1^Zsm2K&90wFqq=E0f%0Tl>5g*T7JWQDkK;f zao%qhV=#Qh`^$n<>mE2D$X&={OvZIlQDWTd*T1LzwDw#oEDnfpkd}%#_ixz>I9#b2 zTXDP=RvyapQ%c+3J1HA0k~o=?bcTBWkbvc#rM{lirf(gKF2I=q67)GIFvkAV4s6oy zQu=N0Agt!kyIRsOe-K5#uJd1)#~~b{&f1o}Cnz(sd^pPTlMR!Je1^A^lu6idf%*NWjj%{)fV9{GR24*L=Ub1#*>5tgI=L&8(8P;nc>r&5aBqys~a% zs1@XK_L5OT4(eP$h>Aae5GfLFClmM+Ui$wOAhaUu>XCF8vvuNiHnWmK@h*>msw#_q z!$Bi2&&{d4b*Y1@V;$^v-!%z+FPk-Iol3%C)2&)~d}2*E!&dGU{qC57@g8 zeu;i7SM3xpWGRnx!z|tin5ePB$BDFAq*zmH(i)T*`N|^)_MF0}H^5?i9~#H7^4_S- zP}V}Z&W)-G#lf<4H6iC7Wxx$?I=AJQaG-t#EYMd1kB5ko1JD4)AVV$m=%~8cC0(D{c z@_8ayp<_=W55X%&vcuaw=6iM?Td5`t$m|9BxI!0j(c$gjh57#E4ws#soo&=rHMMQf zN_EIcY!b6Eco-F{BaQ#*`V^1oyIDQ693F8iDen^A)2da}%7SQpPJOa5hy6P3Lyx1s z-|V%JK}om&R1e;_gAmecC`-4LiVV+zvU%eZu60_p^~UnN=H9@?(+<|Y3L_8YMxtx7 ze)8~iZ{?&ux013gHZO0hsH_M>#;%me_09X%$QTRgNY>f6A{4F~^VPQ)6dHfJqY;Mu zadC$dYjrB$c!xY9XiQyL+J6le%~x9MEg&?67G?$DXsEd$k7}s>r=tP8kATX!PFGOQ zl(M8O1TzeAFoU#zq&7d6vFQJmylWDcZ1YP!F51^gt`5^@A?vmv)JdcJr5HG4+Y zfplCU1I(y)LXLTiN=QtJX}O@WfU5jguPSI@ zfIWeGz*NwSXUMfP$oz*Ahhta%3y^1X8w*H>$>!((%|+zCtd*HpBA%KB>Et(a=`X=w zlOfEqvzgo?ScL>OeBki)dEzSj&?jJdp1s&^Y5DX0Fj>^sJL!Hold@abw3=+fS-O>p zq#(a&gITewKFzZ}Lz$_ICH;HbG=8jRQnhcYj zO_3NH5~tyKSAI4yX4;No^-UbEU4}HS5Bi+ER*TjTll|L~uN+j~P&n?Vt@AfjtM>fN znqYwws@BtuKHbU7WoxEkeqBM7_(zS)=vU48!KSD|49ZNT@US)z>0E>flQG2&Yt0P_ zp##tnGv>r>XT;xBZ5lqwE7AK)M<=O^6vE3DcFo_-!2;&R;;KO~E^U<_G7HC6JASpL zFv2AqsQD?lN|JghFCBkIQ2CM{(N-7Mvue+Y?5%fDuCm@jg0shJN11I;34299fZEaR1 z$J+xw?Oa+q6Ci0Uq{AcUIC@5=AAZVE{bqcjL5b3*rbg55|0cu$?!+xUK7KMmd{Ym& z%9QKZuV<~Ut$9o0`*PG-5`iuhO%gnn(y1}P{>%_#aeR#5qRBz8aK-PAgu!cxme$Z@ zT7voqOUwP{^b0iuaH(mN0I#ph+{`lt7IjbiOGYpMhmjWi6W~#^dfr7{;jfj!L{q>z z4=OV}dhDvi^CtRT`lGMk5dl_~43_t%*P)l*{ z#V>~L&#FmFO&r^sJP;u^>Yg&*FDDuU(slv1GHpM>p z^P$+Hin**6U)Ud(^Mf*8$Kz_8Jb3Ds8sCR;nn&p>S}#*q-|{S^eU*Au^jGWQq(k1P z$B_^kh6rQ3K@$_8;Gk72FOtV-J$y$z&!pzZ8TU7(@eL8EXBKvv9GQ$P)+G8jvi=-~>DFODP9;ldkK{av;o%B;Q(^)=$3?j9Vrp9? zaiY~ssr>{)@trbr{q;G?GN=AmDb$t`uz0x-qwQalas4ZoK%xjNB-22QN~(GqnR3GU z=au@G4r9_^LAF#leiw!O@u!@%h64~+pI!3`r ztbKc~OMt_V>jB%(3=-HeQGoD^Ar)MDn^9+ZtOntAzQ~BnwxI!pGHQw~C;T1|llxJQ zy@r>x?b(WSvUB?jj1-LjUbgoSO+an(a_5}JApF}54SevA$c20fSg~i0mC9}Sgs#Hd zx{f=VP}^IYF4nNZ^Pux0GfQo@;V3XFc0q&Rm=^qhPHld^#DfQfT7!$Iz@P+MzQXfa zFxQNF-|P~NQr~f=W025xUFolSIZpj_=eI!C_4iGRU%GNVU?~_uqO`0$!E|qQ5jA~F zlxR)@jR*x-goN5PZ|vWYbo6sJ0a)ic$p==Dp*MZ;>KL;mEyT+C?)FA4(g|PQ65r}m z`2d=MIR9pWtQJ2{776cv0D`Jsej@w!@t<>0pek1dg+JsN0!amdcSPP|Fu3({l!4$D}V-#Nd{G@tpN`k)2k=Ds~>fjEsy5aQ2{ z<&AbNsWqpCT*kyjM>%vg4#DP5I8VMoXyHwgrvkU$rSvpKMG8~acQ>5L(W)o~DVm2r zj@vR8OL@H)@)TfqRn&}PxY1YgzW7_XR^{u}@c0MymoVGaB8$St4}V6W+HP&8>250W za?NfWl*Gul^-Uw&wvj2$Py$kcX`y;tv+*2o00__SB~~SY-LTmmHNrDu zP0j3hx?FZ^uw27lGQ}o#K_nWNSBh4*sQZknv5}EN^} z{4?cH_12(C$@h9~gD69^fNdNkQuldb)A70c74L(;DX z8A8kCWL%Oc#qLV)Wt-GR1UG7TTy8}BoMw%iPW{&N+ahHn#XYQKdA4%jI7o9B_PA85 zd3*KoDr?7^4FQIb;87ZjEK=9|$)$2gXrGbWjuglS(+x^Yg^UF_z2&fo5~(T{9Vsh1Wh$L+KfR#;O_L4DJ5*@D!aG{1`e(*PruRRvc>;B$pVs9P zR3lMfw`ycNlx-=9rYM*>(Hq(uqfxM8leEH(k3Iqmt(b514~+fqL|kx7H1{kB+T3H5 z0nmi&)+-THKxkQLxb@65I$h3nrnhqd5I=3io!$0(3KNhEVf4ZgWTUG;q6qG2C7;u9 zM~$8P6+wXQ=Z6hQ5%b8B!P7TN-EU79Z%r0+{UJa4?$$F0tG{&oM~dHyE|fQCJZ$Du zxWy6FH`zSBjJjLDEA=Ml;z-^smCe7s`om}RUFS@t+O6i7@}m{D>VUYJ-u}}36)$IR zo)#Luu;KOSEui-CCgX$mD1^Pu0|Gl2-NYqa!5c!J+fusUlp|VhLt1}-Csn@Grq$EO z4-)#3&nSGbufV8bIHEI~)V1y+M0ffz6I{+PnDRGh|!E7R4Ax|*6sY@^FKs|=qa z_6;5U@ZPFLg`RsrrWNr$(?>$@=;;KBSLpVXR686@r80^Ig{sotbbdo?>9`TokZ=UI z+;t>DbelWC(IP5RK2Q0f{)E@-hK44JbCSYHF|7IP&G&-oq5&U+B(Af+G5mq2X1tIA zEUHMa|Mc*?1mg1Y{hH;a+>K@Kl48|`LfmGg0#wpfh-84=Gi9!yK0`wjsD4hN0I6cl zn>2RpINepj9cLY}8SM+_uLRD8-KOh!e)RXebpPa_YmTvIiDY8HUkrDuK;>EH$8#=X z#nC@O??UByP1)`efjTO1HPx9hjr$ZOKb7Qwt+~@P;F0%L0XKd(!ERoDw!g+_xJqB% zz4qD=G^6KiJaJfI%I$UM6M7abCQN}pn>a*H;3@slYWC=oWiTCGiAm)Za$T2{shIok zXhEmT^hR^bZ=~VECnWpV1WB~Uc#t`e6C(lb6Sc&Nbds4?C9&vZUeTnS0%l-cOr3bFp9c>s2I z!(8q&NYhejl~>G#M4B!-Y!iJ(%59<-I2cYmIp)4sv-tzUXqaeu-iG98Qa<7`;*g)Q5U9;3+V>K0&S!@eFiMu+pVZwOVA}a7|;o z$``|o^B=V;Kb}^#soL0Mw~YFhrE_M$ZyM!ot6QMk`qk4V(UqpV+mzsI#<=Ys_<--E z^`K)nvj*n;_$Ji|6#-6mt@V0kdvgCb3QgB(nZAnt*Fhp$X10l!`o6N_NBk|%3Ne%) zNt$d;G$TsGvX4Z4)D=kf7+3gq{xcS9IpWsOG=^C~J%Tr9D!Da8Y4ydb#O4$vh<*=! zm4FoDp!sCMxpybsI}i~reH_2$|6=D_yF|2>4T^VxV&zD>=-F~s#&xu}*fidW>Lp!) zW6bbN7K(^_*78~7O?y*~FhSas^wx;E`jt4|mXN<}2bDnURy-pM-~8}1bk{cQFR>V` z;5vYtqvQn!Vo5bLY{hDmYH;ZE75IQKGQ5Oar9`O@nzVS`Wq#nyaP^HGr4pmK`ZE&w zOs}wFdXjd^@0Pv#xZgINRBNKO4Wz#m`Q%MLw^oH1QVUv8Fd3O=i`;#Y18D_i`-P@9 z)xNakjgYPH#sp+LqI>z7{vA-iMpadbp)JmN3uE1mg|1`+=`_wHIbv2|m z2g!hST0LDiU>YLULsKYydN(g;fzcZcw8W2Bts6Ym%!yVGy*=G8UPuyU&;FoW%^lq|;O9T1jZaH4-TO;j6g~>d^6_N` zUEg>zeuN2NHA4cc#UqbO)8#MV>x0U;B}?}xmT&TEs+*sFrg+XKe8evU{skuBNAKB5 zT1dJN_A&niS?TGGYp2~=|kT;q`Z)2<(@rL z1)&>P2KOhZuw0WFKJ`eq@YmFBu7xU6Te|PMx%2lZzYnIJY-uvVksHd*^O)B9Bp3LA z3RFmCe5pFfaide){|&8C#d333{6*^0dViSd{!er?cQcCr$O%frDfNZToRs;sAhrSV zG*&{90s^&Mi5m=WMwTs*j2NQ8&d#Lsvjz;Oua8s6}Kl_qGS4x9glQ-HN3FpT^ z%pF#w9dgQ{_8caaI&Wc6uo`T;m=;p>A@p!!rg|c!cdQV z2>(4F*X4XaRMVV}kz3ASWD3?+?-hGwogN^@Sqc2Sh&SSp$+t2LWdm=aKO<2`SDmk{ z@u^9p#A5G+@JT()@U_k`2T+?sr!or=|E%tN#mrWHo3)WEYH2 z-B~BqNd2qD_J93C@t$Hw|M;ma#fvPz)c8NO0W*DBNrTfTfL+P2+jk_ws$l7VC4~NL zbd`xW{_m1gi|i=3S<)zT+BBki-NDB-833YxuDal%DOlIms))9Gt-9c3Pe07;shRv< zM5VdEvJ$lsKTg3GStHT(tJ9tDkHb{@8np_gI>@S&4)~h{(DM1-N=WJ#2j_AQ=x|;l zeDqR?&$+DS!T%Hj`G7O%X=tTCHvziM1@2}x)B0U_^A8ea#deC;_b<5I#X}Ac&<{Z| zD^yeInB2c0Aqc8s_ox)jskN(D{w_uRiB1KTxVuP|XTO!Nb}llxs0xdUwkC@c zI^e?|Dn(TK7ZW6Aj&bdPRI1#_8hhB)qJ09Ok>BR}i|iv=#VfF{{U*Qqr%A(z*rT$o z2||@A?)Bd`wh1F}P;Vaqgdl4vDJgQLfDxjKmecoxw2yQf3@YI{q3%{AXol(ogkbn4 z#<_IXol4Ck*mtJ8Hm}cHQz?jeHb(o_p`@kB*|X#d?x(4d_11 zg1!#|dv3KFt<1Fu=-~ zUi?Ea7zZ@p$)n=!DUxWBDfJ$53m_`UZ*Dj2@3b0>75pippqF>g z<476HpWBOrt2YAnG4`&@Kfb`1zp&J-0h--|j9}?T|FxO#9bQI%W$4`X2m~dxXW_du`wq3#so?t6CYr!?M&WiQ59dGjbpsjmR?-KN=H2s++Cooy zIQ9sauVX_2eT^=lHGTv1nGV442fb8!3IRx79I#1lItEE@h}ExgC|;zWnPa zJhYqk0C9-Akg?>JK8Ckg9z980);Ckp3RA}8S2T)kTbUcX{rVA59^)3|gXME9zRQ4C zdQNcCw9HDWtZHx=!YSYjTk%BWp%ZWVL8ujlTzkzqHy(l`x}GP=Y?E5IJ;-5)J)K+gZ*%?miY#Ej`Auqq7}u!<{8fIbSf@B4PAts z|0*$h^X`#E7|GLYwh#Ouz+}jW67vwt^5J5WeOgOqYGV6oo$ z6|->FCut7mOEeH(^%Z)myyyOWr^H!}gD}D+EkSV-H0Qm6-xu7?IrT%-Pg_n@S&PH7ua4wFZZ5x%w zMPiq}bYWhc+T}36Yf(4fp%iXz00`2b z$yf@9b3YdL@Hl87(b-G}k)DI)ZR-YjuHjxBauP1IC*HKf{ty|tEnqB?mrxgkg!y`#mKk~!zukGcH@#pfBxfwb z*ULd1l{S}aN^s1#?w3R zV&cBo_w8LO3{}9Rb5_<@o!&-bun!LQ2bn{hXXIu!;aM{0_A$AW?f8`4y@Cr0XI|}y zJ{~1dm4@ODleK+KUvYc?^~E%l=ZBnaK8XoR^L*S?qkkcNOXY2WE4lLecMh(V(iJXM zo=^7_z$ET3y=35Aj}-d4r#L$xMz|ukR~4CoxiSzF<{f=&GO_w&@r1b4>@^CxT(9_r zS!-S1aaPpP&B{M7{pMtk4_5esaOEsc;86~)&l`N@lf)1hqDB_QD!+9#Ti8)q>2H9R zq2l8QN9mPW7-pX2CDAR_DwJw(aPMOhruXxF4V4ZE7{x1+@m45`7DHazZbjQt?(=HOVg8nUJON0-8se^e!+Q1R8S&5*{TPvx>) z!GutuqsW;GT#*0Z^HY8Txh;8D;KOnmgL&gzz4)}QDy_PNt#?E88c1K*v+@5*+a+dfN_=o07Ir(Z%#@&-D6oSpS7>W_y8!m#7x zV^ZJJ(ktct_`f{5UaDuW&c-YPDau^`Y$e6So8Q~qv!;3Hm`<8kIGMZ`*l0THp@MOL zL5+p2)Va@1IC^gJq4x4a&duW<1?St_ATiBJjIQ%OjQtYfHzEQ2gFS*J*fP}#{^$Ts#FGlPi| z*~UH?W3mo0CI*8s<~enLyT9Mx?^#~Y^LqT@57M}j@Joqy*45Bbz zgwB5VFE31e?%X$`g`N5;liACc(A z3bCvV^{;vOd%6b8`ohwK!{;@Hyz1t9Cs5qh;Trl;!$fxGU}Yq10$}kP#Br zvR->O-L1+MCGIA%LWF~b>V|;N0c8f~djOmKCUCC&oPq&P0efu9tAam#!ufvgJHa&v z_bf-9VE5f&EFG$>Q96;?{(QKt>Cs$D!yE)Rh^W||_CRSg>$>0CtFCA#*^GrqR_lbD zL=1c5>ku<|61otSqP0HU`0k3y1?tF>HI}64z*LTgrd_69jl!bTr=JmLP)FYqZUxyD zQ#HKmYWsP7hi7)8Oq`YuKZtRyf*vrGuTnlo!Z$dke(%rAT-c3dt6E~+`FVqCuh`F^ zS*3exUx^bOBhH(wy2>$z{PC;9&yeoV7_gPZq4RP*UZQW=149*_3AwPK+N^Y$Nk->I zR=MY$8lkPO7|vXmaWsbAP)z0kfYYmNJ|4Ek*wJ@O|XmMLCH#cKj>lGOIqJ zEq*QDt-{aJI6rIt>$Fr~(h~SgBc|A-`HO9+R25aw9iXsxf#P0mEyF>BU2|2G zc7Z-gqF2Iq>`O$T?{G)}!>ejGc#QAX&2Djx!LJg`(%mYjZ~JG875e19j7OifF!YSx zTux%;CA*;zx(0o;(fw41iM5FqdT%PuGT|}xwHvY`RZEY133eYEHT^Evw7IPKYm!)Z zLvoe=3rz>&cIuRu?2~#Sf&DO#!A>{oYo@;y>E>sc^~dvb%;;8}_&&Bk<5lngJB$$) zxPPUkvJJms>u@MZBgs*veQmmGGs5|?gT~_$^&`S}h{@2z+X3=&)(xxIWNd7x-B=-AjxgJk1U2zGg#6H}o$n7W3yQ_pPE>v-BNC zrIqfxO7>F6w?l*cGozs^eS6^S0^5P{PG#~Qcc=q5;QbTE`UhotSfBC$FkR0M5&~fY zRAx@L6TA75()V}T=nUE|_F@Zhme43yQYWJRpzbtgca8fS7fM;zjkoGD`5$*yzFzqm zr8KvHmA@v%H%-hZ8rT*k~p9-VJ#N%4JA=F22(%VuPuwnKo-XJ&Tx#_6f5Som4F@;fle_cG% zD;jEUc#a_QHa=SZ7(Zu9pEkDcRije(`tR|&cM*N5bOE=l5urHpT# zN;kKR21u=Za6CTD$dO_xEW>B$K^rH6BsO=OSS?BAlLAlE-gcr5gZZ`vs>vhrz8$3$ zcDD{_H|R=TR9NB_JW>|Y-DzGMDydigt-a{I z&{=Gp7^QW6ZRmm;_XUh2z;4p=2-_V!c|0ilj$B}hf{}f4!S!^pAD^TiN#Z`9Ipb$! zOiZGs+WTK{zwduo%opt%Bj(+n-RG3+hyFYQrGIQ%3vM_BaZHZ%S87v*{xyIJ^eGsw zPFYevS?1GK5e#K%*U;BLBTD?*Sg!(5Q6Gb4mqn|-rNuezKSm^%r^x(FdFQRaMTYsA;SeNPvMbO;`Of@7qg=JM zt1KZ+MxC1AAS!&rVC~tqFC$)3?huqNviKIzozlS{Q)M85&ATF*8*(|+Hp zgZrh4aE?&o&*c8o9OdYgjC6k9{U7{Y9=3)q2fE%(a}U#O7~)^ zuBbo@sqY^#=HvP9#OtA2YGTOitcP21#JW)j!$L#yAK{5$5UJUXopF_&TYK>XJE!>_XKa0PRVF5MmL}{ksr208^+;n8E$F& z%+KW4*YB_&s#44hk5b>4eK22Yb^U!`AN|BcOL0o2TM~O7cI|0_UQJ;NH*8T@sO;P^ z?u+)CYldr+$g2DD67=G7f#`z?kej^g&wZ1OWfON;F%GNmGB}pR~pE9O!)*eHJpuYT%?mS z&Z`f_=?^*DC$*&w_!g+M@(Y)R8bVQj%6SiChH9_Ocr@6Zmi|dBA8IaaTR5n2ttdVK z$Gft9$)R-mNA*kO*Zg;$)0W}YXMT9fd$y~~s-Tm;5D~e3YJV7PF?ANc@IowqHdX0p z8&2Fa+-GKt6z0A$uul)>Wp0dx?mKDvE}dv|@$Bu(1YKq7*b1L{Jl~q-;j_?KW;ngcdsb|}@{Si{dMoRKqmJ-0 z$DF47NH{>V@GiQsB(_86t2^_7~A|KS(j&TF{ukE4r`pKrp> zU~t!|bFG}PAHqV_Z;*ekA*WWIn3xxKS7pvDlQEU+wsz;q4j?(_xN3--O0XZc}VnL3(Y@5f8r0JwfR-5 zQMW7nr~losCV@Q|&2FuN{CApzU2@ATMT|lHgK##}*FbX7|AIuQYzy3x>gL4veX{$q zJDJbw)0f?HwB6!vdmf(TYnDXj23+!QL3MiK_qKSY?}Mk9CZ_xIUFVH}TwiF7O$@d% zzemk9UfFlKjCGY#;{-X1GaEXT{LVYCvUZF&#q9eLD0o8}YHAZN6hf{FK6Vw@Fdt@ta7};n;|VJuiw(0t>-55PQ=x^qU%h( zkIr6&4IN|c(1sQXh*ehehk!0`>XgKCMK&+htWQgh;`e4PPhL+Ob1Kta8K)Q68YZov zVV-u5GazD`kD$c&r}Y&P_b3HTT~TsaI}a)MjFe4O9nxGm*AKml;(w==UdnzR1mi#E zgj$tp(|l|GuAYPL(~|K^S0%rQP(qd?2FP|po>eYa%vBHxRx(0i z?Qsrc;*r((Ot+#1la*?BEG6)LkW0l`sYRlKQ5~(i&bso>;sjl~`*PfDexYpQ5eojY zkSmIuTED#l6G(!sYEV-bV*ShbI4hp%tXx?2M0~mbT*X}Nt|R%^1xzpE%@XQ755G(& zkA7=2e}s%aY4)M4CqdpJ$W_3osW`3<{Z`caz>w0=Zm2p|R>Tvs4qKhO5wRX%Y4#e? zOo@)BH#E86u`U%u@`>Y7#j%7hM5CWfSpOswkD>%mJRa3lm`mN`6Dqu#(pKpyTTyRq zzQO1?!K)BFVed}8{Vd&7PjFG=v=l5e)~KGdxQT*t zPh+2^oglsl%7t|XpCz(4C_|9QXO9I?vRCIHF~cK+4GO3p0{d`%eOa~w#3}^ z49RQ^a2cqqKj?NmE6$;-9Tmuh8}Q@eJxnyID_%mv^1Cp7JGrGP>V~XUz0Br>CM_F? z(V#wc!RTvcK)6X}rsvFsp|qEDbiEH@ugTmuX)9}zI~E%E@$HomNnNd6wrOjhti6ek z3!)cEp9^syBiF=Xx^RuJa)--4<-3c_%H>}lpmOTt`WD|K2lb!=nBzq3@K@MF=cQl@ z`EpE56uLroxbCiX@(E)2uq`QDzl75teMeDnub++TVUMtZhC>~=jO6jCu}s9-Ns58L zHszkssGiK_VLJ?BN`)*pZ+|SNajO`idc*yBmx|A zyfRbWABCo^{ekDp`%a4Es`X4qDJjWar-7naWP|bcF#~?*E$hUPm;>=q-x8;2o}Kl* z#|mYV>p?=kJh6g>&dx;0;-iZoN3CM7rN5aXX20}Jqqi}jqknI>t0t#U9kYs_koW;JAG&vX3|GO{!XkwmeP+ZKMQAzOa;t}?ZcuX&~a z9QMul`P(21=-?D}8JQMYm$}^5)*H&8V|kSZCKB9Gd7v99SCeH?+wBItERnRfKR2~N zOLL&8nHSs8CrxrENwSwW1~Ej=q!njviBj!twGeCk1c?0x(ASl)zstlx-v*9$H3v&k9~McN5N$Nc>K%O3s%AK)4!F$xk0{P{NrL#6lTomV&_fG z2}Ye+#^Uazv(zBVis3YM7uH>a>9s}~0@+5^8A3P?--UMdM;7T}j!UH8Cu~#>YgXOY znyED(yDRVnmU$mey2k%^H_6vXAC>xT7a=r<7+aLlbq~|q69=sUHv4`;^Z%!8(5X;8Wlj9xn zIX`JaC+5j<@Sxa9EYS!fAzZi{E%>Ud4~vff=@WV?E)11k%5Hgl*yBbs~hJ_q& z@tu|0s?Nig{UBKV55SY({Lp{3RfTVKmQ-64sN!4ZVm}UCU|)l{9Oahw<~``dB8%D~ zUcWLgebi@R!8B=_sb2B)Lc3c3`&`CkJQBO~my1m?jz9kb-ZzWhU-DcL1(jXtaeyWF zmFcj&!*enhf7~g)&wvig;S6KCHgprjtdsfvaI#{5A8|{@-ybvE{U!EfWku)G4_p)* zvY%A1Gb1e!XQ0QI!0bucQ})?P`NeQVQSYd3Q3Ov$iT;VE^4aop|NQDrpn2@Psigt> z5y_!7@g8V&kD=MZY6ZZb57{x~8Yqu#IvKE*2kAr0a33X6lsujQn{E5>0S+z|IX8e( zyp?W4Blny(u|8DhIic^rQnzC^Hs)r@{%D5N`)jp=v){7gueuWyzXFZwaEhWAkmedH zse622-)d6n&jOSGfG9yKR4Ipg3Y~piP6*gY-KucDk^>zo&4x%Q!1DMnOI^>@YpLaZ zJsApH8r^ogR>+`AvD0L~hy|DADELw6O+0t0?+l`l7=m84iy$95rIcR!w8*2@+xi|v zHgvi?ReWt28r@}*^hM^>ZR}J(jbJ56k&sL9h>%T}r<-G+wf|7u*sD)OidQe7y$SP*r%dxP_1=k>Ul7P z^7G!zb{$v2DZm?4p-a{;-) zoS~G8D(ssy_5A(9`dzsk^f?jKe?Zxg{+me zI7{6_f1GGqY(v?jx^g#VWtAp($pm0J02(39GF#s)_a?M}n(8R)1lVErY-U?>u{479yXnn^DQRa(Q^NTHW}-UD}KiPsIZ0g-8H z>t%|+H%43|njf82v1+E7UuAyxk~W`2#m}B(JF5rI1iSGdT`7-+#)U{go_L*mkDl*l zS@)tI4ujVnm9@6HO1mxMIWKiL^GTGu&WYR#7iYp5D@J?+;`FIxs^_enn`NVjmbIFMvxH`lj2cH5 zvtl%G#18Prl`Ne;n{gyGSoq$42UJD5s;kIun~x1)(%jF2f8H`k%QAM^OEt8JfSeqd z%@z&Tm|t2U3d~s;TJPxz5D zA|F|?P1U=^=xa2lurS!CPH{Ctezr4AqO6;Ev3rBPsL;nMYYEYC*bH8nXo)AkZHNew z^-c9zR_SvfLFv<(MpzW31omb73Bl@>^RP;>PV~JJNm71flCLzkvM^qKHIlwRdaFpT zCMTvQV1$|_8@{h{d@rv_&an4uwLYVlR(nooWSVJiT=X$CJ3JzMC2Pj*RzbcR!Zqnd z6x9x2{WLR6+Epd=G!n(eCCUMcjf=XiS&;P2nNvIyBHH2^@1{0-W5-Y3If;m4ywk41_qqakiJy^#}MOL5#1QLb-|y*;hy1GN$c!Q;4!O3NXo%LLZ24~3BF zT{N8NL}##14ssH3F8r9GTjsFZZ2iQj+a;HveokF}+ExJ{Do}c z_eX@K5AAUHxx;IylrKXnahyo+))P#u8mlss^T@WdqG%3OZk3jf3}w!n(&_6Wx%frz zpos=sOuVA_YeH0cI(uNa$~*m`GNK`yc}gbts^BZ*4#V`$6U{DXCQOQ+tuHxA-zeF0 zsloX4f`Mvwkb%4{uK$oSMZM{ld6MVf167;#qIKPVP%fUTyxIBR2fxGbuik{fuk=2) zng6=kd4w4KFN9JX;DS)j{ZHWEZ!RBrZ~p5D-~Uhe!$j-sKsmio!3e{s!2j<2pWcP@YK$*U6vVx8G)?VnJ6>)U_Xf!Tfof^QY>H|zVi+?Tv?2{8$D3%>qSrAFelGz;K?-z zsy*;XA;@uak|MSb!CZ}#W9p;i)Sw@ymq+>q&VXnHvqFn|piq+Xn*$X*$eH;w0UZ^1 z=B;j9pt(mg6Si%~RfxC~9v5zs@Tly;w|xm(6PZTEOxVJ>{E+YDhisibVmaW%y|V>Z zdhs9I%8Lj&Y!8@9uy7%8HQnmND`&UzzVyjnn&uI!p%?fsNPtzqHj1N6J59p5=YafjVlLyG-w z_$6U7_sJeJj7`nmVr;439@VM4c*ZcEJ`XmTbB*Gn;8*Rc$b)i;qR_kf3`r54g~yqk z4YIpg&9%tCAN)AaEEp`}KA1}LN~{d>dEx`kw@zi0K!;@L`VVa1v3}#jEeUeyuZ9@@ zzF${xN$0m4{g)N^hyD#fXw{Q_aN+;h12Cp;E~}F%ZWVy(_|50w4$%KM0X+f5xl~}w z`)!8#wZ_XojsN9T|MhD9ga4W8lQHT;Lc_}_gA?ka)Iy)Pj}S^0gKtsGT{MJcBd#vz ze#XDd-O@R~C)9B+z;3JaMxRnCq|sDvW=G#uUbDe`l{zThAK&y&dG@VLP-%oB-00jt z_T7((zq=fpFa0Fz<6qi<&~URHl3?RRo7?Z&L^L{1f0=_AnDVmvLp1#PzqSJ*lm9aI zE0`xZetIEMUAFykJ?hNEC%VhnuC$BqA8+})JFt0iSUgO8MFWWvcJea;aQje z!%+JP{X6Fg{M>)@`G)RUs0MRFX?aI%);1(v{B0pF7fRlwxQP9_ft#OnFs4=uLmMM> zv@7L2rV!h=SybbNc2r zyoENCt8i);>LNpLjwJLx9E0VVe7#{ zOR#a|-)(aRhF8ozV$I#n#kPc3$Z~A3*Y(G`;v>kKy5hVM1gCTy3_Zu1{Rc44~{GjKE>QKgQH(CA395&AH9!P4#MN^vPqEgAx$v} z%|3UT7tbpT21j6`gU^y=LS(VA!}+_D;5Wl2>*B4O3$()8X(3lsZCwpcKnsYvD_$e< zSFHMcrqQI_ zE$8DlhwRnnD&A|bX3s*(9U^6+xG!^u0&?x`?FYuVzFp#vr|uQl)Zn1r-?HJ0=Nhem z?-fI{J$#Sizqre|B`zk$j_c2W`osIrsu9fHMK`*x&kPnpPNdF$|1x9??kB}~-Xau#ORBbujJO~qA?97Nlj#p4-vl4mB*K>pG9@ji9uB=}l%F=~{!uG)jvg0aY_!J-Y!WdwiB|G0Kb_26{ z<=b~3vH&i^kRDH`fV4*vNY~udARIr>X6?Zn3ZS8CczTpJoTKILk*@RYA?Wf^ezgUj zZs&E}=R3h}=yMChp=}@R<286d&lx&GoNIF?TkdeB#ZLrZu^LxF8+KcP*~w&5v74H5 z{&f3k%}e`lQZW~eOY}%bRnr$P`fONX3|k`1Xxqap44tH#vWTZ&PlU+ueOWJiSObYi zdJohE+H}9cD-Pc0U>auL(~RQVCsGkF;-~k*L~$80^71@V#NV4j>?3C%X0N&JpdlAm z=hLgSNHF5{Zv`#E5s-}Y+T=h>f_ynB4nevhV-6R7W!fa89--XFT{>9Tx6*UIL4rIQ zueZD;QSe?n)`G8fMXud@b~YO;>&*9Kp`A=la4LYF)u|KbH4uET)8$rqe&xq>#AY8D zf8>?a)Om+Nj50ZlVRXMNVKj5k}xFF9W*uV6tLCh%B!OA!r+D8==~gRTTPzyFTzlTcv$e zJ7*Z3RtqUPrAcQsI$L?V(;m8{p5=XfGjQ#c|7tw}JJ!=?dCzL$MVBebwb;;d6n7P5 z7|ff&T8EA`eV7@r!w(7U?Fbl+lbw$>*Iu2JbqRQvRWUUG>pG(UeI1AF99a}N21!{l@*gcdif)m^+TpJk z^cB(LAv*?xSDEy;5ppG5JZpH$LRDA1x3_0MIgVS^`ZefhEqQVind`^Ge)3yZZwFHb zTks`D?rgwEF0wMkVWm+X<}S%S;k2kRtAUtwnwz^1`vK{E!%Ve{o4G$&XIpuZJ!RKq zeFv#5!wZqf>IJ;o$@nOZg3oYNiV_l453X%ufW((8Z8fTRD zmaVk78m@SQYG+E?03>l8x#gDt45;mJ{3udWs15NaEFPJg`QiB*g9?8$TCv-~CA z;Ot{=|Jsgk)&3q50wWrDUo*3K2*C3=_h#wIn*L9QnYyEuO z67n~R>CDlG)Y_Vq0v%Mx=B&}*AOEfL_`U0aZ~oh(3`(Z|iXHrY3I_k`|1gyF|27u{ z{;&VrSGn~IRwa4n@79Ezg$%bgS^e}c3>8nteK0k+7jHOIY66GDy_=i6)Md^SQ$Zj0 zJ@eJ88!fHjH{MLN$PtcRFZ~(MsDPAISdRHB1ZS7YYiLk50K1|OjzObAUc+_>KMm~7 zl{!e-GBCPt0T$YjqU+6c`Wf5^@r=rxB<$8$lj%<^LQ z6<9}xS`jETB(3DKeRub->8~MH!JrT&;73oMo6TX6+K6EOYxb|X>WV6yFaFotc*z$7 z-067Ocb=I6&H-gHYB?SXpO##%V>9sITlzAX0UN7-urr?s-8P6nQ~DIMr{uIrtpGX^ z06~qEMq=jY{G@?Cz?!Czhy7e`lt?Z~RmJ3Q5$A2+zN^ZF*23UD0uC6ab`wD())WCJ5UW?xHErt#{#xCqxd@*IEIHd?qAFS)N|NNh464k?-0S5UU z?=%B(5Ho|PV0H#K@wnO9Ani`h`M|NrP9=};Fd*ujSk<3>`|#WCw?&tmtqjCD??lyC zZmKQybZ6C-bh+}ruMn8&af$*FK?=?V$GriF-LN-XkuW~WPX`^Lm$O80;elC@$;sCkwSh^Zf6LhE$uK684GM~m|E{MokPfez|Pjrtw;ZOn^7AD;A znj-ATARk2^P{~&Xju2Bl)*rd0YvtGy3g`oX;Hnv@*;&eW^%b5;f;FkCF$u zh=#H9V(fWc2_05gv9is8GdDG4JN8?GcJs^|N zT=`X&cK!6TVi~in#kUjG?sFT1pJ|=TEo;j@tZOW(04?Q0>i0gMfZ3%`hN)}P3Qc-B z`Lq2raS8DCan)hb{QS0FD>yzYhi|B()+d8(tHEi{*E7v)YG`n-MQ=va{bjSxz6ncm z4d&u4m;RE>$OEfo z6fY{*aza1O6{zdWO`in@LDOgw{kKy0;iZ8AXhk_e@jm4V*J|zqDuzLcPkAVE!^sJ# z(XYWge*tRFv6!%&9LVW4M>E^i$WI_UaPIr50WCcK-|NCC*w3+~Q{w)ueoJ%oF0ILa zaX6RDN#`t%Mc3`cPN$fLf8a{6BH3VB8hk4m;f2UKBGKanBBH?qKa9dl83|Rgs9g6M z5`i$&H`96a$}yH_6**V<)Mh|{OYfLr%5sRomHKr5+4)nmAXPQoEV2Dx9GYbg-5uHD zRfx+oHsDQ##C62fCeES@TuMjeYo|2jM=sol2ukrRfKW(XEt&kp-qkpP30<=7iw`2~ zU5{f<-mCz596i}bLCAqy+EOWK+IVFTfHXsEzmY)v9Ijv!gJM;ydecrz?9rDuZWI#_ zL%Y$%se$gmVOxXQrOlcw*JZ>*M? z$`q2_2oyuj9Uk7u9hvnnRoWyDNo&JPC2;xi-8gAvi%4n8Zc|w zpPq>LOYE-{Z;`LLx+-FOEjJCGPcGJr%|T57j1SKL{drR5TD;luYr7D{kSNk)n~j=I z#pmgz{neWf<^X>}ww5^<5Dl(@EIi$wdWBTvY3wUh(Rw0acgWmfSH#u1%moQHK<%F@ zohSu^RoF5X3qH_g?}oZ?;q;Rs6eUQnMN)}4T5Kff-AS~fo0!9i>P+tn^_qTlwj(s% zWN>4}@(s%wgT`a!Pd;P5XLnZnGOK`@vuyd~jl}OkN^1xsJ7_4$$2IFeAK)r58EDaF zRe456p&JnFAHwjy$*-Z5!GA7!4L0g&Z!l;>L0}UDwPOT`o zr85iK1tz(uUiXe8Mu#+u^99xOU6fshs!GL>^*hnsH`N9}45AoF(FIUCJf5!(#4C+lw z1USXY{Au1d^Qo^vDEpRpH{+JmPUSPG&bwjlq)*NF1M1Vle#pT8NPoq?dKRp z!7OS2A{han<616D16L=?0QBz}qaZgULLle|&7gXw+i^@|rgWk>qoRv6&%0{*y0B1# z_s^w5HbNd=bCz*`Gt^#c>(Yp!*6^j(FYMiST-SH;G%F83`f#4tb+K*rq+trqOa&=t zahFlcM2nHeEJ(bACPo{Lk%}MO^K3VwWuTISpA7)c6mZn-&xE}nFn6ULa z-wBW9|`@DDA9Q?$J%l2nS8dr*m^!6BnB z26xbYjXEPhP`mhj-%DVngVO@1pKCG z&*zw>jqqp`+wO!V_KUymSR7$4at@(BpXS4B!@YL!%VTq-?hy^xRgkt3g?vq9Vrp;kP*#kG6Ws_KGQzXNN;|wzVS?BBmES; zm>@hLBOhG`j0=Mc_ARh)qgg&r<5Oeyi(S#J`w%IrWD%EdO7T12JhQAe`(1k5lFH5< zh0VvI1-NKF^Sk-S%&3Jdp~BL*q7nD3f~-45PkIa?u76#j)|z9kj-2kiMAz4)oM?cn zWe2Rtz3b7qqn%d|g(id&ixz#vP1o{8Px@pp*7FlZ{H=GH_T|@;(se27zO|BHKxj-B zcq1~Kop$4pfO#}`xY@r-(&+qrvr=09Q1QCdrG27*-8#5Q!~-YibM@K+8n(`Rg+&kS z14f6P2!>F>+3AM;>{l|f8ds$8Sse<0$u)LOB^$7)h%nkIsv<B46c8S!z?`yAId{L|8R&Nu52w!N(>4t+CaX)be^H+GSEbBhFL*X!VoGuO@fLT`5< zN~`}pJL{@%gow)mTE(o@w7LhE3+y|rGBln(DP5`ReX&Dx-J>vYW8m4;BM@_*J(EM5 zxP6>b4df~_JX|cnW=08SEdsj|rfFa92$Jml7mF5xyAo9-qQqQ)QLhv+97G1PhJC6U z;t{*Y@8h+lAHaRm4V8I+mOj&y7r}29a6af=!G|CQ1pymaut!B;*Z))K0Q~YiV{>gm zUZeWBg#6Y!*;p%@lvJkh@mlstUeODE`ias$ruXvr?n`{>7y`+i2mEaA>@2wS7EJW< zQ;(h0Qnh)S`*;lgY`QAgn-nX-D<9BuFxAL@Wcu)6F6~y4Sipqmy;Yv)?nPP6KOV^X zj_yo=6=n?=KlT=fx;$<@VwzUa0Aj4p-*PGa$?0Tfe|qhHP&j()j(Oa)w6k9t@+;?n z!M?frl9ENuSK=DDJ3D$wiZeFP8$X7hx}D_fm%!2JT4JA;eat8{5r^`PY-1I zu!k;!*2RR?E-2^~i`?Z?%Xcvchn@)fDlM&&*{;%Z(r|sq?Vv}2sC#bp?d(G7CxMcM zG?_Nj&LaCtaV!V@6crb}U628!X^#hTwwVQUrQX$Ff^K#{*@F2}^rcsc&TM>{CK3tF z5*8kzgLImLeZ2_fY(1gA{ElU4np1l4UL9D`=u-HH+-A@0JmK3TZuqNlWNH9AGUe1L zWL?T=Ub?TB?*rIxP!Tezx^>v#igCTa7rW8h4XfQ(!mi5>${aSQT?=^bHBEpuC+Y^Xoor}IKRU$Tw5zEQ|H+yA59Qx)5r`d7vpKJu3a z$G)61zyd+C@H!8|tCi)WK;|IcchfEV?jLQ; z__@_prz3t_)jy##`!4>tHV+b^cA@V={&7WQv@$6UdXMnWw%xk$W8Y26_WTI!RZ8Ez znXG?_WUu%A7P@{JV+DCBmH!As8F&8g+BUyfGC8j&3`8JfIlvTlY0H@;H)^}}JA zsi-A6WEp+ZY7eZq>mfqT!^p-h<4zS7?^0+p6-Z(XU2rieWT89=7=D)WmM6h2Y&`Tb zAtd4zVax>jFVzk-fY2$9_V(ESO|*l#prnR{f^iGPJ+iczurauOPjwsc@f~#4xu>r5 z;6;ipr8qrBgoL05I@;byzH@(Cax)MO91Bu*AM(xxzy{TRtNCZt5CCBu{4AjL05Po6 ze@Myoz~MKCytP_9ha=XQ4nPZ=!vO>3yDDNHiv6Pi<=q14Yga=9;tl@yot<0lvZd6? zj|;gmVqNDD&QAQZxhi#Y$CA}xPc2)Hw4s+=+ulv1&rDi(GOupbC8BfEDkC+x@AA+c z$GEpzW41rZ@(_~U2wY(Fv=+}|BnCy(IUtx|RD zY&}8<;q)-OojT8hehy+28#a$ZTh$vf?zZ;**%Z6o^f_T=^k*ze(EOI`rza5WBS#L> zNsq+#^lPcE66eKT#j;J?LD3fl9mEvZu!p(Q-X-Tv{~Fg;A+#nNxYvq^ZAEm_jgEu8mV~yYBu^r8PZ*? z1Butly1A6^R_i);vcN>^`UlJMrc>P^?t)vT-l?GdOpd#VZp2p) z#u|no_eeV>E@=k+QOdcDb~MwSODc8778ev5C>M}U^bhA}_6}5NE?~{jMpNW3hR%IW zP>Zr*r9P(vuI>(oGnQ%T+C2Iek&}I@haN=k-OylA5wM7jc5|7U#3vp{k?tZt+_&;H zbUW{GdFbMr=byT`v7Nyh|LI>CuNve(m!Md`q9zW)QcN*!Q2)S1(PawDWa#SM-1UB7 zpa_NA4hbm+BLa66VDCRI zB9})h7Fso0J(qS{FmC8%#CM+2PB@!%E>0!?f{ii7>eQ5Ycr!G^Tk&OeHw2yB%~&<; zG~?;)gY)&EAW4vUHOHq#g`Mj6lnp}JHPEWf2PU-kQye}Pvjp>MNlX&$xNVRc8R?0^ zz$(58H}dnSt&0g{EPiC4pi&ZX>OV*fXZFhb=qy>W3a!0?a%i2a>ZP($0m+;6Bh4Cr zT?{+m1+k_4^K)$Asl&*3fD3*(jJZE0-YV$&MQ(Fg*WUDD&?C}e%_t<- z&!ly|L>QL(zQRE3*%xd}1AI$P)q2!^rbWtbvrXGr^Ldp^bmC($omOU+om}RKA}NT} zD~)WnsGM%#9Pop^oa?q`*UyYNUSp5Oy&>9F(~Oz52{!j7s=2j3s)crGY~us^jS1#w zQmF|}D{Ci)YyOOoH8K2_mi-gEuF2i_A}-=@^m$Wtd3dOllpSz#P{iyVODUkZo^98n zVrf&){#w22P@*WG-UxJ~c8wiY8!nw$$21z(R=*b;%#6&uYJ*tZYxzuT?4EzQ9A^%m zgQHR%F>HZPx6bMceMYwnZ?BVBsubfiTK8@ZV4HE^MmA1MYA5GH@cK)tb;fQ8<3q=f zJW5|zEHn%D<~fn+K7xx^JlB^U_H}eY)@1=*`_d>*v;272^V(_A0-(ORV_YOFaG7Fn z&)$7tR(?`m`4%pDK)lEkf1}w%R&*^8)d$BCXb{VmYbmZv@0u8sy)#NkQLSs4LGB_8 z;2GDc{G#OA47ExSUnK`NFzQ6G7rsUbRNRR~*S3)_D?cNQZE*#~Yg?IZ&}u`a=dFma z&iA^syj@FoN;kVVLyvxSfg;7&PgBD3_Q8LCSEGLq5r8*FiE>{m!n%53z=(z<=jEmz zf|(v2(Z4y7y@}OH$K6-e@GM+e0wI@!*~bgaP-RA%oD+lk?*YGOd9fqYE&W;dW?GyY zF^eFKt#*MBHaO6r`e|7ZQcK_L*`u~vj*YJX*q0_whZj#cnVmfrK)PK@R&;prRiu+< z$I?)J@B(Crs$YL(P#fS~xPY2B446Px?Yh$r@H<6h(m!bA*r!wPHUT@EXyloDBQs_s ztF?7eZNE}q)^D^k8402Q2Y-s#0t1|3^2JU%@W8FoQd1l$S_6E3^yY8CAuIcBb7wWorH2w}pN9Vl%qcoMm{nnT2ztPaPnJE_8WDHlefB z8~2~Q;lW5pBGyg-;O7=v-tV? zQxNf7`Bd6o#9bZf|_AJ=?2e#+uU@!fBH7yc{=mLkf;6ck12aEPl<8qjzEx zK)b0+R^~`1F_c6qwA`HSa$D>gpZfJr0rqsJFW`Cc!YO=C1A@J18wFI`sGq-sjk4sllN z?K8XuJvwXq$JQ041xo8lMP-{(hMbmWVn#-<8w?S#{ngbi%36Dx@1?3@^#hT%-pEQK z?I=8OP6Eq4WN3EHxPx|H%Y}sUsk=<|JZ8xcCZk475H%ZX-V7a5?p$3xDf#-nwCwlM zDkq6p_>hw>rjQm$$5qZ*C-38(K4EPpO#`8`ZM*`D>r+9_P_hoIg&I;aT8o))mykOp zd#c%>I#4ye-S(D_Z{$+&;vPc8gv4RPY2ws@>pk!w1-7goy1H#Dg* z$ZpcyJ$z_TgpMk5-rbTIgEtJxpX4YZ$0hs?j&VI(t?wyt9HCm=I?M~luK_o?2ih(` zFlR3+oyTs0Kq?U-7#vK2WKr`6REMW2-D*aMdWw6qa<{a9a5!~{wS<6}6dT^!`5`{Q zH{_F-2&$y;7QYrX0qJIbs}2*|+x9+K)gXsF+7un!Mm@Hyb){YlQcv4zwCihE zbD)SzfAe?NLaXAE5+d*8xeH1~<&lx_{xW;p-z#2d?7_e=ir}hREv&;+iO6tJp4ey~ z#!~jYv8}ID;;N~IZ?1X%`QCRrj_nQPrhUW@78e z=eRnZ?1~;g$-VUMb7>2i0m70Vf8{(0ldiDC+bmFCI^iclGv8{_x^&|8D=VpIA%fDZ z$8n2gOt}=U-!~76CkQbwEo@`FPB#@rQ!Wo5EN1v5W^q`}55y z?)2>GA3>a8jhA^cXKjZmIB|Qe8>v5n&pRuA(D$8CM9*Nej2j4yH3M3*mU}IEZks1x z?Fs&_hW-A4C*5Ql9Y4mKufI@ZxP0RTc+Y95i=){Ivnq1n6?A9IA&D%k`q8G41*2^_ z&ml9<@OQ%3x51bgZauZ5z)e>bSGO);KCY%zl9QkwOr@w@21ZQAhQkK@0%Z$L46atTa;_zp6LarCJ z_c7!Cu$+)x6u(RlgMRscF!$b3O?~UyC^l>q6%|1N6=_nXNN>_R0)li4y>|!@f})@z zNbe9j(xru76qOQs?*S!V@lTq&4u|2d68d=Q~(lfWK zdpG~3otv}b_+}xCEM8OP?GIfJjPEkxYfMO$71x|C z{Iu@Fs0CM}B=~bVC|sNF4;72#$#v~hxsGh<=hRQ}|9HqFU3hVSggviyXoR+8T#i%q zoHm3m+wm)AD}CRpE=ATlm%!vcc$vOm;WOo4a=TPEpT3 z-vz%ls*P^*hg0LSXiAkBYT`t0ut1~665C`tYbUzu=6txK^AuVKIHry~U>|4ct~~j> zrB#mo9;eCkz?dwz_7>Dtoc@uS&AJP$pe8j>KY!@zxB#0~l-2s)z7<(07>`xE4M1b= zYD8vbIU+IFP~vfSqfS%QaiZRhn(5psoPOCz|B&9T&?ecLV1FWm;Ctb=2b|OgfGDv9 zJF#U7_0K2aT>yHBbtL(s-Sptf4w!W?*tNkoi%XQ;P;L#PU^=u`=lTihsidqckKdU6 zxo8rzow{RF(%(oFaBkT+>#6sVL3e_Vi8Kras!8kQIAsP4sxrSob9UsG#qH+|m3 zVOZ0Vl~(RX^bKa6>|S>*W;2OrJ4kP+Z0ll(;ovSI+%G_Be!K^H7Cq!@6t=0DErfNw zn;%7Wkt65TKh63tHb83nn?KIU?Ok0STLlGx{`24G^Bu`FYEP*o3Zw`!K0e+q0Tnf! zH2Q_hIF$QuDjs95c*k~ra^zbE$v4p9>fC)Hb?4t?zrQFY3@2m$i&v};>$y~`309QL zS;c=?l)xkVC6;s@G{EIR;hFQ;_{%Z#V}HO2|9=@eA6fpUvi=eE{yLYezuFA&oz%I1 zkdXhiKBT?8C6KJ7a*CF!AgxL#Cd#r17`kIXUjazi=AW`w*gDasOCBJOb7t861!+m5?isRw+yD_9)$Nl&)kA8C5TBQWXiX^_T0dH+in?n&U+r7D zuvLuq0|S`dy+y&5wOVY+QEV$1+U6`64|e}TN~%f!NKu= zDSQv^qv@g9tk{osafY8qYq-_tz&-Mg>d+c@@w?v1Z#S=MR26K;1AkQZwS!>J zekb;jbv!>2^k$n$e7iShY|p58gsw}>YnU%pwjj*3gnyPQx;YSq#XS#=-iGdU`%6|f z!b@-qhXf*>c=6&^$>eLiE*HL@p&c+yFLf!Dx{&2Wu1v8gccTgO4>Kkj)&(FU^6?YL&3BZ)QB&m||;YYdx_~kI<3v6w^`GHyPdd z(rvf;0qD5yCjkx--02pUaq7U%< ze5pS7eSfY`lNqMSv@Cf+xpdQAzhkn*aQqQ5L`@xY7Gh1;FMoeM-| z^y1}kj=iSA>D`LyF7Kf+MWJ;H8*{N!dC~cHKp*b_Ps!(@%XnV7vsLUux6!BQ$wk~} z`LVSE?{~sq&FqLUE-S)<2Jc7>Hm)>*0mV9F??%aXwcyk>dl0r_Q2s>^4kxr2RdVEsJvvpye9G|I@Rn$h z;L|TTYhI_MWI^C;^Oa92yUEZlVaVp?>~~)9(3hmPLj}&mo51O~);{m!uDZ~MEVa?P z`Q;DCFZ716c#n}(I@lbkQL&IN8SxxT2?jn3M>|!&eE)S@;#x+{XDv@XV)s;i)2L1n{WMaGOS&uQc#r6_b(8jah>*=tmv|BO;qRjJ$Mjye2%dMzDfs0_@Bfmj=scraasx%O zi;K&?wg;lCEV}tA#8xmZn96sSt!hbq+i4tSN>beZ{3Aha zS^{IrB@~%CBdf{6m?#&#i@l%{B$AO2V2ih zDb}N~O~V~N##~OHR(=Eey(O{>ZzCm*p(%6-e>F5pNa=ZQm1z4tSOTW7v{CMAghJDs z26gm{V0=!Kc|9N{_vU@(Bqt{t=#lM%?1Apk+Fp(KQ6E!J=+rK>5vVS+)hpu~E0Ott zp0_{0`iZi>NW?6$fx^??4PGa~a(6qyN`Ft4Ufi@$!|K2dM$TJ>dxL8jUI}+XUs}D9 z5uJlhJtkN$*gPm%?8C8ba&EGy+~Jfn(MK{i4KVh%dJ3*%p|nbw_k-tMv#^6`59?{5 zWnL4&dZMV;s%kh5L>Y=+9vY^^$6GJ3v9VeB30J;PR>gw2G5S3Hj8|w71Am7g0?I3;iI3WNfU$_DL=}|aQKnv5OIXgt71Wv_ zJ?3}DkcOu##c(5OEoZM39g47tr_>f~-*7X<8Mzgq7a9c1{k&C;u?W3IVJkYgx6Q{! zPWM{F73L zlZHVh^RwAOWs2Q1pJNWieRkJl8FD%6FcrS_Ah;(vNR-;R*xjwzUMOufe;c~C0Y0K@ z?n7;c4LGAZbpAXBp?EtwXWk0ZJB6{QPM)~$T)pFj9DEMJ^_HIhaX9R~cy9u+iI7`_ zEKbyG)Vl{)bZ&}Ra;hN73LP_N1BZ%JuWX}S4m{tegGs-{N*gCq?oajv>!mO5PpdF> zuAc2}ZTDO|2YStuYa=Z%KTADJ_qPrRxWsC8B_*ZoIvHtZ%G}WlD4V^6(op3O8M=)(u`f7&A1+)WB6NRO`qwr z)F^jwuZDb=Un~=Mde)yR?-I+^m+8#NH#v}2zr6+}UW9yCeAGkFx3rejGyhiIYo7dP!v@;amwzwBl5@xZo-m1m8sOiZaU+pBcB@r8&hAjD zMrsiK<)~pCiNnqa~wB zK~~tzD+2|uZ3mBenv6$vbL`R_RD-pXLV2z4TVpXj_k=f=$I2k3QnfP^vbU7eu`!u8 zH|2vfCYIEjTSM!cJH8ocOfIaUIh*a_l#)NC42;GmOkvzup9*>h`KZKOJM-^p4p)1Z zQwg=JbT!2(K`CV>rzfv^r-YB)EZ*IuS3rBZW0~O^i3^f?#_0O{y~~Sh7zD(M?pPDJ z3Ub|3DD#1y%MgkBy6x*u@pcT()pjsMwHQiF;kyK%hRI{ypDhB$JXLXSUY?QAQ@<`? z=xMbC{%}ebjqt0Sh6yvRZeCm!t}W{LWteHaeT{@YG=amkVZzQ;beEc2|L)cTcbH@2 z!F{`RnSitPK06Tra!rI*6li5B$3N+G?G|TW6)hLUxNA-MOY<940(+kXoU!}hU^WNt z8r*N!R7p{hhX5AASP(cFt`Yh^_VW7vp$3mI{4Js zPZu_BB4SNYkJOXvhQAg@I`}|49#_}ckAFhbs?Y(LpR>AL?tEE2!Pv8Hq~!U_mjNWH zXEtv*UZseB_U+v%H5t%TC!P#?515OFT1@d-JC}zPRkjLdH459x-O_z zuQ|f_2ur)brX#^VjXy3G>l$#1)>jx?x3&NIHhE7~c^%wuk1gBZf2h-Ee|azuE#g;)YGi zEQ#D73(MRhiN|5b{2%B?_K8Maqwn4d9$=(kR##2OP0z+n=8vV{$)d_4vOT5|wDkhF*!M zS+;LCBRbiOOpK^W=7$odZhp%u zHS7B>^*z{#_ENzjOQd=E=&l>Ft&0%!W@10o&dr3{?P@RF$5r-Si_W;a{^TxdhKiRUH4AZ z*-H@H*mi%XEBI5rrm)VYxif|Cl1*=RSA!o`OD?8&Lwj$Hc8Op(w%#*LF6?bf67R`W zTYr)YV5cqU^?#+lXGBf@bxsb2p_sgCE50Kx@_xMaBIADdr(W+v#HOHjcim#iwva-=&FxM_hy=uXm)2r zo3#C~kqBh0ZG0g+iQyX8ubaz1y$edJhS7~ZP40R1EyaiIc%iim=EKH5AxmE=v*sK4 zZOX~K(i=yMEk6)4b#k?sN%)@4DN>a?A$y)SZGR@VLlN&On6jG-jSq*BYB3r@v{p_* z^!-ZJ^IyRutg+tphB$1}aoYdb=3HdJLHFWYc{ux=`1hlmQQWf=v0*W5z64K7saxLcObrg;QrYq&*7yIyFNO32nOH$S5)!T<6_IopYlI__PN_`n7EB92z zQ7SO67Cp;;`Gb`h|6AwnEVLFqprjG~5+X*1A<>kl#_qOPv<@zeg+gWJ8Q$JMDwO1q@CMygn-=n_?*nlIQ)#Fsw)3hRh1AQOCo-QQ<$upg-fQo89-^BL*6lFF}A?N~&e?*>$_9%}W08F86ahU$@qv z;8Q}WggT^b3u8&4^zI=>sXP7*a_1u`owm-BPO&I7Ydu}r4o$IK=kUVlhF>?Ni+mpm zMaHyt!r`|WSYjg`P2nuDWP9>~s;c3)7#CWZps*OnZb`kVM&ZDYoYykuA1M^jeQARd zpOD^N8b-8rlVedevU4v_605o6!bN9Wxb?<4!<3}Ed4Kh`;J~MQF3t%rsK<;Ak4SYR zmr8fLSMN8ug1rKJ;e?oU_Z%BD9sj3KP9Fyr2OcjZrZp$1pnh$SFVH*X@Ti+*D~A@6 z#7|GV8cw5CX4M7u=U-E-#so|BD>y{cb~Vf#X9`k2AvWB|!dnh|j#sI7HD6D?6Mvw2 zV#(L}%95`FRs4Z!1lghOm0C~wBoSt^^W_gq5+bvj_u6)8gu8@`VG1$)I6ETYPGtD3 zPtn6vsHIZ5YDy2HR!58K+IvurADzPE<SPzDsg#4_+5u2vHpAKwFM#@%L-gQ|MtrN*?WaQ+_I~^ ztm%B<=y8_irK#Vce#4OfER5_Z1 z2}V>ch$7mg1x`oSgX%;ZhwnAEC)_|+u3=3ZZ0xd1%8?# z#uYOh`z`ot{LYoTI#Iki(c!0)cR)ZHZ;KXeWs388OK3Pqw&I5$q||#O2knbX3_pax z^$NnyQhjfm{eW{__DwKOgq`XwQtGM~wUUD6sA=3^bsd((hR1M5ZrbSyz^23?JJG$o z+e^eq7iZ^97!l`Iv@}XW2 zK^C1}u4YNP*v>XzsXJ0vp9hw*?No$HDsGI?FKdVjVu0|kKz;bH3{-R=0q57eH8NnX zA*DW3Jz2zKHLV{*02yg`Y~ssoT=tZsAhCY->7Zw?C#rq%A$L4Mr?K{&mNb#GyQ71D zD=O+TpX80VZ{J$bqkW4m|83x1S90fR9>Tw1l6-=rs3jy-HJYkSr&jr9hz3iFQZjtl43S;=hJ_k>NmV?^A$T&8d_Y=Z7PHvJp>bCEK0^LnPSVDzA5U;z5O!;G`M z^)q#iKz|ca>Xr+Ev5F&xW{P3;69edP7rEPj%hA)yg%6||L&c_!FDY#Lv(+}oiyISm zOvZABw{tDcno?QjBP=@21{U>HKPg*_Px<;JEiHoE-TH91Z^uBR5H5Hj?by_?sm~*u zfsePaFd;dK#QO(vr@R{C4y%3l;2IsJq&eF+&fjL$ys+wR5 zByoU6^KK-2X6Y7=StKf}7;@k7HVg`Dx5wauSPe} zpQ4{;v-tl`qIHbP zZE_Rc0M)9OCucKlsO#hy=dQCy2Vn zo-A_M?8a*w1e2E!BwIvjtX0(qk7ggcT6~E~Me*4)M*X@)(XG7}hM4&2mqp#h9m(;` zR%z(Vo!CZO-8QaBrgZxseeYR1FZb3=xq5m=8fV3yCgM7@Hz&%v!x_*?+8QyOgsE~3U*EbYHtp{P!yO^nYTV)HxmC94Gwugiv`{pc_ zn32A3W^6W}9$|{jZIa84>%KslclHl)jl~__#uDNGAZq9QDe|+Oldeb>hh-wUB8R`f z7iflAH^~oUb~OQQlKTb#9jD9!=Q_=vvQBXC?hLcj?HXmhO ztr|@G^7+eUI=C*!HgYY24j$Xx@x`hYOU`L8!=1!!&?-CA0IMOz3EGBqOq$>0uO{~&0;-qym9$O~}nTd|ck_JLIW zGhOnH`+3%IreNyCo2jJCZkrYs)+9E|18fUkj&(Z-HklxzR!)-dJF&gTrq#FxdS1(} zVGH9sLE}Xtbtouqf|Kg|he-9xsRhb6ayEK9`L0R8dk|TT9*Twf;1bA6_DAL?@+A+p zBkd+@9v${>T!lckSzU{5cjHO@zv!2my|pge>au+@d@>2}5I09=p`8bwz2B$_l7ci{ zmeX%v1k5FQ@2E;y_e|dc&nxf@=Wg7#q^zER+9vtcoPA8@anRkhH<5*WhdLlRFKZz;k*7-_+{JYb3@}IiK|6UaHURNx9)C2 zweZD%-IG#a&yt-zH+HtLv1XWJT~Gc4@8|2r#pCtc!#l-wyklm|NzUJCT*j=;=enV= zF|rhnvI5M5B_2Hy4$$jrB<`B_e=ce?!+BH@4++=>J^UCXkFJi{N+&&&CQ!}VUqMuD zhkBO*Siuw+;S=v*`cq{+GKdKkojUsKFkdMn|C!pviV0OM3t6ZMUgaFjQ- zy&8;2i^=7ek>m5>k9@Wj)44$VD&rUhlp>P!tN@8#zi>+8qpY1i^#cHys(8G@)lyU% z3v8iB(I#Qq>f&R{gXZ@1GB;jm24ix}hi;d?yaV&|Hyek$+ zzT*%>{+SjD+t8JJTN9~09`3lwa_0=1cWW=E>gRwsO<)*{D@S#@_jz#X6(uG4eP7x& zmY_Xj?XvMr-DiS@c(Br+nnt~I7`%<|A$f0tmJzlPa)8W?HT$4!MPs{;eO>T+Jp=^2{P4ZEp+Y4B(AvFAR4-JlN{u8x8Sv z$J|A67+LK)zb2?I3pW9m-`{P3CQ12;(zQ`^9K{j~DH$)_G_ejR(chMfnVj|qCLH~4 zyN8(GmiZ38Zhp*m>;~=o-qbMlEaljUswx+YL>1BE$y9%j%eEKff|y+4_UUwM-Z$tR zmf*Mvc0dWbM*!o4iIWlh8BzfhqRF6QWHiy;-;QisUmPSHgE333j#;+XxMMm>-28Th z(Q!LL%9zK6-U3^`w+l1W9V}kN4n4#WfNHG$6#4apVSHBefH9ygjvPkf@nS}#8qlPGA<8-I1I*QDCzihiR*;b_q@a5?k# z_)Mcb5@5SaIoX_hVn07cab3Yz-=lriU%)CJnt}x0F&!0c#V@V&==!kVcj;8u6!_@paO#mt@dbcZs3?(V-z={*pMPF zx^m$qZPT7YODM0;t{x~AQ6m)+-f-KSvv}%2m92%?v5I3??nViA@Ajh6R>|%~-51a0 zJoxsm@6*g{Uf-{ZM9U(Z3Y${<@%vPZ{g|w7>CL_;tvkc0C!vzSLp?QZkY6fh7(J^Q zN~2b_+hcjF8dpEnTq7P+^LndoAlId{VmQ7ax&6_X({ELxgdWwnDcz^h*%R)6zEtK; z58Zc;7qGSHIk>dOx8!H~*JF)D^9lcxjAP(_BG?u;*e&dhk?|B9FZOJPGR1we$Y+YLf9rzYD~s zH7s={Wk|0)yxMi4b#k({T^OChe)jCyQtzF+d;=rmz_oXGaOF01y58dfYHI$zc8Wy5 z9ACipC^a66c-NPzP1qF#&movuptg@oj}+D1xg22inn?D-bvfB~cnTZ=QbK8KK4{JvGP zfMR;FDQxG8a9cIHUf*jE5Bd37Vu9BBey|0qYS;)HTPML#azmSs_+U^N!-3wy`Y?ac ztJ<~dEzP1qs9^=_5qBlw#>Ihe-!ACOipcrgk0EWW*w-_q;RMR*d-lZrG9n9@Xx)Qf z(JO$rQ9UXNnBsB27*=8*tW&V!!}@!+C*=GJ^TlZxf?mt)M)p)&h%T0PO)9~z6h~5s z&URI78K6a&n3&=>Ddhgr85+7QQa|=l?5@(#xC{>3uO?6>N-&sz-iIvEi2BD`3@l!7 z{jiUDNYx?TtJ4ERPOcRGTdPM+ZMk6f$Lo^hO`dhX%9(YNi&h@N65R@X!6`R{q(t1R z-jYy;((*!n?Rrw-7yiOCM=j#CX4s!}1MpLS#($?%Ui`^^|Hs%qz(NA z>`=D~E`Ga9wmKIodUT&a4l49kW1gcwOxBvWPD?NBA0zqvua;_h|2$XNJ;ypWI>#lm zqvHz711NN(3VwS2^$d6WYibj#g}oZtx0kePRIO=v z7L_1ds~ZbxsN8(LL|oEv>WlZZ2g*fzOU~J~|2a0d-FP_bj>aT24y=05(6D`>c0>p{JDJ6)w`c!lk7Yl^s!8R!JE zFm!Fqj0&bfBE)Ijeef*E$CFU)KGJgreiguYg-@Cm(eF=aX8pI9;G-0~o78h5i>c^9YTQ71aY&D?Q z)|ew(J0Ez1jikd583T13lSk5nK4BB=Gp%v=ijiL&ueO&FapeW3mAWa5sNs{oyu7>} zKIL@^^nRKM`*EB0{^yNCzHw|a$U#?9f2w1DN8;0GMCYTl=kQOP=ijl9DYo}z@xrEz za&-%9-b1(Sb06g+IP~jU*Jv~W+4gO*zBXum6ASbsmsd<3n5!>IM!VCbQ6irvWNFI+HbUs?uSu4`=z8u5yy!N;Ar-Wl6a6De zUAiP{Q^J{_?d>V!6#Ao#&yVC=$K`n-h#P;&$$0OsETZU$3`|-;eR5)-t z){C1I)$fV`tnEYRUcmw32%J!*@xiS`hg^s5obaFhhkFke1yfMtvf0Lhw9ZMkFd^1G zd+oco#Nwh?S;T9*pbAh$xIRN3WJ|>yc%w6GXM+#%%Gk)Flf4GnHC8iIeDRyifY0IRq}!Vva=jA)xHJiSu_5g2pm4i4PRlQ33hw%6F*{zC zUt3f*etetX?$;2MW)$ys?Jnd#!l_h%243w(~0TVkZi6S+F??T;gRMOM{rqM61uLCgnIsSgJ%=~vvL__YL0gU*h)O$03M2RJSB@K+qANdh>^lI@$MhHC89rV9U9-X{9&&m_RmwD>4O zH>DPo2=t$IkfE?)7VVsNfngI%-j{dv-X`T{b~EG|RllQYP_rLduLYaHpcw27iMr0e zj(25Kx6mATd%K|N+BO#%DUT|k)tDz)DzPy~t&VEKfeS0YSATZrBi_|UxRS^2F)$h3 zd!Nhz?AX?rn9pac#F~u)OLw=b4N^Qv!I=jL1y6GwXp2<6aVxi=YgkUTWb@8}vyT8I zHb478BBHj|Q{ZzJXya}w!KypNv=_U^Yg?~7z7MAmoU{up+Omm@W6h8c<>^=IB1DnC zJc4Zj@*wMhZRf}EW6+=|n?us@b?`y>PvlL8tac)tB;fbeog&JP}eJIh@igb5%-A9UevUKwID8b2pbWH~JW1^y>%-TgS(+G4U zRE}L4CR)V$&-Nby&tP|&TWIu*0=C8@6(pMcfOE9jp=$aGJjK3sP%1oomLA{o4WFVX z|A%`7-cagaPmZRiZ2F~{`=E?&`*F-a<8N@vfBq*x>i?gRdw|2b^xrE7Uf|uohd#(% z_`3yxr`YW`e=Gd|IF|ntZ=+cfKv8RS=lAmJRTTeP-ln&=ji`ZFkEmx(Qqm2+Kg*kQ z;xt7Z8%Q~jL^Z-17AX-C&lZ9h@7?R|nEmmiBT4li`||&%b;XDCs;(_c8kqQfQ}5o5 zYJg{shx}R}5)!9vAl{cYLVeFzU*XfH?(IaZlevYpmdVcNQ7xdK>^&USDUO=ep;+(Wj zWqq~IRqhQn#^PeLVR~b7ABNiJCrUm}?6Too_q-n7R2n3-T)@V6Odp z*KR6tv9q3Y64L0%ARbs|2cxm_yJGE^m17>WA!#laMqy-<(%bq7%|2Ex#DQqqg3ta3a1`+}tMIIu_lIugxXy z4#H-qgryhA>%PDrQvIwf?Q1M{7)>EFiag*G_|yqEo|}{mY-~|K@THLmKWxBw9&+@8}CTvbcm|646n)$~ZSiB_j>!#Nx&Uzul zv-#Xr=vrZ)(xg_qCzxtIs`}v`s~hcjvP$>H)8$(k5qBV>`S-iS_1%kk8lyt?#V`Dv zAeG36K!Hg<>sU;udbDn=&N)1;jL|%9qC|^$xP5%I~TXfljTJBTdeq+sMBFBm4rFb)#m&~0dnJ~P}n$BvAjx`gsJ#(iswX?S?X zPTx=6$JClHxWi|eB0~C*;l*pwqfu$970^$9tZS}_f0~e25$WJ=*?!~T0|yLUL?Jh` zbjCqcaiP%2o+yLJ+QwQDW%3Oo%JVRWVs6P=(k3EYWTbivd?JSa%fCSlYoqB%P7-f9P&NA9>>Jk^< ztrS+&i5K04xUzF3O&dsjZB=Q-ouv=gwoy&bhzA9R78+;vuMgpgnfEz6Bk+|KWMN!u zJsf5L9Vg2&_w~7?VYSaMHluKHn7LV)abf74awinE zk*U3*ARlWC41Kz?Qn5Mogsj#inq|}RGFXVq(36lbM{;fzp2i;ESJaBe^`idLK$Ea>d)t5H$7Trb!DvWU)C@2 zvQ)UI&Sr-}0Y>ChkO|}cE@`G8`CYGd8sh3oKB~)V6{BL~NvQNOx_HLL%A)6*(kDr& z-j$=?Z(0_J5b?2IukUnRW0}>){Pas^wN!i%e3lmxCPv8CDm)o4=#&Jzc4qob-hjd3 zPTv;qc5cqfc0^sm%7NPQM%zgr)OD8Jvr6~Fw5uAx6&CVvQ+&Q*_GRxl>)BmYPC|%; zGlIbVXmXfhID3?R>o|?%o+{j^xkBzaZy;%#7cO2fF{gdR`K%U8d)UV%j8>N17n%lY zytoMmMVfl=0axzU1kPuS>s?^1d(2ylRx7wUmi&@)_fd3{5XI4Fbjot`B)wN&;}7`s z(!@?keR3+Le+6N;y(~iy`DVLm$7=jp*oZ>IwYa;URXe+qB=k~;5O~`x-p=-ur%~P= zqaO>)m$!dy(NQ$%9TbBL=>1NWl$(4zG_k{!QHSi4X|GQ!+ZYR8&q@Y9Vt`S|)fw6!MqaWb)S zi{VpoYR1HY~a&2?L^mhld}0=j#U5OS9|}lY`=?2|BPq-1@Nrqg5=#RM(3G1bBuqj9AG{k z{duP8@>QgsQprC}eg{rhy>!!Nv z9HUiBTNr94D#yl|rD-&0LNhQgOI3$sU<67q}ioU zk*m@pEaW%B-lt!g%+$G>_k>_pI>3Wn9dAOs)!B^RajSDvR4Q{P7gqne`6Yj9*(k?> zNiOf_m?*Aq!#zg)@vg>6k(-QC*#MQcQ7LPe=Ivl@y;rs$kRSCpDh za+X$vra8Q$^w?E$A@`4K4O8s7UAwwn8?J+L0WyY@Pr{mOISV2-!z8Pojc0}!Cc5<9 zEvYKZA7U}os{Dz#{Azhn-I)S!dGqEk+B^O49!1vq-JO%Cq}r7pxNF>$2~u?pV(Cx& zE;gpeZ63SHo#yQ%^%3>8Da?F9h?aPQOw65_Sas@{?Z!2|dfA&oJ2KwW2OqLj zB-(z17Tn{(tYZC~&nXk# zlfsuRt_kL-QmveY=z`=f5`U`ezk9KZi=V7VT`(s#NZU5;UGhcA#uhj%W2F!sFR>@$ z#b|x4iOr!>Vb3uJki*lpN!$sAjGx`t^Ryn&I!>~8=e*&b{iqCCy1BP^*?O?4GWhJt z&XLDAk5QW@dcnmnzqMSvZ>WH};3?ueArHcdm%sGbAD#MxEC06bmmb<(I9d+r-qZV- zPtQ$c9Ja*wVV^VSU2?Cd=DH-oh-F2m%u@G$@2o53ln+AGb4yq3r1SXkmaTIAvxpeanwp} zZXF91%h#cbzNaI{Ad5?7nbpQuyr&ve84GJuf+$X*Ge%_`4(eCO8`PMV!b)W_%dox` zhuwOfIP$1M^oV;IuEvTqypq1@EzAG7ryLt9)VGg4I?;T03%Xi2H**V%1cPJ{&!*{@}K$if4vj&lGKSP3E$KC{s|gp%qCXzqB_;>-T@6NB(bi&0nwlZ?M4s z@@=GKgRgQ%fC04*#SNh+!?KlbOImmW$}z@v%!CsF!U)@ABu(MKIQaLmhK*D@!neUZ zM@gs*0RvJQxg*H|j@65{2?Ef~&XQ)lHQps&*w*6fs);CoXdiNiM8$9#w2MYgMe}uw z^*ey)m%@Yp($t>=xH9kRrC)C$^zTxtjc#{fnXs#o5bYv`)&~zmWIT4*+_G<;y|`v9 z%Cp@1rullLhVtukS2ArY9V{l5Sd#AmAW>k8aRx|{%mJsVkNB1))2uB5aJzb+3>?(^ zAVXHiRcbv}R}4rI!{gCc`p_>< z&n;P|gzxQiM*^GnN`SqyTfipKG3v>xJ@NrUn4!W*5NxRMJ;cZG?xP|O0BS_YhtS5` zHwV@~naT)k6uPbF^!@tDu}@C}wyUrvN(~1Tc$*>Bcu~)y31@V&OSd>K0qQmmWXBzZ z!_8Ra+_#I2s)SI;fdC$ex-(Vdd0l2hR@F%I0ibCiNkUS$jom)Npc_#>U|cYY&IDHS z9xA==cLK!zYQ{8Mt(i3n59iMZ$FA(#qCjAVJ2hsD89|qw!4h+x ztW1vRLk+Sp>Ok^X9Pz+WztpQ_An%ci31mmWx;Oo`*ugd*?`BqPM*~=nFk|&($%B=~ z&E2Yv&3+B!{CsbQswOBxxdofboSR9}*j84E^G_c9?zrQs?yJACZmD6tE3~+HvAy^7 zo$I~RZQseS&*M=2W`KcN>ei-JJr`k-En~MfA-q|MaSY?5y42wYpzO9y23V9Nalb!m zn3qinm|e43COHSjI|63KC_+OymW`1~ISS1Cg}<2%eHAep4-uTQYVR}EgZnr@wWr!x z;C6nGjOu>2X_e}*v4KH+fqt31-@!b!lDhhR0>FRu9ICS-&uZFF)(pmwl1MrEqfI|Z zFjE^jy&$9Kjgr!!|6A5x=1njzGqZjdPY)*kRBv+i%VO>fDDfPN0CpPswGM?eE}Y`x z#vmq@m2v_#&Ty^oX1GU8b@Rv-$=oWMADz)Nb(Srm$-9pZljow)I|OXwc-9kOIu&g* zn6EOJ_aY64)cg44rH%v1ITHUK5{;$4tj@i%E|K8>I0V{(T+OtX@opdQllLrc+3~wt z;y)nGH`3)?JSNLJFId-TfL!xVP3v6Sp}ib1k-6e((G{*$>jB_s>&Uik=hcyhNi+N+ zo`mEAThr|A9;&~Xz5fIGG9$2+tii$PrNg^(0uP)(%-W;cBDP~2<8FphgnKBJsQ|ha zwiSoUi94VM;gW$$!E#HySxf@%6?P+^q<`&SSKkBJv{iU#xvk21Ru$0=QefsMJz3i3 zV=E)T-^c4gJ(gE@T#W0u_&@wBRx|kz^h`kax|aiT9Ht6BeE1N{*R2|M;&f@2bO5P^ zF#z+Kgz+BM6PYCwp4j?`fzsEiNkX5+s9CPkItedjMrOL_Bj>leb4Dvp$?$mqMB6f^ zxOSJeTD&^A+%Eo(aYUqA{V||6IWTlutr!NCK^1=w-~P9YTE!;fwWN6?(wE0un(e}2QH~40=bGSuQ|SGtn!vSl?$JLp z%Ky!FNM|LrnTz@?%{W5wTl=HcUkAl%9*^~|2rl&sNDUVqyHQ6bK4Ppoy7mRtbdMEuWj1!N${Nz{qN%H*T1gMB!GXK z_WJK+stUcK`ZDvYS9ax0bl*qbD)Shj4q}65*V!ZcL?(pHvgf$))R0dlqeb(TjJ%oVXj?(C$we~Hp8!WEa zay;Kz4w;~Svr#;L%ap=-$S8q1L*ea&V0Q7qenEhk$Y7mz!nT*pUWLoyqx5(&lwkOH z@;qJH_qKG}jneg6uchIv6h{ROVe6DVYbf^G|HasQM>VxYZNDgrjiRC=y(x$^rFTR` zdRLJemEMsOqy!WMtbp_uLPrpY(rXY<=?OjbfRq3s2@oKLK)4&nf{sDYWN7({M;y5dkpNZr(QgoHMmt7AhA*f*s{vtyd# zjMGTNwG@MbiN;jN>MOVk7FSqYwVmmRQdO+&UDGT747U^2;&ie9H)XxV<*ffPyPPsD z=pD)aSfFc<8u2Tws(s>W(gmWuaRht%1C8tL5%;v$h+b$Hm3!UDtsNnq{9}xuTh6&Mfn;2~Q2xGVGDP6qlA1FF)R32;(;@+eiFoT& zQFwbL!SI(d*lW=eofGzwp9Wp~`}XQ2Y;Ocs*I{oj+v#SmGjp;n?H5U0 zY7jPwDN)L@(fRwy2n$50bZP3Zs(Y4***z;xoz&G>#=67|aEqSmVk_F0EIjO4ysDIw z(*0+IKvRO;zV(o>;lH0D<(M_2W^|FkZeG%FBIHY9CIs`_mHyg}kukP{>1Ch6RX*|c z(#L7vyUu@l)D4aTZ3i=mCC&p)DN%qnTxc7Eims_L$bwp&^3n{-3C#IY4mAA=e>RUIFC>dsJ@ft)&KvyB?vbcafR+UU-#AjXWE3%9;s-wpUsEvO#}YB&}C#>|*0qrUa5F~v+s zC@>W~x*b)8*_m0Y4U%?@t({m_1f~f(Y<1=mw=MVT()grhPhWIruSk088)N?HQ0Iae zcAs~{ze~2ctg5SLRLCTW)^G6X6@6qcFS$@%!F+Wu)nPM1ErHm^*heYoaWhu6t~nFP zB9^#G&sq>JrcsdZK%70Ov`6!Tdpfz4z4WKh4_rwE;FgK8D&o<6MfpEN7D=qY6K+rZ$s`H_wplrqMs=t6ky7 zMGQT%_&hZ3EW3(##Ps|O8dVbG*_z|GL;OM{*CryssO}KS*G;jXkm^2t8v(V=XvmLS z##2F24ZKjP7A$+0#JN^)xN*vo9Z@H6Qov_68|O$q(_=uIM$JlXJ!Dg#NfBekG9`#Y z@q4tn#uKkwSm>@Q{g^nl>HSCQ@vmu7!}UEI|IbqL!&<_JChm5vT~jl|i%v}_Y5e+{ z&zgMVA5&mGS(RR*KXbzDnJMuZ=%q_1*>$Lo!6%8ibr}xp7kg)EfIX@LkLUz3LXK%R zuHoO@E7h(key;ME{eD~EK)})co@st;_19NXX`VLXqy+fawoJ_R0K15hZ*8X^mOP43 ze|*7!j2A198;56To*0$pgV>f<>nL;}%$#*1I75fXBjpR-*`?P4*4`CVoKwsE?0B`; z;SW^6dnZgsYIofjK~g6y#-&p9>PB8YRsMS5F)+St0b|R5!=~y7lwcK$mBnXnJgiT!g@})b}%_A;%;=Omh#wk#7v%3C( zgWMX~U(*%pLEn877#Yf9=x>h%bSr#P=IrKUciA0u|BdSLt4M9Kn^Ktn_#N{)h~8q# zw+6pc1!osV`o2eQrBtZ}FYC_P&|@uh6DHsE?fn`vj$8_WU|M?b+srqx$qY+xE8SN* zeA0j`bBD@tNaUeHXp006X^{>s}RN+m@%I|8K z!p*@$71|l08$Ea5wkibP(W-J%+hr+UPTHO571-S6o#NojIQ(W{_&)Xhda7g1pI;hO ztbW=5yh?F=EL*oM80tJ14@b)nEylbJ;-?xJqP>R8;(|&LHXNhvi8~jPAQ$h^UooO& zGxvV(cpGJ}RBA?_uAFJ1U+OJ#hh7_e`#btriqb7bw^P=y&XgBBufQ^c8mg&z{zD2*obuEq0DT*Y;> zbF#*4m0jq`S}x#6^Ck=XHvt1{Qlh)udXg7>|5>r2R8aWyCg;JxdUmCt7Gz>S^8k^L z`<-dbODj3$Mdi;6bQcbohZt2i8D&=n)_FG>r_!u@b3U{K13AA_X07QWq+i#mt>=hW zu}pc<*zjMYP}T?p?}5ypCshx9@!0M@bJ}`LEi%v{`;`wibRDau-XuOvRP^K|hw#hj z4^Y%rQ`XN-yIB`adNev#nHP>;H|qWIz=DYe-VOIo^SGlAN2_2t(#UdSV$eJB;~@3n z-7`)i;8%V-*)S(gp}sWxNnN;YyJI5?7_Cc~s57njv#(6c@uP3AQ({hAV{Ot?ExJ6x zgQ7(0ZN4GIZ0k3nCh_g;)8+c7L13pjBCH$Pw}9v|ZV`M7=A{$Pi=$5RcW1eFm2o>= zt(Ix>dSDgGm)Pkr>7UFQ<1$x}JzatNy4g&|`y9IjqfL1vuiGq> z2;MV*n(QR@OZ$X62E=PGiL7FIuT*5qz<1sj{FL8h!9GGf#N-@6c48lXz+#tNd4V-( z?j9hO3_2Yo6zBZsw)A3raff7R?T0M}t_az6Jax3$+9)hL#$HJ^W(7_Jo%N4?^hL0t z@w6=GF9{9~A6J!u{j+;6Dw2F2s;c`MoUQ(rEkktV zZ)3frx4u9vtP5#zM!!{Ax3*K^UJ_yz?DNZxh>je7X*M&*Ol&VMohF;8vWFNy$p{T; zeo$xqzOkc!pc@yEt%6$I3_BHt4Iy;>?nTIu(^lhwy}#TU2MJtBrx#~vv}8nxOgihS zlkI1mZ4BRUwJfX3L))P+2HOJ^nS)Kv$0SGQaiy7hc&|gz3$>7MBeG``+ZMya{}4MO zhE1%{qx_=7jz(^{H*K+B1)$*?-Kc}dcgS9^Zsas_%~0uXG|Qa7copeUDd}QXQnT#` z3e*J)$$u#V9tw^+f&KkrcX$=dnkFJ?v8@l@W&Di(IU{W8MSKQy&u2rLm}xHh%nTinv1GT=iKUb1-+D*me!K_E=`ic zTD@Lv-cb$gwEGe(Q0415_v1#8O-|Mud|vBUT;aZ+2WX#bFH<^AGX<{jVDgp?thEI{|SBgHWpziiASVhgo(VRb}yU$zu zM-h}!P9h?H#2DHPV+(>m)Kc*kb%OEjDm#aadO&xa{qv*O9~h?s@l}zUIowYKB4h3m zK5v4fqj?iVKlGbB#yh|H`o_PNz1;E6_(5m~@kI3AR={sc#EHG;*Xct&>SDteu9RmZ zYwdPZ2M}e+-=$qbQLt~VJm_3PGj~A7=x^pWR&(}j=b$uQnBP40dQJDUt)$$E<4Ttv z&9bXc#ztOilYTJvX%6?=AQnH{cERs!kl$g_aGB)*uDKTH{t&Q1i`X{$k5l;d*X^?@ z7nMF_60>*9-F=JGh^&c*Sd65N(|vti9c~x$U@lX~iC3Cc6I)#lw=}~hJUTT>&d>~a zTHyV`(pgy~iVUj#c`xH3U$FFc8s}#yJ~Rx!*I}+ZxkKV=Dkse-h{v}$uPGX-pv2yn zSA24b9}j8C*zWt1k708e+*MngZ@UPOfBn29VeZVh?0PwB{(0o=g^C(MGNrTKRglD} z6cT%(;^8>ev=ui~HpVYdo>i(fjULP+xUnySyom>V{Al^@u<|h@h8G0q#D}X4WRhj- ze%B%7?<1hwGFyLw=p;Tu1$LLo7UVR7Y9Egd_<>ei8oZ(fzGxVn> zK(}!nRe~xk!0E~Rv%H{#`b<$rbd*!_i5B7SstEWj;=|?3k6R6*<&BUBy>9(tn>?Dz zZ>K6!ys{hX*(C;#^C3tyseuXL`N`gmou9FYxwqw1pSD+zy17+t>Y|#TJdbtH9I4o~ zQE|-L)HQDKeX?TWlku$(tzM5m?#W@Ge60Vg*{A5|@B9rvPLr)&n%pTF>;W>-6Yt${ zR_uG4L90`xS+>XM`18Ur+ziFjcDRJN12W&s&wu+BCTagi$!`vHfzq9woihR0*)TA# z?n_EeUV;%Zt(d+5Jv}|C|7O)q4}5+fN!$2X&Whs)ctNz4jlrF#-+es)nJUsL-2PX|`B$BPiQ(U-IPem@Fnn^#v86OY9K72N(8ib>D1qVsy9W#R!QH@tu#G&XDtXwMtILAnUZ=x zwi+HQ;pt2spLOI@|F6$`k-Cdd6y75z*ILwU8V3e6ng26lIkL8@98Om)k1N#1b~10< z>namvb)E~%P6Z=_36l(zLNcZ=U3#gb+uUJgpm=fG50$*RAgpuuZp4gWcr`P}t+UXC zCV!FmkOLp2Y|qC*wTe^E~1>cGcmgbtnW1&tgYO+pY^^1?Osa7$<1h^8#;YKP1}&YusR;X z&cIF}CLmQY(375A-!t`yu(LI^<=s@17z7XDZQMB<7(1)GY0$u;&65> zWVJK>Pk=AI+6%Z?Vh<`{#Mi%d08;Z|fOxGgl*{tpSNE*q!NY^7w{I(fa96|c+Ccis zV>fi^b!X^93!xTi(`6*Z%8pABC^fPD$;K+s40ZTperKU;T`LxLiB>i4id5tHqrnbg zeQd^o>AIZTHSajs4GY_uF$8_g0$@W+(6_F>HF0)^*r@+2mfK$GQ9v-E!MP9;vrFq^ za8xqPl)2quU*j@ib_4?Ss?UXnAN~c=fjDHXqFH#CiR&{B_Qjz)fNPrSAF|^%`WHaz z35*&_ANKDBk=W7#hKs|!mV;H6#-2v`g%^|?OXHgJxLW~;+SXJL#^4kYz_#_%ENla6 zCW@#lh&>(%JY^m%7UHUkIM}r|SDztowc2^rz3IzVwZ8v>%QgDkF!}yX>7gJuYKxjv znaxaXxg{LWS?-lP)u;&j_?A^T4N&RRIOu$FkfRaN>&*rH*z_}1wwmD4nVVKs~!QNO-u^ zV!VB|!UcU#9j2!a-)k5}!NX!ne%v)o#R?etVDHycXezXTDrQxE1Faez0Z8WlZeRav z9EN`l&xPTB~ zirZi5HHQmX? z->%87tD{*|yDosn=Ax97EUKjhq0S0}J!fW${Fq8#=K~b(UU6EZ+a1Y_$0)7Q=XN0Q z1gO7qR+(d)gisp^5!r5R@=Q*too!aT6f^_-wpD8^W97{B!ueizv*{pGwi+31!{l`@ zpZqGMW!uVovbnqZd1$ENp|1?3LEDznVBDN%3nb5k&2E!QVb%xxZZpqXVuRO302|D% zFFbY37}wx7dXqGH^n6@Q)_n-Ke?+- z-WTn6@QwST83utRT&(SQjNx=w%}ZuqRq1&9DAuXrr(PB7w6Fh*iv2f*kY}GTz}qe+ zBi*H1TRYlVgIgcdOoUNMKC2CC`x}B%zCTX;HM_729No8>t$d&-2bjl;(;b->-M-&P zDZ}~4xBTK7nRnFQf(^I*g00er`xg7@-t8!@HMn!WSj7sN@d>NLM7Wgx+g?5Z)7(jZ z_%Wcn+>_P^y(}7*@bf*JE?(MQA8^m~sV)8fy+}K?*HyhLy+5278N=hNEfkwI0HV1U zmxHtJH$KX^T+ks9BbKNvIeB&+Uy4M}C7G(&$jmf_mpfcDg#CndGh|0H-d;G52L8fD>?-3|E)# zsB?Apva!jMahv|JzhxEUGYpJN(X$ONM02H=;FQ^e?GgP~) z7Pl~bxZml}{u-BtKFC)czFT#9`#?{*d?!fU%W`sajrPv2ZdF=037ml2&?8WjB-}0a zlwZxntZOSHywFBq?u;XMIBm;c=UaE8u=aXrAOP2e-Ok^Bg`Y(R{`ct(dSb-)kgbN; zPuZDy8ppil{^BfEu6(OCw%ZDkbPaKb=Bp~-Xx(a5XNh7cm-m`>5h}#WdlPJ`)(f#$ zT~}&duxquMoH--Z$FSRe^?6J)DX@@{WEk~c?}&jw3-e&bTS76c4gh7Qd zd7S@^S_#{Pr6Ysmu>)$iCse7Y6$7yVOhS&e*d=&s-9_$hJR*dUvI;YpuX^M;#ZTs{r7-9{7=l|p;*s4F$gj? zgp0ejhx?h{s`UM8%}Md9u!Fs)fa!Jh&t%&d7J#iAJ7x(xm%ro+-3cJhl20)u?;_z!aZBRU>l(iuBbaY#vD7Iqe?-95N9{$evh zsra4k@t5OV-OgL*7e)B2j@%|dLB9CUzaOESO0U7g^e2rjP8tOWg#5FY&h4%^M5r`o zT}RsmwurDO0Lp_iK0#OfZpCN#3n<=%VAmRLk4*Vu%oTdK8v;+-kGmm{pwDT zDlRy5-iPjGd-?yDXi(Jbl)$3NsYOhK=rlcKV+H9$J=Q<+M~Dv)kk)JjuBAcwoX2>_G6lG&lV25sw& zK2FJhmH73OMLr$fMu6@;jR&{ktrC(SImBh%M&jEdVM#=Dvj{tR&&dZz=g2elp)?A1 z=$pMZ>-47A@b`WIA?om>>yy*f+8{ryUL*;XIsq8WjhQ*F!Q8;Uk#)|L7Tj|LfU-hZeS;5jQzh26GHoZ~^Y<^aGg}`Nw#cy!`rM z^2WhC1kYVlajV*GNx-McO~Vq7tg*nUN%RJN*B5|ooNoUGI7Y_&!3QfpDHFh%u3HNE-r9Xw0-!%NG+Xn{fY(Z%KgqU zSD>`qPgkXTnfD*Y!H3c1r8X=wUncTCtUP}@cWOIbMX5St$a$;2H%7l#9l#+wtdHMz zAOJ$ye~+JZ3Jgkts{-ai#8D~}3IPGyrtUkQrlJYSH)M6Fj z`rOs;Fy0fWnrp3((P?S@pYlPLayGh4Rv)d#PsSCJ)&Ume4ISl5qfeg5B)_j|w)9+$ ziSM|RdWs#=9SNeJ0FeqU09*m@KlINAoCt~&ibhk4Kn{X~GSJVcm2nR&oWS4`EoKt{ z{m8!wq8pE@wXsMS3D8P(VAHHLg6rzP!;MDK3 ztfvBcG0k0q@)L{W-}#SVh{Dw@(x>I>y-Hs!9+I4wvWHH*0Q$NE`StLlXZJF1^{*ln ze^sf(AuH+21Jj-)6|HxU#6(CFxC`lNeGRZhPqaA09N2(tfb2)6Hy^x7O!$ewpz1%;DuN-i0R^8c))#gmkcAo91xf~zL zga*4=idfVZ>^Jx|UHdq7Q(sPtaLv=^z=3_N=$*_L3k{=WNM#6BV)NrKMmma*PDc$s z1r)BI+D|2Sp;wicn%0LG+eoNS1viWLWf(* zPOu4-!-hQ7dy+U0MWpdcymee4cB0s3#e1=U>5j_HM(pB{9$4#Ax-@T!q;a@}NnJ<0 zqF>T}+PL6Ky%o(q|H`<Ze92J?Cf0%BJu8bONN@CP;6lOP_y+lX9S?#!B6j~Vv4y99 zY3#Hk!wC$Di9mf!c)pgUNV*UdN&_vHgrW5&a^@$)lH$A?jhUGHm~Ka^6zip*U0O;yXe#Kga!sg| z?5v0@yW5?(m~XvM_|wv{a2%%WfF&G&&%Lx4urF5GvaB7cSO=$ZCn=sXN+#3584%mk z+-C94EsRttTV#n}v`o3FMrn%DL|yRk&Gh=>jOj<6*+f`~1Ae)D3sBgIpmR#5A57G7 z09)_*#WOb;HF#jWjy-d-zFHMVLN$(X0rL`K(8Kxg; z$errN_}INCQ6gOnskD;j{nd0|@1$Vt^}u-H96pp_^DQ*lrEAnnF5c`*ezjd-QL)YlrvlvEC+3t^udFn za4y@!$}UgS$=>qbk64EA=pD5Th4Augv!pVaI+!=>qUCL?;GJ*~ZSBlf=tIx1HrDdi zm34-R@|dnq7Oi2(b>a>|IYe3G?d4u4i49zDr#tQ zES{;;Q7%c6DL21GzbDD^qHz2;}BWYe!6=dgmmfR@KmUMoy7gO;bCn4u3Zdb?dN5 zX?}#rpRXQlRPm+`ZlA(WQorQtE_GXKv9r2&@hoTa8+WK!c`?n{4C;t4X!W-70GT*p zIIZ`Ds5~Iy!{h0c7f+yP3?>fjvR#P|_^-U=l0M$`GT!|Xhc)-QGEVLE#>GsmLayV9 z(T8!)=uWX}gwV=75AJC?%!@pHXR^x->x0U2S>`jueO1Rj z+-K^?1WFN&B~$h!JkMq_yyAlq?F+=S{12?l(Cf}pXhU9%j@~;vb?0!-In(6dnN!zW zQnURCD4wA%1aoqF<^7BBDq=an(DNi`iv=K6hk{GI=~YUH(#>WhGTfm!C8w@m0pQyo zeq>4{CZU?i;ApWl0pDKL{&n2>sj+U9^GLO1M6yU=ZkD*dV?Z0Z16YK)E}RI8tpq|? zEsZ9tEC>g3MC{`SaI?D?J&H@1S9ifZcHL^L4vIUUwSwCH?YLjXs)J4?L7%OE_EVk@ zH7CSg^G?@*3f7W(XRcJR65^G9+*KO2`B&Q(q$HRhFn(XWqmp`WEtIkGN-la5ET<)b z8IzurWxS~=Or(rc#eb_Vi?$Ac!4K6(S+_;RM{AvXVPMv??LwAhsO>!isW6atYOHe% z80268yT+?$zAEk7*tZh)wwimbueDwuSv6&E(S`_Y{7`QR3XH#itVAG`2h_oDYI`ST z!JBFGet`zi@YIIXXuF4P72n^A`E^)Ki-BbOZ zBg2i#$@@Fp&zF5DF`QoqYgemg|BCI}xInkuV@HB-MW-}Pw8+gPi%UqY^IIBeA>Yv= z?*&i?j=`8abR(Sg=g!LPMZV>jYr+H`sMlk7Pcw4f`}io#gl{BWh5VIV-=h9iwBvN3 z0l8&4-uWl3&)wwOqj{Vt#61xyB{eTV_Oh$f12OmO4Z(o|6{#ULq9gR~KiA zXC-7mM^Ct)-)?w6BB2pMJ`+mon0Y^s6y+s*B%$;Mf=UcJY0mz?0n$ZwjxUA{h3&oRc?zF8lazRQF zca^;NYkTEE@3(`#GjTnPudVZsXJNay2N$$}G&F_GVI3}KR>v1%R^fF?;-ve5A&>@2 zTMo#?_k^GC4v zc$^86g27X2HiG(<-;`OpE5%D)L9qsXHTI$K0)JTGVYA!U75JRwH@LkM(zyjlf2mpm zwa?ItE=IDs>A@aH=xBG(LMAFnabn8cNiE=m&B6#9lYJJ7BMibm`iSCad`40D7j`o= zq=?}TMw+}(CmH&LaQ(n&kgnHI=yS=G(A1MclI7lStp;7pXN|i|a>`_qx}A?2PH5xv zR2D=Pqlws(<(n802~Q&`cZL0$*_nLqspPm*HP2PI8p*M^Jt|Umx>E(-1oz@aP#X-S zUyU$JwV(K5(d7<}R)%qdHXcZ;s;#q5QcAh&$h|RaO>KlZ#`7R3gEFi|$MK|;u8hyj z$e6Br;xdTVw)><9R?o;tgQFv<0l-Y(rjFg?BJR<(cHMzcxa1MHW}t?L{4@0w6(oEuTg z&wB+U!6cnE7_x*UBG>UW+uK7c#2ePpWa zRvA}Qmm%F#{^R+iM4QleE>-O-hUw1gB?7zrxol9ry{6_*CN7)=5d7rH!%DoKp*ux82mBz_%4ugYYT-O`Ix0t5}>ER7O{5&MZ)fE)XpJYsnLBLTo<^L1#?waozw(D<)82ajWV zS+ol~7i||R)*}1Ii+li{f%D@lV4hIzCsiV$opF7KkR)f$KL|Jk-K`3;J~do>G6b|} zTp&ln7~I|jb=)XLZ=GapwzOz)82|z7*)P9J;xa#06P%l752$(J+5tRT1Qe{P49l?^ z!+tCX1sOjSs`q&Uf72r`CHqge}gm@9fBDhjh@U z_))vPxa^wt&_{CR!;M;h0y}@!WSJdbx_`;3HKK)RdZ{36@53ACF4@GT-`vYRl=o(u z*`Fjm%Zy{%GA0OcAx_OmaT<2{Ug4|UNwW_B1m~_e5>0B!~k6HLiEI4oF)-$i= zSo|#}V08A2{AD)4%X$6N6)WRJ)4AT8TLF77PAbi|tD1M9*;n3tVsA$ehP?8i|o==T8ixEi@)OgR`^D7KFWKAkgq;0PD4{lv^)&M~7Uopg zI3cnZsJ@_E_Ozl5g?#HNJ(M4AEJKd>Z)*k*Sc3V2->>fh<=>qRsUwU?`MWoWt zmSdMJ?rwb%*kxB+4w4OW(iMvjY&;oz+c8S*O?WxC-MZ_ zc43^X)$?qSf21!Y3nElBiVPPrF2pU$p`J$|yGtU~Vz9TH#H%69QOu_-AR{{nKVO;& zHo1F&ce0;L{l&OEj8u3qeus1A(sP%(e66VmF*NBNN^zIDoVzgOqleW+7h~z49DqHI zAN&X5Rds!kdriDOxFzral_53U!LRu>$Q7LK-O7VcEYK#ym)b*)cWgKOwhDMoGbFLO za?d|kra5n2Q@^$~4h4I@SSlSq>f7CogL0iFlF3#X}C3{Jg|@f5l`RWQ}vEY-{(wcarH;@v%Z_ zddJqf$dRaYwCsp@gS5=PC6C_%M>wfA^q$hTI!Ogs-$5 zdjPWZ;tP)I+jJ_~UkMS4cCxsqR^-&9*xB&s*y;lJul4oPNxG5zxq(_voJ;Nt{!r5%hDIwa-|Bj@)TjL2^AYbwuK(GkfLeh-ZCvN{;c&C== zK+(`MURn*#`ko~-k%JaJMmsL7R$W{UyUBMl1hcTB1e(l@*~b>4 zkekdQMeG8fqA5e34KX@?Jzz4KOK?a!D557&NL+G*i?3LsJ9}?Dw|hGH1&mE*vY$2p zY2NY2EEtf5$Q$18-Dd>1e4g+-p5PWPm=UNkj_@nfnYf|h$z=udrYbuAfty2$3E8`T zINk^H;fnld^e}@GCDztd0?+II%ix1A^t~wgV7WZ70*8a%?a}uk#C#7Ju05NjIcIf( zW#@_)WCeo7ELZ!j+=h5AO?i(bDI&MaTDiCp`1|1|#jmEv$ySF!DV{sk)m2l!B{*+N z8u-GxN$EE3;kb*st3u?->%eQ>{*ezgSnD0cCESZZn^B zQ1+YQN6CC=y*_6)kcXD$d+~?&KbbJrw0=JPuS%FQroR4>Y7)RS5JgR{Wq7eH6Ih{@ z1}e3XLCt(auigLD&>-dWZ1JEb;0JinS)@EQum~RSN(`3D@$ndO<6CeeB!>4}^0&I( zH^wt;IYe#=C^k7D_b;VCF3N5OYb;_je&`XuU65~@hzy2B zCOCIz2{J169TN zkw1~*Nq(d0)6m9;*~C0Y4BNBnbKbMaA#15=xm9V}<2Z_#41H#*<7V}dlyu?~3=qFV zZ9;)6QP#JqO60nRIOq<`iOF&0OHbFg)oKF$_E)QS z-2UTB0{nk{%?%p|YIeBGRpz}tNU7_NpdKYfV#n3&0RG}`?YNNy&fmM;1boxt%Ez%H zs9MHmf-+xT+j||$tCN;XAtp6&d)Y~Zh78@XD|C9TpYKd3)5yIWC@ybXVb0G3pi{;P zR*BnO0x;wF$G8i3QBDbJ(nC!u_h(LGBq|~xh^W7d& zO0J_jgK-+2@z;1M6#-uKyWkJ;IQz9_oQFS=TO1VWq%BA$T zZzaiC*ZPL#M5ymK?n*U&s@B=l|D#CeeC-2cXMGHR6@ROB2;Fy)csn9OSS{EnWBww? z$VSiQ#kY@8Yy6!X1l$?7t6pC_nm7KDA+srVncLFKG=v?iV7CrFh@6rbC~7+^)3tEg zGcZCWCKrHO-ydU6uiCa?Z)wd^37VhqHJZ4aa^6k-)RDZU^P&dNT-OD4@5eoay)CyJ6#$#LC?snrc(5?@R3XF!KQm z@+z0?S6_dZjd}VK)e+X0$KPc{oIRS+sQ@nY*sOnNhwpvkoiPZ=*2qBH)=b?i-uclo zOLH2rfvw$ z8gs~d3DnJwO%P6^fwZxu3c}2~C=A{CA^B)vZ_%&>z(%O#_2)2;>3Y+nn5Cm>_Zei( zTPGk6<|vVo0>oAI;ea%Scup@D=al3+1E$%JR~3gqsi|2@K<;a=7zmIrZW9mh4Yd45 z)B&U9lga69;(X?5l!kXC!*{qyd$w!E2})iTg3+17e{{4#UcdRkK(L5 z2PTTw6MUPb9F~g?%zkfg4ILIuRxYkG_--I3w~&{Y3LPg75?X{cr2?TZj`1*+g^~gc zNiVnUjd%w_oh}|b!l3?GEO@517U+ND_;&Vhgwm$X;Idx&_AJ#Ym=-m!UF|0qFnY7Q zZ`u{KRI4i3aU$5)gAZQ~z`)s}TXbFupT)lhH9M4qzq>NmEy)zY$aU)ugR0_qQaS0H zeP`N}J2LMPR3ipv4u@H3zcGuV1rYrSz1|VNL(gC$in9!WPs{9MqvfYbP?^UOTC59eC-m%}s|KI7dcbK@~Q!SS~XfWjGSB`)}SPJOx7K=Q17(iVDHy8xZ~h5;hZSr>hj_iZ`m20WEq zH?Czp{PL(9h*n!<;gWS3_7IW40~X1JIO60H6mz zkeXD2+is~iQYULL$mis+UkCDeuNNmP_BY2yrBGI#50mvXWUJhd=Z%_A-HYT5UI((A zbt|Y-n7-f{V|sHEmU6#rAczWtc8q;AYAn;>g@DQ&Z_Hp@$g{~)c_(C)!Rsq5?QV~f zon{?@5NG#t{K!PZtRC5Qrm;rMdbj0pr+#w*Y7f2zw_nOe9SJ5mZfhu94rb}gK2XP6 z*$HjRF5o%nItBkn@M!X~2bOR>K%e-@uV=sQhyQrutbVZZbI_716c5$IRd-tM8U{cE zfZxumi_L1i6IYDzW+8=-x*=x6>1=WU7Ag50E34xK8I$=k&Z^Sk+epPj{Ud~rL9laP zACy$ntl*oJ4#YQ!!d`@}9+H5J?$0%Y@MfVJH?;3Aj4ynDGiG|Cys4W*4~S=*k~pydhd;=DGG?6J=#obnz%wAQq4CB4t)+6*ilF0qR3CGQzd z&W0aigzEF#@^XRYq~~F2SJNTwPUAJzt4k)Z zI_JuZd&>gVPR;T&E-bib$PMp~kROy?ePQ-Z!hJvwgMIfXx(VjAkrg-_CPFt%0E*j4+mlW`5lTiF6q~f zP(m`^VI>Y87_Zu73ERmNo=1^#04K<%A~wVpbYEKL-Q~ne#|4AVR*9I>=Xp)nv=Tb_>HpO|rjeOi>)7i=nc9(0`);}*#Fj3W1PVX+nc^Qh z;M`o#uITj(d8CDx>u)yA*vTCRW36s*SN8Vr`BceHud_-rJr1o~Q4YTnkIZKRIvC7? zMX!#@+Y8BT@k5F})~3&z+f7OYOCGFNTe#eR&*0nF zf_qcQxWr5Wk3O`>L$b0S2JlLMGGzbK^x0KfiwlpyP1kRK`*aj-mecx zVyd%&%spEm`cM)G?ge#>hQPY>I}#c+&O%;f3!cIt?GMZmq$Uz=i)mxrRG zr<&&VheT0zkxrxxXNx^X|7MygZRSg>)RCLHp{kHD4IcJa;tx$VCNuLe^KcC?X)4Lc z9<2*i=>e1$$-b$`Dx4Me>KE3VXNxY2ag4l0k4U|&!Mo)VM<^%S2M#W${ALvj!Axkw z9bW^H;linc)L;(@juK9|=|L(V0M|qaxA{NoozuYoTfK9BEr!Q*fgNrP-VgBx=p6tb zi*Q5bB++EH@=6BSP!yIDVaC`{tdD?PBx&TnD@(i|T44*5O(k!?ziYOfuTyiID zG>>LSF8RCSeB_iDIQF<{&ul zJUJek5H|u?c+N6+szurwq@LT@vw%%(VQOC<>bymAyvy3&S4jPSMkriw?vaS?C^^C5 zTb~$`AIi&Z5pYD4xe@66_^r5oEo8N^6G_d{$16iC2%~lr13Pa%-TRu}r=ll!m#ZU_ zfc^mPXdhATBqQIpDDpbdIKZ)em*qrv*!oD=K#KN)Pke0Kx%9h-cV!I=FRIsD zc$nQT4&hnxpgV6zy7HT0F==Z_FjBqL%+FB2*|Xts87Ge%7maL|N0hsTi$s~QZQGhf z?&PJ|2>mPh`0s}&xv;t zBCdt0-w|@RjJ7>SAg2F&&-$+UVo0lf1eqM{&BdYIBX)fFOHu^({XZNG|AQ>`=RhA0 z(UsCHb#*m0FxCxKr@4i5hyW%098keQCKG6lPrIQJ)IMI@WAQBS--NAy z$`xb&qa0F1`nTf`Sfl&@yLj{g6DAmw?|b-&`@sHYSRC^BUJd!3#UkQg6?RT|{%t6BlJ551XMH~3z)!Uo{c zi}Qk?CqW(xVZr&g>T2bhR=Tfpri#@E0YMq11?uZdX5E&LK*@Bh1wg~>MzRWz2e5|( zBHsQhSJXC`k?t4EH*7%@^|i68_se+ zXVatf9}DrJe4kuPk0=0Ef_=ZKWriK$`!0PzU2fur-CFOT=1g7Sq7nc7)PY0g?Ke#M zY0k-xdo$922bo8s**I+RceULbGIaUE?!lIl3-nj^@7;S*KL}6$M;9ge&_m46q+8S1 zq7d+o-*X;_%E=*ht?vPWn6me^S>tS-7u>nAcs>nueg=`9ZMr>@yr(80ATVxDh=-KJ z45Awy@)umdi{tIfYoN=1vE#S*ZFfvR_UAeNNOrHcCT`9~`Gt-T1M)0|g0$+4S)ksU ztU~$vtb#5o9D3o%LS)0+V?*h?Wvw)(bX-=|ZSo!sNg@y3wAR=fwf4EQdXQaVYxs^Z zYZ$Rv-YCeaOuV(xYFnsoq&=0rt3?6Y23VqF+qKhnEo^QV48BaGBiQc!z1!*Da$=pd zm$yaJ$gxD95OPLVgN3z}l;Y<~DFF{|90d@K0`l+&>E7{8#j5>IVg5kcV$&d=Raq=x zUtQln!rdq;o}Y8MG$l8Bu)bz)0H8*eH5%F2FZ@pH_vzm6$H%AVTOIo<-$i@&l7LJP zu{3JkK;2cZ)U2^XuCMwgT@nN2oS zx|MP^*g_WXW3gGoKwIqI3-g56G}sjdiw^19^dd;4!)RNvOVEDG9jdYtE3GxooTzC6@(k?jAp&G>0o3fsF3o zqHj@(==gY=_WN|2;bc8?f1X!7RtyeXLs2@-&Pn_9G6@3*I?cI|TTCgyy7+#v$wcNv zMoS8SO6Gp4zNgPmrQ8^Zi;1R|NxszqhSlTY&L{T!PChX`a>-H~1FGwJDfia?B0#69 z{sm6saZ#~c63|5LH(9I>M$&d9V-=D}0_A^w!AN5?*u$r+!3W=Sc+hoKxlg?ZEL!yR zH25n0$V@6*>xRm8^6se_@%N@dd4Sw2oYQ4QJve{D9eT_vQqBf`!B5)YmxPQ?nCKQp z$TgHRt4zdW&8eZK&bOcC__6*avsUtk{l=g)5Tp&)PM*Eear~etDj)o1g5tMISJ10u zkJp@ixbBwBl8C~UqvVqh&DTxsx5F*d?xt)5S||t|m488nnOF}F=La!30e|VkAk)3t zl?o|*kP=qw1lxQEni?PTT}7p*vk=VJ4{A8=&T)NyEIwy<571O+xF~7UUM%RurnkvG z*yiC3RSc@0Ka&6{9WL>u{w&CB?i7a}==@t0&$*QLGrHg11PevU#*f7shND z*s3$d+V1c}G)|Mr$Z(LZ-aMYozmIyb6r23^y!;7QD${o3D;Kk6qj~v2hZVWlk5S1V zu|^OJ)@OuGx*Z3TB|3~6xZiHAMaZR{U20;MMi?VNPlDSnKQ|3sxz`bN%7UROHZSK~ z@VrdYoZ=sPclW9-9aD6xp%WrJ?3)46=+!Tb0?)&=baZfzvx2Pac34geh!uk;pF095U# zIw*VVh{dRA`u0Tw&>5GZy>N7a-vK{SG>L1Uv3@0KbPSqqxAG2BZ|&3=%cMHcc5)a<+U!!UJKpGE(mYk) z`p}z5F$=V|?fTF}?s!9VXmI;VF92Qu70|=v%!sh^kaQc9D$X6ua}!FXPa4kALwSLtd=#moPJ#E3z@ay$^8e+S4Y0TRgnG+P8S zWN*$o(`Wv^Ufvr&+7Gz6X9jv&q90ti;+2JegNg{j;{wjcZOUql-f-g=KzmSxJ_Lar z^U2wTAP0w!cu7y^a6B~-g4#+oVPw#Aw4=(hI?_`Y;x@f+ClJ_sNSh+aza}J}(4P^$ zb1kZ|UhE-T0U|ZYho(o-NA#=^;j5sU>u;jKTbi-GL@t#jU46ZEqi$XTP_ge_SspmH z-bzC=m?(HCc7ghy(xx7U<#8Kc>u*Vh5WHWjt{YE_f*xs6)~Lo}Gc`~KyuFqLvh@i6 z8%5QXGKCf30+5TpDvRVPYmtz+H&rL2evneF(w}!@SN{=GLC;k`*wgLfUI{@#wfW(_ zi^_Q{84Rt2m=2mfm2O37_pf`Vr3p64CIr}K?J?q%jmtkqz_uFm&ZhbpIi@zG>%HXNry3r$ks+kI-#3+M&&OpRZ*T6QdwJTXt5c zoF9Gzzr`ddDvdN9&v`0d`>4atA0U)006pZshP@y(1So;U>WG-a@Ss)!RUqm6`Jde(MmlGPJVbvDfEu$Olj6T=jN9~o9wfLg? zm+%NYfq#Oxv9ufEs*{QA4Ij{=CzU}jKIaliG|VaQJ?6yN(;wy~64jmE7-%OA%t)frkmrkecd$D)({|3TAwtnR z>9l0u3g{|s7oFNeU3Rzz`N(_-{7z6u2%kB4&vCDr@NeN)3Fkb}YkYCB#Yo?--YLy< zkof6USODNv@6h(lX}tuLoj5pTbO{vjSpJ&P>K;xQcpKORYrVP&tYzlmY=~1Ay7k|| zYgz^o94t>y+%q0(|A^P0^`g8@7TMPPqPv@^w;0U$r!;-&Y|!h!O4E_C)&|}Eh2wH1 zt~08@)^EJ8swnfWMMQpHc#UoiEU`8n4EQ-1{Z1Rl>w2j-gnhZ>#wtMesIOKNW%Ph|;m~b0E3(@M3$WdAhjDxr>)piTp0nXcE z#UVUZb~=9E;NU+*pHvGKU-woh+-l98|6g9>)>Z}k>Vhe=qO2$9w6itQiF z_LeyOvX@IccJ~5t9eUr}iGyYI^e6(hLb?w)Hqgzu?+x@u>7 z%%Mq|tSJWZ?G;IVH{ETYzMtHG-|Uq+xo*3aOme>rClQ%NE;0NXDsN#t-R=Z^)0o{V z6v2M+e$LRQf}!(DPKVB3ArnKHi|xg@FmNw)d<8@+$D>Nu3KM$j^Uz%9-#0u4eq-UK z0zl2i%AL}6xokMTFX~5{HRWdb?rC?2N@LfAozXz7oim(Q8s9areaHw_8gG5>^*tXw za#BDjt+!6u+PD+JOkcgb(=h}C+bqsf{qkM8Ne75v$vLm4YM;0z!C;NJFpGwLq)73fzP0OQ%MK zUlw_ORbi{o$Pz5VsLj;nAR}=<3)>vr$=U7sR!68d&+X=T4$}k`anwe*jF1bb@3p^quK8o-Kjw@wi3qYQonOJ=~x}aeJn3b=CQ5y zYQOV3t~I)*MHGTafZL;MJo;ysepI(?lyEprbA#s7pmI@_>ExO$@+p}1FsCivr#47! zxVOC!i_LGg`-JDy?JjGn7yMfnL48`ALQ!)7>1YGoHntbbc@j+b@%pny!#b|p}>DC63po$W2i z0S#`8(iuzJQvJik>L+vsh?)b8O8-FupYB%Q#=@%H+{0Z}q8M+Y(jvU3Jn zXaLrxLa=(SjHb+Yx8gJ^1}$Sr7Y}hLs3Nz0D5zD4Bzh`3NA-JSbkmsE{%)+t3J#oK z0^Ng^i{zWr-mWj**`z%G1!R$4Z{XMZK^-n+7IuALKi`rBlAN~$piYp|``*l1aGJegxlV-txJFasg~4w; z`xG1L_~CT&dM9+G6e4G0^5`A-sRvX@z(%|3USKEOE*4G38y&26@o&@Jk5_&;9$>bHjSwyi#`ozLc*Lz}vkxjMX_MTrQ3F4i%m z8uRz^p;1L>qk8hpStDl~Btz98kEN|cxy+(c~KK1;IGoF`MC?$?Z&k3bsSR9_C|B@N|dtWxLfi zRY;|^@p?^5wYXeRTzk6prkdeZld~jXUn9m&nTVJ2MAvH@3WvQK_+0(shf>Qg)=KfX zcQNTSW?^gH7f#3DnG(%kQWnteyXW+ylrzO%es@4o;k4K^xVJTzH_K>c!m(*D;1uP& zH%Ll;$@*%R^~(GxEZ`iR@Dcn_&f`laMhdj<%2=k!_Jm_R!9BLP9^^;41}xK z8LTj?i{d|&*0j1mlvV*16(v+ z?5ycgrvPNp2sBD z*J%`DkK{A7FG><Vtu`n6?PA+H~aWvN4@xhJG z`awRS&T=PW)x68^G066&Ve4Ns+h7VYZU*t4999R7`BY;aQFn=y$E{WYS2CO)L&zDF zwU2z?tgf{=OMy%XK^DOT$jrlKL~$?4`qtT#xOFyqCFdL=cEZM)2iGWo}dxyX^^acaC?7!6&zShJ8a=aX?7%c)72Pf zGsR=-qt|MHw|3>`HusRm=EVlwtfX&%ZsMya6>h%uCa8&rv!DSYTh!@_df4A$QUVt1 zkUj)hd3vq*Aj`EGcc>2M5SvMx$-B@YE@Gvh&$SdVeMWm&b=1mFnUk1uuo@Bh#|CXP z$gp?IPlvI@H{CGPGZjCREjzd_>@#BQC$vP(Y%OS;!6*P6 zC!B9uzeefILmH7a>!O5bjZ(ufPsip!?4&hMT%ZY#89Ui@VDdh=W8Cts)`;a(j+z8y zLQnAhG0C7Xf?lwcHk9b4Y;c?m7YPje9DUWJ?HiyFpy;QJ!-Wcdw#ax7!94Y(MQIoD z`78i#;oERTuW7%q`QpP{({p`8NmQZG(&-`_GrOiOaI(kc(k{V0`f`vfY)C)_O7h#A z$INyPlJ1VSe0ILiLB~b0v&=~_z=P7n@tY<@Zf(BiMD1w4=^cYhzmFx9(Mis$jc zS{IQ`YcSd_7`E`OufkWXma0x{}JASXn7iZ1_F6P8V4!!IjG?u+B) z!@4gxfugvD=lQiIL-_lfV1{SJG8a=@`j=$fWsed}yO5#6R_Zc5Hjz}wjbMSglcz-) zt9-#>T{-%+L|`Rf zWj@NOm=A#A>diYPsBt)Mi@=&%U=dW-|Anfw`#qabr?Popx7cQ{8hMgT+jss%#;{vm ze50M~`hC8Gh1A;ME(*VOI9IF7axoPZ)gpindEx71p*Bzbf~Iz4==O!&3!%TlM1Y}{ z=;rKPr!n0qK*DR=A*-RGad!ov35T`wb8@0-a=|!kH{l9`l-lkb^JfDaV&jos5gh^pl<~n%9_|J?gd4JFJ`rk8|_3UjTh;~ zA}EM`Q&ZSCJ-@fttyX&s&OAaVGx8xR6JPvlQb00nZbybss!RYxJg{o~cuzBs?dcUJ zjpA?mE<=)#Ex%K2GXacfB(SZQq(5wRv%hjtfOqG84^OmOLjAKOLg};Ujoh|sPqW+O z=us&M-VcO7)tLaXCY2%v<-=QW$5=^(K+o(ej0aX}N5U9L6bBijis1G2;XbMcd-80S zcq;)=6F6{<>aO7H;i=bJekj60Q=wa})oED!I^wx-5VG(aklW{e+y1zI+`nj2vgrNc zNcJ``|K#x5{~`%aczfxyJ{Sqt5>EIpPnT3XTOIrX{;dx$H{^4+w!d$hb#6!& zU4hhxw?&k4v4pHYV!to|6g6_uIqwq@0TUPJ>gL%m2v2W(z#Q@-4taaX;AU8og{oNJ zx_)HvF*D~jxJ+ou(hBJ6z*PKT3UvJy0U-9JSJmwj1| z$f+1hJ4Pd1x>qfZ<=grOCfwlC1JBofTdc+2(DX0S!(*~4bM@`D{oGnoIv@XtloHsE zWmY?HmP>AeF20mGZ-Fxs?!$>$$bjkz7Q2l$@B2HiD%({aK$!Ytb1{ozXSe)i-)dLz z5OqQi06_zau7vH6bKr2{=iJ;)%DTsAf=3$JEj=bhpMJMH(q}x2F1w<3$TL@O%Sj6X zwi~rF&nL)u$Jh(c7jS?0BNIq*n8+rClg#z+s4@=cx~&2KyXq#`C_2{h{V*#~yVP>O z)Xad7WHOQ(MV4?+{sAR1N$Ty}*yYM*?uTOsHU=y~F8ytz=}OXP_AXYHm6gXm+aHwj zWC`e%n?hTT=XRA^TJmG34|-{DnXW)QcqD)*%EZ! z`_?tiZ(WW@Jl1mG0Mi*hd^f9lQ$;O9ftb1dzG@(~dY5m-$!t2WI(ezyBi~ZH@hz#( zfhxT&rKl2XY67dUdv7JU{jNMsv)-zUFbV!s%RDJ>P>di(0?k%qQ*LN1plTPQmm_|$ zw21>7c}?4&Osyx?E19n3)QnGOv3sp*udsEni36{S=xt>}xwtc9sr1m_Ls5d&r8=GY zpImR*)^J*TmpA_MwmNef+gWfeJ|(+Lk9|5c?{cu?;MYQTf3Pc)qFm-FWRU`48axi& z-a@&+bV?O6DiOR{KT#?*CaGO=$1IuGEZ2btXGF5JUKg7ks)WbYl1_U-_xW@{TLv0e z`+{6)i>)p`#*Tcvo6AvJBxjJ*a~%(n{DE$V<5ePYYIYWhQWp`Pk4M9ng&*?EZfxd_ zox-QVM&HkMh|jv%DK7Ko*XO|^u}c9GmtM8LGUTNCw)1W^hH9Wq# zo3}YuOhB1zDkz|HJB>Q1vf5Rv74p~HZrdO8afulr5$Jm!fIN`lbD*}Xh&+(YzOPKc z=b5M}vRA84&CdRzRMOY1=hSTccD0Ow(QM@e+%Hz|&=@bsXBg|*U>aZ^DuKwIH&*do z!T`w^Yo&1Ie9ah%l4eA&w66Qk)UZc5vDeqhG_~zkk6D%KJY$}x*a-HPDTXA)M-6@U z$s@vFdfq0<{P`#u+q6{qBdQa8=!dQW_KKus&&ytwVTUI`9+6(IU7#~W+7=F61ba)^ zlGq8cmu8S5y~f%r_}G}-SWA-Lu8SC4XmvzPnHXYn;y5l{i-t%}_h@Ng>~N1dL)LcE zVCsk44#C-Z>Sxo*J>6QN_-x^sX(A*NyELao$H<(w{Yv)dj#X5y*(4%3Y1APzRks1= zdXpR4@4pRhJ(-}z{hcF`MzroZK(MB%tvLAMz)#4hpd<7p9IRicQX2HkQHX~Uh8X;| zjjd1o&sYOIZV}`K$0rIR(lInH1EuwgG-o?gF=+xWi5Bm|NrfnJXF@gosNguOhJ^Vut%9=LwR;%4@Q!r-cU-hzesr-w=Cu6P~1u+ zmfKb-&y-z_)qLIi8D)k3ZFYkV(aA>|M{D-A#2QKz6g+)31R4DRUNP*7GrNV4LF-%U z=wUeW<$*%`Czhk-tXm)HxLxyN2_w$W%X1A$445Zj$%|BDJ}@=(4YDw=+1y9-M3(TS z;@kDBV9kL(@5L$Mk3l`2h95%-W|WyH{OB!%_niy`L1f;#=e3&QpAbMCY++(10_$JS zcn^#|?tT+PA+zsnZKKmm2yQ~$@invjzH!}za6UF~pf^P2@I-^5fakn6zHm2$eL(#7 z%#P(1k~o%c5thoV_UHC^)bMS~)VvF474XZC96t_A%+d!c-*8WnxZGzXOEhwoVSWG? z)Nj3*pDgpJo@;aciWBZjTNc+APnf6B)0^y|!DZpmKA<#FA@o=V)z!@(0pl^B(c?6Y zzyjr%c&ku%6;&s()>X%GdOYGcpHMb_&ta z&ed+z&F>WNkvb+x&Wd+&G?^2PXP25EPCa@o$D>X49i=4ciSN+kQWYqO1$|~Ib4mqL90>)NLQY8}U^k@s57MJtOwU&66WBcyC$@|O? zg85-%gYC)GJX{URar(p89gRL54$)LGUCH#(xCdvo#?nt>nf6gPGqFV~-b89Hc^sn7 z9#7aiF{SeC1a8c{GTN49MmliJMB24Ow{3SMq4HVIEGzbSrLW$Zv>s!>s{M^Gcq`LC zma~nlMA61EAm~$&$nQHlWPdS~5Kp1}RZ0<6qk-Swl(}L;SpPt6P3`ppZ|5ifzcCI zB*Ot5AIk`hTxurB?#B;|g0o;uviRMyX8D2m+KXw*ce&b-Exx zk1DlbsYD6F0@(J`SHh84O2pR%?x}sfGc!cmV*RZpL`K+G=8svmK--liy71fpL zWfSJz2Ck7e{0R71AW|h9DV;@FFB2EFJ3NGmly2Q{bxs_Id2rUv?zGuG?lv)5i4eBm zL~1(9s$N-Dgc(mYv+fto}jlSC%sPmY%Rr;Zh) zBnMZCX3GUDVO-76zM;gbXz-$jAUx)9)e9F`)FDD%U?h>65~J`caQ%YQEF0uYt$QEULSc< z_hUCzjBwcgjN?8KussAsz($uLT8B~P47{QcZA-k5BitNix`SkUEg@1Xp zi|TfEn`BPJS+He-I_Y`8f!6C`78w;of<%UODVizclD{F}?(-DU9|u)_ou_X>%*BfE z@rORaM@R}-D^MZRx8XawS52Cmu_Wn?hi9q334b@9p9;DKpfMPx-L_a}$yA{KNR=Vi+qt8=?xqG>E%<@LB11o(s7R3>H3U(gPIsqEWh=BzHHN`WclM0kCrFp z+jE`&b>sS3rhWN^G_|h*PzNV{S;h&uEnnZmm&q8aH-U=0_{#>~tLx$?42dU;zE-xwGyt#>tZRgg$Ec}-LBdbh>~as*7Uv5LI!E-m%_3YAGim(TJo2W_&s#%yI$MU06TyHG zcHY4&U<#Dgm{SP!PIxFBw!OGqbAgoQEl?=>S`t}C7-Zk^`E|VXm%Zk_PPI)pb?g;T zapaDHpY@~fdT7|9W0N1E_@khLGAox!%BZW9T8ysOUo}XwOJed>>5r0-fK+Ye*cLA~ z*mt}QQMUN*Cyt6zt2P)4ydItOV!SKdnwobg3Sd9b5crs$a`7^&ZF|RNqmvKEUIx*j z(1qW$sN9c>?hEs3drJ~C8{)!A|I7YwFH;Wl2nwzrOX80TF_ zGDxwG3#^8CP=htXRZR^MSYxZRO2vN#2AJgY$g}(q)p8b~FM=y!Zqf6EIXW?tPN2>v zM$5WUHJyk}ak@-{`QB~QY>Il0xqivqntry-#Rc42nyW|=wFSSIRJ$>?iJTgpnm33L zq1d0RPvGedi>lBSqNdqwKqF#*(`rI1KqBB2|Kr{F{u8he<1(`jL#>6LO&NtxW+lO* zVpefE<}yA5rpQ%GcGe=H=-4P-SdgjX^B|Yd8jtO-mesFL1*F+B^)ELC4mjhPKb)9a zPA3UoH}riJQ#V`8@cvmzf~=sy#LL~3_{K|^^uj)zu(Ot1ht!3**InM!5dt&($$zmM zL&Q(#yS5@|=jA0v)pRh2-rK%*aL)nZr5HqlD7LFhw@Zn%|2%8Sci?d%EuhUja2*-# zPAwBb_6b1VHby@^8@uS8cld^oeK04F$$z+p0l|VO*#sYd@JS8EYnmx0&{ih_Z@p0>< zJ)4cJ*7AMb)BFD2NyPJirgI&Ezw06p2geltPh44p5){LdPf{{64x!j+Kk>y)O$!)U z>v1fmIPy~&NM}vt$ENlm;v+72*c*Y(<*ZinjlZkoFR&W4s@I>N31?bxx&GdFYgXHs zT0U7{H*{ctk%-xEc=YSv5AXl)_a8{t53MqI_)0H13F(l%zQ~a}Tpd6s89e8CRPQUR~P|`KMWwlzujlOv+?6~|5cL1Lb z`NL`Gey=*j_s{P)skxeWjt-U>2pJk17uiWj1SR);#Dqej=6}wFva<5j|8goG4q7Zy z-3J^K6Ej@cf{Tw|(1Uio9tG4wIeh!qxE;dsL_rSUJ;|vA#UfHNLg@;*gvt~VRMLp;A|Otyul9F?S}~~@LU5xX?bIC zcw`inr1YZu*=ut04sD04)h6b|``lCk7x{GP1zGK0eyxS!QcEMqc#pSG_m;mlG$f=T zlMYpkv@Pa8GZ7t7;2)a7)?bc*NiM3&!lr0GS>pB%QP6i~cB$28Fc5GvP*YyiSyOQs zk9_t8{%#vbpXP4>iHDk=%ytUe{fPO5J!WgYKjwI6kX3pMP8P|cLlzBGE%m!BGso3g z&G-MXc~#VO0S8x)mwBOF+3vj1sN3^!P>3>ti_l^^Lm2=AMbvDD4@+ew?RwL0SxnpQ z9hJ-SqUX*d2=|hcv z&>$XHN=-}M-@tAoH85K(;bqbX$E7J6%7_rTR@^VY#U`LHM<-$l(8H$`xvx>Hvza$9 zqsPZz$!hsx@)Z06JBkPG80+Do2eu7^sq$v|IhSp6V7iC{PNu3@G)F$TU@tzJ8c{`& zhOHuXU~;y>uJsvGR!Ysof?x{{O8~0I`eE$?9F|4+8=N*{+E(R@YVB<`rUVQR>riC$ zgGk_`%QTDfRv{91Zk7d&RJh6DgL!x;;Hi0uw3IeA40(P}vrtp{_J*^l09pNx0vQ6QG@2pDa|yc|~Nw@>3uLN40e@mfnh`vB^u= zu14@)Q6@qEB-v&krN|1%Z1E(_BsAK5udGGe<+tijji_cqj4jG3xk6%+zh}GTQ zH8=L8qrbqyA_rC}(YUno1tny~k&#%18rgY6X&hSNBmy)KV`|{CC-ZPhePm{4%hNX- zE(#a~)MPAkEmre}QHzuT1bV zJA`LmAx_u&Tt00C@;$??dt#w6MDc!8HJO7z%Vll z@D`DIy~mwrptu|@4l`dqYPY<7N!tKMSmp)Cu-_h~fSwrI%+^kDtx;5H^SPa!L8eZt zZ?6YNUj<7|G^a?zDriX-2X%_SC7>!k%KVc_sTA;jt!ZtwAY00c`%#{dt6B2L{gPE# ztw7B^YoWc4RV^u&;=?l7Z1nVgvITEihc|-~0%_G4regc@3Co}Fo;W;S;Ghns3}hM$ z?Yu(xy{!zihQyOPo+(wuwi1aTy^R!GlR48o-(s2C3kNIbjefH+9t01zsSRRnzYi72 z0);MATPRAlYL|EYNrE!Ar_mZ9pF0|&yYYv!HaNE;VxtxaensI zG%f{i^nC;p*?Ez}wki%d^1Lv}RD z>jla(%|j_TIaT5kw7%BvBq__|MeK3pZ=0X*Qf$E^TEsdsm1+rrBy7+ojsOxyq{hTi zRKCimUM~S8CLpz0C`&3jYJ8<$og@r%_>Cr9);qqypqcH&n#HVLs zq8tAtQVX1>9gdxey}S_MuPoFXgIsQGhhZG>Zd5O85iR6#fw_}I-X8lPl36SxVR75ejK)_5DaZxjxBJX;K z;)*cQ_vPm?h0xr<^qGYUIm%))S8ILt9P*W<1WJ8yYW8CXr4mr!J8Ls=Aml z-o-D|9Gq@zm|IXb@;>gvEFYhr%Lr5YZPdWI7y=@!>d|61Q9RX(9|HPgu0Ay}HLQ38 z{Mqv6;wE>X9Kl$nlA>{p8tijE+D@@nY0PpwLl@(h_6wed05Se#N{5D(T%@~=mgN>O^r ze?wT}zai|^oY^n4DADjwqsMmB z4s{=R#_NOXj~tg)>{%BMY9USnw7dyg$Ps>RO!J!HUQa+5WpKV5X@eNTHK+-cyym!f zKH;+|W0)xclLZlbb65F+L+ZE2Ufs?P91G%uXL7wIPEEw7h%)F!+Ur>e&KgIq7gxNk z96U-L7}R^mF64Y7HV$p%)(y#)!_+&CTrnsh7cZ8(6INh+59fJyia{?l>^RoskZBbN zf{q8&I$r-uW6R$j|6b2b$ktIu*OPiSQ6`OUg_!Uw#i6a6mEepE*r~cB!fZc*^aBtXKvS>Yq@mn}2`J@bSfB`M{gR23a&NLQfU9WK+E`uxr{TyslaN0JqSc~*b0WiNcb zWtEv=BAOQS!Nn(|REFU^(`qkSc@vGeJ}k{;AvH+3&g}$)P^KKYr+VY4ahRx~eAZ`k z@v0!^NLFXZ#1Qhj9)@m{5eTg7Z8MK%?e1lp^yU|Ic2ftZ?6eQGMl$#kJfg|8gSN0( zAVSoXlmiOD0=pUwXizhkQczGA*VIgA=Hi-iUhRA`-{`PqNl#B-H<7O}54=LP{QC84 zT|)z}maJ^({`OdQT>uK^-1+{z$$Yg*1TzRUUgxx{HorNXV%2_g{N3%>f=q!1&!8x9 z$32mG7}wjykKIR~t%?}8fXZl=1X? zq*VY>f%MIQmxS$?8eKdZ1Mbh#G6ana$^@hXz2)B_wN9}cuWpW;4Ps9h?|yI|D&`fL zoN|y3{Hn8}zJ`*3a&xm$vc ztCIMYLsJdL)ur;I4ICFKi5s=|L3eue4r0+Q_d5Cna96J0n^$_N(bExntnSi3jkMu@ zAI9f5bmw7`M7<`zs?ZPYGWg8RzT2Lh_-=W%Nm;DTDlb1}mMAolZ1D`{UFFpWK~i_G z2+|qhCLMQ+KN4p1r%sGWiF!YdT8GJ23bJ0Z;D=q!VS~19wFX^OSd)x|UU|t@r)y*! z`Qc1;-B=bnJddJ3aH^l~wzz7|$!9m`nCjvWSX&6KLMFjrPrn~KcVdA&gHQo4?v?s zy0iYRP1LX4lQ)xRlE`k(HFbmbQH1E+Lb;1K-hGo9;^}N<;IRhl{l%OGddpmYkROp! z%LI2Kr=)B;{_k`UFBO%zoIy!2;CAE6$<5{K`F}-0z&+>4Rp@G%!MD-=uWSzzGI9}n zvqkp8ET7n1xj7YMJuK3yhfStayD4uLUs%WRi`QZu*xyK2Ql#0nh?J7~Tv9r`DUy$r zny70o8C|jWwYx#Zmyd)!{^ls(U72v_&!f51{jn4LWrWgjFeGKZuMln$Pe!i1Bzk?_ z!2Z>1C+H&~f57XUGO1I2NcE9M5Dq;qJYnwD`3fWN=Rh^$*Vlnq1AvtvWaR z2p8ohN2YMXwjMotjC3>v3v3%(9f9Ll_8g_L6(5);S?v*>uBd1bEGcod2n4(&Buwgh zTY<5`Oh!HCbtr`MS|?vZN`W(+Xi&%hE4m(Mn~i&+1l&rw`TZhFM%0Sx?l9Qh-D=Q50Hf37L682zY+-2dHgOI9yAV|-lYNh% z*X3~=YgOP%;K#>7Jts>%OqxF&$vaumbL1Aes&t>=IkNp4xh4q=vc=Qx;U?PZQ@)0m zfr%4fTt2J(Asfxq+doZm@}F@^4kU-@j)3K-6wON8Q>*xvUxptaUZJWf`x-o{uPXoP zlxDFMvv=uIj>Y6W4LNJ8jg6u@T}GHJG>Tv0a1{uLa~*Fb9eV5hl<~3+GpebnN22#k zYd+y8aymW?ErzeJK3r@{NaO83XE;T;$oD z+@ir@vAk~j(G5H_Q;SQc)lqc%h#(|-+8bq1DB;~df$bG$fMBeQ^-r>lFi}+An%I?{ z&64NUk4BiX>r0LpagqFRrvf8;4Vv!e^o+W;S-@B;N7%Og7HzxG^<-vW>vbl`AhoM8 z<`NQQL^F8{v=`Pv)HR>%hX)sUIZ9`_ud6Ttn>d;@g<7OlIn?ebG0)SyZDFLEH_7um z#fXR}kfAaLhKWi&CF;kBRDjn?55d(*q6sEhMsVxRn5{Pt;(#<8J`ZstBCOXQaeapnw z%{D8#-|VUQ}H;lo&D9m>{!D@Bl#zpisByz1lbG=W)w=5G8J+vLYhynES4lKUs+-UaE>)d2? z<1DojH*Q0dqS&cWNXvQE*9nG$Z}uTm8^u+al?w4%kfj~{xLM*vQF+>al_9p>!vQ$Q z#^PK@ZQ{--tZuj(H^fPMf5YzNd>`g)x+s8 zWb%+U;D9FW=2lDH-`{Tqqz09Q6rd5H2W_D!FJGD{?l~468ELMlr1a&-j~}C^rlwYM zq4X7WqOQHb1aa|kz?RDD)2C0BfD^@-fbEpk2|5O#WNrf27A$%ya<3S#ko4TF)&2UL z?}xg%y15^O%kEeCLp*evh(kf0>fSlhdhBkE5}c zsx0}y(t^USaYb)(jdIw!?{*mfx2HpLP5EsO!4sI}d?LJ)iuYb)q7;f${Lv(l`?Krd z7A7-j-W!{(#_n^gnK9*<7l?X_srB6OJvgjsUHH+8gJb!k25_J}kb_fA)h5*VY;)b1 zHfx1FUb53IN=|QU$7acs6X>ax*gTScX(ABob)=RA#tseIhyW7Vx+_K$Ky0nu{SR|8 zxyx*|>$=L;6?uLc+pwqp#c|L%Sc6NZH-oFt#UHGIR_>(9byI zhMi>}RP2yl=~)Eng~{PnG~ng|=iVj##aseuuJVw*X2u)0Wd`M)SjGAcJ<27U) zc_`;gUxY2{e+s?I{>m|d;jTt~!^eQX_jnNDKYcG;cn+f}z^Rf0#hvZeOrq^u+7~Px zE`AwMul9u8v8cZR)4z9-4wv6W^ULqB`TRe=uEhyqkO0lKhD1#@xaVRG=*j{Vn$GWk z(7~zq)jy@qTbxT3RPd@u1 zma#Y|HeW2}KDZ4W<1WcU$Mq4ZuWoyhUGakNyIyKgNw(p{?Ju)#yN1f4{U1gQ?K{3s z5Odf5eqX)8%?b8CLjPrf#yC*C0N?vv5W5~0!Ag$)ma73cb;Wh~6;pIHw{Shn;?xL_ z2sfYjESRB=?$}2A6=%BWepX5pmEYeOw^)C;-BW7D>)EPA#r>+J<_&OZuJiu+lwZC$ zwzqYL0lE7_!|D<~YqzQiH;gr#0jt3N8_~@d6hIv%vi13TBrwys4e0H~yMOp%jZ#*i zK`!+J4hoUAa$8$l3pZK+&4P3+lHTeCs4oDdB??~~uWUC9JvX?o688W&=>mmkDIxfF zhUoN#L>^5Q!d>*PTnOza;G6-p_rh7IbgOBB35Fnm^o!C!1+Ua9Y!ii@F6lR3+jUw1q5J$DfoSizEs^K4*NcvdjeRHqG6n%bG;;QvTpM5^ zFvPvyRW(0uOF@ln`V>TD;S9uHH5;BkiOZdZ_Uz-ftY8`zkHKe0Hp@5ROS6IKQbckX z;F=*XDJg%noL#Zq)>PNdE^Qos0d)!mCI<%N0Ol85#GX%0Ll|PbJWrlYi>m;(*B8-0 zSrk6A44{2F^C8pTT$ea?>0GOPgvf^Gs2=5d^&ANtv*z+W`gH_DG^fTm5UasKPg)rw zuI{1k@rY})Y3G@C|Js}TD!yuv2N=Di!(ffxqGUF^3RLp2z^Nwxt(zYDARAyq*$5YU zVixg;!hC$Lz;f9|p#xc-Y~VWad;HL0zL>G+<1`k^WMKH2O@Wm%S>KOm%E|)S+azV~ zzW-`|10Py*#Qs`;0UTD0Mc-T(6UPrNsszd|wUmDp{m`F)k7KS;L#@yv7?@BzbXlaM z@CT^(zaMJ8GylZ8^)cX+@<5_Ga|7qV`K403^cfZ5UfAn=u7_luQ zhvdyUvrN-WwguW>FCWbQ&kMUmIsUV=d&S>p_vAm$?*Dr2e}(bujKA;s%WwRzU#C0~ zsP`?oBL7d_=~o8qSomjmWe%9)${$=x-#;)g6c!!5K$)GDmB$m%+pDT&WWzF?X94(5 z?y_`U?q_IVVAAe?^zyEkSOcb3WsvFopnGY4uR3be`@LI?VC((gO6@vN=f5v&)<9P8 zJmlMC)hlJ~GgOd?6#M<&w%_k8_8`6GNdA%;po}@WV}z}NZlkcvY6?)>FL6J(FrQR` z4tW5r{vcW&L+90zqTxRD+g3PVf8C8&^>WOO0gV19yin#Qdey1XL89eT`3$53(eN2r zNiXt@AUdTJA#tJMOebOn+Uh}*gy{Alg=gGmXt%?wFhR2p2|Ipkr4A|$*G=QyiXE#n z(`q8$J#hbh@1muf3Jh4~<>eO=a$Il=!R2Fpcum71tMc%JGlEMUgOKO(m(|IWD)X1- zanNOlCv&3I%RHjvWdTa-Mk>!YsQNVXqB)EF*rJT58TpYhVIML-#JUT;)nt3fV_Rt# z>AS5!!F3mzWIdxBfCV|YQJC5x!-)SacIzTL;2UetVjV}+1odEEmauVxPWHIpJYsQO zb*GxX8U$~5OLS@6=XyZzuw48Rr+Ov;12BjERlU)wp4ce+r5Pz9 zkHat^3YmjSPhNDGM~&_PB*OMFwD_5WdUz1!dF?J{Tn^a0bBCMw=C4r+ItPhP&5^zT z@S)7&l!zg#%z?cjaJ2z#%gvM zgS)swf^?+taUOEN(6_i^k}yy}LHDj-k7L*>O+|n z2jGv08W1ai6jD?oUk``h-nZs4sS{?1421q%7RD+ftUU8j3^HrjtJQr}>DW+0j~a5b z7PHPikUN^wrd7ujMf=c`q3M73v5z{P_$?LuMb^UrW?E4;pn=H)GdztR9$!(Mtlb-| zuhXx9wr`R#Yi0Fdz6Bsp=2#Vuw$Vei*m(Pj7y)bZsTjfxb=9ySnwL`C3~+2nbCt`CXdJ^VvWLJpgv+x(tvEZ}a# zHt-b)qVG|eo1}D9i(h9f#hrBx2ov(D1?zI>JsbgU#sS=M|B5Nai+3@}c!KIDX+iq8 z6>`=}#5yND41;0UeM9KWoskn$Rl*$uPFO(_M&6yD-uv&sZCZ>fjBVC}6+cm<*Y@NB zqOvg=NEIddh+>!T9W8xbnsi=MF6u)B2l+kqP3G!??g126z3@*xPnUvMYFD5iC6k>* z4vy1L)3ZT2PBH9Apb5xz`5AqH=;mTzoVee{;toTq&j* zwF#z+)1ASYOHKw{-?;%3sgF|9#FNT*>-P)BN`i0R_U<;E8}(#ZQy({N=9?mzFQgH`G2X3Qid!|U zZfe49;WX!;9a-A%j+?|85wDw3P@bO`*25g1OAF@A(CzO;7haQCRkkyCGC4(8l7|56 z_vtoJp;^4kDp)H@{6NP_jCb{_&wPgNU3pI5uIoeTtGINVzpl!Z=eNsG$ z(Qa#V_oDqY+XiNS3yz$}!qIRBVs1qteLaMPDaDtAp@FXUejVj-5K}WehFwpSZu~6n zN@Y{-2k46jRSs^61*#H5o{0t&u=QU4q(*JG>d&jJcWd2%5G_7K(Gi>>Z-%rZ@M;N3 z2}}2o@GcEDUKPPa?dh!i*@_fBUzu*SCGkG8`M(>HyXSIp)XgE1t$ zmVR80&PCZSIvHZH1K&9g8ZDM?BxW4ufD#;QhOZD%eCIbgwi40(LfYC zC3O3Pn22fV+|JywQjJGZ=i)WwSfFiKjb{+#*!}xJK9b^2hLd2>x;gHGI!=*w-=yZiJv+NY__4xn%0Cyyv% z(Z?@5KX*<()*ll|y3K$Rr11hhxd$YoqS7u6+cnpy(aQ36`NU@5O*^EDZE`(>c|BTucKrm?Uao{ z>P}*x-&(^p!BbyJl%R+i9b{>zb?-?7DN$)7Gom5B?qgI0W}bLuxey~TsL_N7eD^?v zXj@ePP&%PS%*UN!pU1TPI{D#P#6~J>3@q$gNBNNXbM9hd7v)d9BF9v6iP`~jNR4P* zDXlD-&lu)=kLwH5JKK)b`cV_MLg;}koqoxn`lX!$V)hh{Fer269=n*x0OUV0+6<>BacenTRO-ngXiy=DB zHBREH#%`D?qVJ|v;hb&{@fU^9je-l6pv8gy>iu*`WuOJ4$+BZCRCyrk7V~(IU`(Lk zjVSw%!yRMjN06o6EAaY$`%&1GuE-(*)$t_#X!(u-)z}H48D=7m8Okzol+Y=d9G*y? zah4~r;1X~qMAyJ4wva)jc4dUck1;QTxYo&L=q5?xatY`@kpN=eUR zT{5{XP*$0~<(XT=+*rp6*xh-;>}W%S+$HoS$Xj{*E!+-4j_%@FqOUGKqH_*r0yC?& z&Z=d-5vzvQhWXr1#+#jD=xXu9abL`UWB}!Wn8D1(;AI0CvDel8BS``{IDpIZwDPm2 zVquF->*1Ip94JSf1^#-8{U+?R`Z6;+-iIsfpPyCT z;!^uM;aBu#erLIVb8VV#(mSaWsM-W23}I6% z^o)AvZQFSaK1~+P+7f5V#_21wJPUKDIK85z_0sAKXAXsi!B~)E{yqTpg$g|5SxISt&^^|T7+_A0L zd3U^7cFuagp)5LgWw}(zYP?s#Bv2^7CUQ~Y1dfP@(d!~Blr4bMWF^6IoJk$l$DlaN zXyFrsfUHWr`J)7}mVFSS66uhn7qT{2vsF_l)bQPtruisHaF}@0Gngx8#J_TO8ZoAP zKba@cta5fIB%XaX(t4`iUjP%H-&GUEH7eY|(^F~Hu~Vr$kXG{DdEGG5dbC-&GSJv- zdjGtRYm~n6(z=ALWn5u=jW$QsA>WxRqqU7M!XeUOC&M`~zz*NAD z6m3yB$VrI-dI<{<5?t&rvA5@x0FIbgui87-TW^4#m3#G=!^NA=JUDuMcJyl{V8dk- zD|6^$za7zpyFdqAuV{U0fax#_h3UlfFj(dqNQDF{G#P&0Q9bt8Z+ zA6u9mIxcbzm77BkRmEiVS3|dxuKjG^dN4{kJbcQs&+~qYl7mTWDCnl9i0*f@*pbSZ zFRx#98(D((92FkZa&r1XKf_d|{S2(amgZXT?dQ^%wkKT=539Y~7YOcYwV+bSP+Dc? zh1%r^C5vgjtm`#2w@D2dHd|C3;8xW3N$mK^QFlf>b1zye=JA3$dF5D<;>Vcr>xm`(>TB9_twmcPCwu8 zjHAt`W-B}>7HGW94Cy)-xEUAE`&Y^W{I*T-t0jw&4ROIAnXU_C{AkhrDM>|y=044r z6&9NG&{){3XGAUnjr>FrpEwsD*CFgn@UUqoxv4yySr-Uu8CJ+SncY99Mv$xNO^5n4 ze-c_Y-%xKGecr>eV5BnC72bf!GV7yRMbfVN(n_ZM00+M)-x}@V-K|+EN;~yqG;%H3 z<*yUoCO`>(y&1{V?Iim~C^7g=<}9!51dX2my)TKnNgr|aniLXHpyV8*rZP00C^}<6 zLcafCuBnSj_D9v?^AuQ$MDd%(Bj@b+S^`Fq!QXn=_t*MFVWuvP3(G#~#@FSP3 zauG=ni+74X10*ez!LwvZ{z$S{GgSjv-*G`$rlPO~i#*GBIJSn&n7y3_SVeiAz#Po< zLRm)DDI~p)kKJ+YZ4r_bzsiMX+0!7DG_1tgBuCtM-|Z)i!EpSX>iI}n>*@NJn2p0m zu~MVqIODvjqWAiZmJK^`MRo6NzIzO!4(t=0_J{eI8&3)jrpON#zdiCm$ROj|^I67N z!mJx?a;mZ!uw0uOrx+;%8KmZyo$g;I8o+}WNZCg1+*xl-Ihm+)Jw~-8i^J;8kv{x0 zGkGm9PTXA`g@oV?A#T2Vx}VgBjbZ6h!wHU(0zpE#j5GZs=gLH9jRA`7W@4PQQZ#`$ z@5gMDpQNYM6=2a#Lm0!#Dkm+Qyi1Fx8q%i}XDw9mTkb~{Lc|H_r^n66X6vWfXga0u zNcZ~pJX4t@ZF=;ibm^^tWX7h*c!jd#f>t%o%^F96g#gh z&Lh__G41tFh2Z?20-XmFUj&nx>b(`cL;T|^KfUtcirx68wvokK1vT{?ZQSxG;)%(( zQ1vY4SKY8IwPgVHIqg~G`4W|iPh(`<;-CqB85qrzlcrUKL*pjH1}(z3OEL%4f-(jm}> z8Nq>2tH{$C&6u-zS2slLI8Qy;V6Q;todM%`PLFW86|^DvqEZd=lg>uG$kus#SD5@) z!EN;RlVs}!N8d0?2KL+RT0DzO{ZDZ5{g~EU2yBsSr1vB#o^)UNu(4K1O4{3($Kq0PokXQL zPwY6y6?O-TCOP0-b5!rwDHpbMww5Z}8;l;~)jylmk!%})*M2S4QKV5p-H5$`ŗ zR=KF>{n?lpbD>TuMgmi|njESKS`Q04Nv|ie1&;rc4(E{x3K9>Y#PF~o!+Rc$i-B#oLVFm&kIFnKW=~iFifLihJsAiVAc_Bk)NH6G zNhkj;90Qh3P3jYc_rM=&sm}RSL+-i(YD|M7Ei^_lscwFI=DR7?nhJ%aEv7200p zlzMt>NGGFHU||jH$R3ZldAhF2ZAooVaVDcxg?Ky?ecTby6-imVIeOnFGwg zl>c-!7VA8!Pcq=~l(DZ#1wfH_7r(t8soSBdhj-JyZ(~XFKoj0aOz-uYOIFBBOvDj= zEiz^s;+N@!ctOCOmFeNbW5XG|f-|3d<;JHiYeBMDz7;wM(c&+nRILRNR-hH4ZD2ty z=Zyq)cV?No*TcR7`CC;d)oGl5%xsdFztf5*g-!3-m@LZ7tQT>^jeDa18tqhIYPs8H zH*u8J-xXQ%E+hWRv+Eiu^H-i5t_-)f8w+LzLU8A zE7wfo$zk_)yKf#iv)KNmV8bizwD?q-p$)I+OZ4!8I46V0p6l>Bc`=_OS6k~D^fQS^ zoy98UbVcXSU%EJ;*gRRG*7&xl<|SYP)fdY`5juJJ_gg~a{Zp!5EegK8#CHG}j*ciG z-m>YA8E#z(o&D~nXHdn7{Y#ahnF378Q$OBYV^+Mw#Tzr<2{;p(&wjPN$HMZ%@QI_- znA2*|gy_qU)Qf{aITU`nBLS<}Kv$Zor0p7)pb~bb-w)(EAV)YYFY5hx4U|TV7>j7s zye?N&<0uD1>%8%+avalgw6lnAVh&UU8f#@l_`{5^U_x|49=g#NB}(Dp%CU+ML|)-= z@oi>vU{kmCA4J+hF0(x36^1;M!M;uwY)t2dt_m@X#ZlT&nS$r_s!g^ zG@~s7Bib7lV$-WDALf?ls$=|H29B_!n`(D`uG8xl7dCngGrk2;AlGx$WY4KbHG>JM zJ#D6n3F96tGBoiY)nwmGQ4tcDR%P6Ip)lojAT~sd1S)#@ zM+XR%NT630Z(v0KOCT4%GF1F1M%B3&-v%iCQYTsKN#A!V&d%zS3<+?+;U}HQ(QAC8 z$)VLbfh1|cC9-I}NTw!97TtJNZF~+)%JNH=s}b+{@<|ZNY=K-*QK_ulzR4yte7ilsyHkjj zb|XHqbRhv;FJYAt88V$o_L$wI|=)4t?M5(Y-~V>9bN`ODgb{5*)!e&9QYxF z9xrMfZZa@%F$dnbG-i3GTbxt|-?@*dd#9Wz%tDT6;sP_&8`CdMs5PFNCh3z95D);~ zJ$4n-y)gll=e$;hsUpZDx*P$`NrY%l?C z6zS2%!C?AAspwDX@qh8f>^8w2c4sx82>$y5o=OGo- ztcj2(Sw# z*4wFYRy46f6mF?W(H=;)1Ypan7n!To)G4Q2XIsKxWA>B7odvZbGhoXhwJVII9n#Iu zEG}L&?=BjcYD$ufvNo0_-9L-u_iv3m%6Oz>X9%sb5q=y9%~`bP9ZwX*YCk}XRZw@^PJECKA)+&O>RcBZ zF`2;gEE=|G*LNWjUc!GYz7o9W#$b%;K_0YCwaO)8}s?)EeM@QKefbw1& z7CZpRF3o?wImon+xX;UOT6qfiPt4D>ynHuhOH0^j^Z*;Li7~cP304fnqs}Gs$+@FDVR+Z_SW}^vc}`|vT%V@9d@lcVWFXgz zfreC6iu76wqixCh`i$f<53~x^dO?j=%y9^NpO%^`-cPw+03J3BzkQVopY{t-m#z6u z;>(7UGLyxYNh`%hlysG8WNI9KFDs)RC1Q%6S$fF^TUzvFrE8%K;$fU4hpZbKdPf$d6yTN zw->OPfO9t8H}A)f;K?y{2}1Ktmd1TgNJ}nXJ+q@f4U)q)z;G$l45mRTmcQ&mhXep?@%j9uSS&m; z@*Y(zRd_-I$6G>*=&a`(+KYCDQp|g)-**-g=&o|M>DmVt^@o+3b_KMB6mR!ry*&1` z!V&D%nn(}M2a5Xgy>06cRsC8W`6_j2D*K>WcvrQS+@2RpUzzW_uVr{uIm}TUe2p>e zy|2CQfF%eaGbeFXOL)^CG(wv3g!DT#ev8vLp5DU^cGZBQUDD=eo`P5n;a4f;Ni)kY zhqR(eXGHD9-Has@Nh6<#6|}GpV(W3%#`6PCNx)=O78TM#;3h+StzneRD$XQ{UV{4V zG@q3`Iq*6*GW8xr2ybxq;^ALiw&;zUM0cZLGi$=wNt{HgRSxp64UzntD2Xot%!h9! zO|a8Jwc@pe;)8Uk34_UZMR)#)xvUC+@5Dp4v-dUWe%5ZS7FB;?LvSxf$C%` z)HG(ZFfkcjGx~D(EtqC0l&)(mu@A6sLj$Vnau;R`NtDCW59Zb*2RN~^7qlYxr@gB* zg(p!)Ll+UD65&8EH&?ebjfj%_86fMuA1Zci8!P%cExoQ9NPr%XK!y?sH`(_ z@Z76=a{kAN(5Y9Tz0l%qMGCHjwNfmw5!1;JotN)L`1&!OAC7I$7sB6Ty^55Z6Dpenu7dEbYVacJYck_@ z9=)kO9J_%i^$ z$uXtFjg#LTcNyyNFmhYRtS?z+b z?i=2M$rdv3^FQO?C0kPaB3@wbkzS)|l-W}M9ur{CQhV?IJq5!8402^hy~1*6{`-4! zhxG(8_N%dy`2E$A&S9}kZzQ{pcJ^1pfH5?AS2O`Pq`MNQ)%|KN34~LEgTEk_p~Q)- z=QLfB%Y--SDRE>@iM91= zjM)!39^xPhFlrK$bo3#C%}6f1@C@y@H}mQQnnnG@+H|q30$)(qa=V)yNrg(0;lKo* zvI_Aga5MJ$&cu+IS6h@Uam2F!K*3(T6_(f@wTZg+W`?x3abQ$^N@?9@W9<12*Mq3; z)jsshVcQ$#+OgltwaA{KTn)L7D0bGJh3-#gh!A-XkAwolt#mgX6}xBeR&0QYnkt%A zHf^g%_D2q|o_c!#(NXj;OyDruEfn5&QH*K3I6wSm$gZAh`ZVL9?E^zh{)^tUx6{u6 zVI%TfXfng&2RPErnXlU?+;IU1B-Ci>!9WB($L#}>b6CWjThH24Ui1R z65nQmsjZ*%Ia|2CG>Ln@HtnR0eZuWK1^J>HRu%IC?_HA5~%nBTZ#!M zHZ1oIETpV{4)*{DyarYlf|C@GKK=$@3VM*xv(KD8^o7;cW@37Dj-bvaJs)Ut{mQCk zjto^Z6}J0(b?z-3+ApK3LU-48B3I8&Y#$n>y;<3|8hJ-{X^BX6=-~~AEGe#t3Bs47 z4Q!$oafvjgXlX_G`L%3n_OxMzZF?wVu28Z4HwC&|=|t3<34;O)WUl?f&MO??TF0n| z5v;jI3$0BDMUiZJ3RkZxbX+#Y*BXHWx5M&eV=6aR}3A2iTDM$KF^h}b zj#`Ut5_rYr-a>Q?04ZRzuO3W?IME)Q)?9N(<34(}K#)XZzO9=~W}b{y)MOL@+U&iZ zd#M}3z{u~MI%#xdR5*88{zXcl&_R1d7s`Fm>}K2K|bcg`ARP8H!_gCpUc*Bh|XKj6E5i*OCO2&IHpjK zN&~Nv#FS|0I^^p9h3i=<2a;a}4Q(7wZA`X$oRuXqdFP(-Ud?j=vPoNLD2>L8>bMmF zbT&HZ_&Yu;f*Qbx?lze0WRquBBLXw~G24B4qXv5)!N2L^&OTVTh9|;ut`rxCI+!!< z4t(dp)r1Eh0n_|*ZPe(O>=d7tK5x(=e)Tzdq9G}6>QP#*WuzRlCmJRAtZSPk!!*}) z!N?i^`isYp&MyY-4(H*w?@9W+7%eBJMX!{d1PPDxgiX5@*Qv;H0m|Ip62AIH<^5 zs@6uv5&j$gk#VGA{K)bzIA`Ezn=2In5?x<;(ad+1Yd!b`|0(SK0vsgXUf8L+ zo#*RE&wN_Q_b>)t2W!0cBSo_1v6S%ZS54?DFR?0PtakzYYgD2ZppmK}tl}rw-r)wV zHfmCAl6K2mJr|m2Q@U1Ni^MAW9(@vA=uF=1coQ;f>0YjYRl1o_$JebA&V8hOGcF1; z@98ujL41(|hw2TRnFVn$nj1&KmnpO;BxNI~hEYyX!~BB5Lc{(9a;Gyv+GpFY;*=QP zLKIm63Kv0B^)t*&V(^DP?t;_VMDfQxQJ!-E1{#Zgw~hC^5b&;uk#C>bPJ^>IHr9Vx zt~OPvXN!(x+bj;g8C695<|pMxpVf3Nxur79w^_)IYl zFDBx%ph3{?@KuWcY@XRyHSaKgixL{VWR&aS%`>E>(I z^q{#j(RDrXNg8c6z??El5mL7E@2Hoj;|>ZIl5xyJUZ2(}QHEk@+eM6Ez{ zx}2>eTq0D&7##yL8Ywno9`TuZ@6{A0u`2=(8}ge8<2S>NWfs2jW*y-r5}AiBKdS zPHO?p@gQ>WcOYk@@vgx;3iHjxmY0dV_?=M6IKEB&2!fVi4ZM0K$Bot7b^&!P>nQ6D zgZMIDn;PAzQJ`ya-SHy4@i1`8&8t;-G1YP<9F>< ziJX}*u98_SiT0AL7l!bNETLBlo9H-^^Mb}X=K5zwd>;z{ ziAQzYIsji5|KA{Q8at8HExwWTaW10IRk+%{TJeDY%IYE8G)frfW&t?gBVI1Er)*Hv0>d4vUS=ZN1dAQ=5qa6VUUSI61p`l%GG>G9yY& zP0g#HP$-D1V9)v>=h5Wv|87aWe{y}9QP+m483#Xy3{1HF)7H(wp-d>sA6gTeV%5u>}?<93CSo#18xLRyZ z@H&4?r**stu$k$lqa{P%_`95a`O<%H{LUyqDk4L{-sFO6{VT~)!xFT%O%Qq-qxiS9 zMaEGG{>u<JZaN=Xvo^GFT093aIZI`0hMjl9VYx$avzli|fdLBXwg}`)m3YSrl76EtbMtfHO)5M+$O$U&EWmdeYT^_IfbmE{?Au7kC^kTkPNNj;CRhO6Bc zRQF*tDvQLRgRcV(`;JM6do@!CURR=B$mp<}_`=S@9#y$31gO8*TAiFfE6{W{M$b^&^?vOaZL&@|I{WxO=~ zMF%CZ)t^`yDnKaoF2s5FQHXFMQD}5F2eC<>(tB={+%r2@1G(5wJAJo5!9hqlc}E6C zv)IwFy8Et?U$`lbr1?!lZoj5`39{P+t7Jcm1@!A*1d7Ws&aXuIuAg@n>{zt$W~FD# znixYKKka7Vr0H7b2--0wuOCyJ)^n0mbXSxvLG64m?&ZbKXA}W zS(c!pXg1x)JO1raSczk8Cx7;`!Wgs2)i_0FGq&Tp=lzGdFK;sTZLh&RAxrF@kY-fh zT}WK}K(Ijj*Rxhx;&{d8ZZXTAgxLQbFB50?rx}sx!HfwfRa|-r^tj1>?Zfs z$(9<>w}Wc*Iow^KeyC@>d}g2HIlLq(5VIUvCmfp>@XYSJKzLDO}Kmq$O!tBmPb+m5yFGRrN=7BDU! zJ95R=f$CcGad~lqtFuzFtTTSJKA3y=B6?K1*p{*3n}KkLmCu24&O>QH6F>Px@QVpO z`1V>D)AKI41V3fHH2?RvpLdkSSKiCYA&Sp*kP{^qv>P?}ZktrgHTJ;;2!0U&(CB!u zTu4Jh6VTpv2WC!8ZE?maE$yGLHvG(%jAQOJQ1|L1V*S0FqYMz+dq3(?JC1K9)k{V{ zCvrN8_uYi#T40=$l6;@V($RA;2fN1_Cy2zbWh*E12Pz3!fSOk5f}_`dtVZz2DJs}K z=NRX3e}d>Z*$9bR@V1VoG*hdX3BO5RED#ayEt3xsG9$PpV8t%Brg5{zCS=!RjLOQU z*DUhcm$L!es1iu9RS-VRLr(0r$x%Vz)5kQMYL#;*-(nknj))^Idi5x>pXr%dNo1uT zC8F#BoKixB7*`H(f4H}np3D;pkSeTP<1-?PhW^D#j~nB`9X89`V4AU_Oc@4evAo;j z7qCJpyB`mvy{pndPHPd>tZWz@gjJ9d<%z}Ep3!J%?CtI$u?MS-MALJv*24!q$nx1j zuc@SK2NvyB6T|XQz$jxC#WGv6CAd!-Jcy_{BgPQLrEF!kS6^tTWQk!x=)seGwA`&q`8D4G;m zoaS$dSBJx%P-4yXdTt-Orr4U9q)ZT)p83>{7)E0Gtb|0|gdqmEnUNruU60zrGdfkK z=PpQ-?kr7A%q`5Z7+3Ob9%-I{nseV_RN!*N|C>W7(O-RbVwfCgT;`NB3O z>@mAYCt9Z=uBHERm$+Wxg3x>M50I|;=sjlhC3a@>fv&EMxY7srj}tWWGXx@FRe1T3 znD~x2+)e4+hhDQ1WeZt~CCoISY^O6letp_1u-*4IEutgEVGxxR9FaV~s#ncN{pEUeg~45jr{lXf0y51Yg}YS+ zpJueZ-hThbi%Rq|!kQfM3*qh&ZsX{Q4y>Ve3*Fjfk;TgfZvsVVjtWLuL8K+z9aWAZ zbLApDDq&sytYb$Q>r=KdarB$N;VfLve>rAkqpvL@(kAP;%kUho_}+2h_v>o4kU;h> z=GA@JCZzuG&7ZSL|KP@Y@;oDVWC@>P>pKITr>#?|Yu~pGt1T?hH-<1emG%DF3696C z^2c7MRYKp}z7F19h}MZW$mlzI&X#lgR1!8S4lPfJc>zC6r`kTRdo=IwjrTEOl;e>L zUyO|_u8U3h4zaD8`@*#-leD^7-W-c=mgd)iGwZFJ_&qI+L`LMAmN#QW{$(y${iGwjW{KkrnPQ^!l1auF_-*vB9&V<i;S;wD*#R!Ni{vmz`GmCL5cpL4pHqxFh%3C*jklk-n_-97#D51lcS->)aG6Cc;??eM|@aW;4p+xKW{f7Wfl}29{5W3#r|2?gL>rml(Mi1 zbK<2#5Vr5FdbzLD#zpxq8#xC$^NbHNTvwdiu@$T2|01&dS8Tes&OhK&X`n`Lga4b~ z#Rv0ZLpOBh-nT`_luNb@n^SnHG_|}>O>3$WGkm!zF^E&8{f2QujLlj{Jo~oKQBwT= z!lO3_w#z*{wK74i2RE;BwK}g%YA!fGcSHq{-Y;u4EJ~8vYY14c+TEYM3D)t>qHZIN z3Vsz`t}JSfV5BtlzKA)~T~IvgdzuzI8eoG?J4qois&tx#(Cke@hSNhoC-dVxUE7l- zB}k@2c!8X(AGY+(zJ%k89(7l$O=DXc)Cab@aMNz^0+%K6h7+B?w~8cfr%vPJvw})QGw5kvCL|Qh zLPC0t=a#;-;vQ{=;V%0d)2xIPUd(_HdEq8-^=fbZw`$}+92c?PRP=bNy`Ai)rQ($z z2m9Li?`Ez|jb1aZw+(c$OhK|NmX;K*G(KwzqQjyv20t{34^itE43r8fSX`SvsvcA+ zP58D&&~N_o9Sf-+bW}Sn*?G;T&7G>}nInQbl+(#H0a zj+T6JN4(13Q+XA&PW8IsI`~2_26EwH=wKgcKEZ&7xMCa@{GeU%(bHjFp`%XSWpn5D zh4$PH*|xwaxwg%^@;AOkw11;p#yt-KPi?Pmt|l)*ZNMN8aLC*KH3{m{|R1QUG`@42h&~}JD1H>KvCN+eZwVU*m~^Q*3Tb9+Y`Eg9rNhUVlwZG8Af0>QkeJo zk(?}vH`r~@OMSiOzzCL~@NG|@`$AF3Wj#T3U_-)kR0WD^tB1oNog?<@4aZKFqZNJ^ z0>}>+&Ue$GbY8ljP*<_BhdxWuZ@0MH$zHo%Z*Ibfzp05c#cFaR{BUgeZBt8>)m8o? ztQ*i?M9&Kiqib-Fp#d~ykuQ)I*IjcWz1Jtj(1a{;VDHfnkdUJGuVM_9z)DNNfv-Bz zaMBnAIf#lp1{7sWX)`rI`~*%YInDp9$b&YiB*4`l@KQbL*qXa&D~=aL-at0S99K<) zitCSSBiXb%CWI}-KlAFD&Y40+Hb1eoMd&yt=KnJ*%BYTVzWoDG0;nAZcQD=nJg^Mg z`^7>HPy(D^r4uHZ-r^xSY_aJ1jxoFw*zCI5Q!cZ(lf~AKVgk6H9w?As0eEF5k;Z0& z^6Shpr44Db-9{~|!RX*XdxgjYivu;%dtkYgcvjej_)oO{G21r@z?(U`XmHiP0h6(s znqL`R<7E*br&Xt5Jh!hmeJ11Bw+Uj$b-g_I=3IH8R$r}|qbg<7uqSYP6@D~?y62#i zu{z-^Xg=nz$L?ha3O%oj|7)BQfWagPJ1G*C39Fs4d@f|rYhXGd-bM`2XI^w)DH8ygwH1*^^JS6&@^9WKb?LqQ)t*3e{?k73OK6`>LE?Q{1H1)vM7P3b^L*Q{tal_r>`t3NrnjPia^Lh<#Q7heR(ZKZfT#ftkS@wmp z!Sv}xbG8PR&%Vh9&#%Tl$_uHmL`A1^HL+z!M4-DXHMnSRW<)a=VxRfz)vE^=JVd(Pp#9Ku$YsjlA+}b-+BAp5#8^ zEG*1oV31)oBaL8D%*(DgBpoqL-puu^i*smbg1D#twfyeP1dWzF8rypLYYISNs>~no zzs|ZUI#mm;EA;Yw-N&nGIhd2$p#*S$bT@oy>dA9Ve|%u8hK*bAX-QshDerF;j?6C) z<+gsSl$eePQRp#h(5e9(6e4UUFF4)LCklBzzTnk5s$nhwm+f5riaew+5Pr9Vr06@c z|8@g0IZ*!l2MkqVIyn0ofT zjhx=@YwB`cx@_FLe?KnM{6``O~!(HH19tLydBIt@ECw!o*b;o-`o6-jN>xr>8DC}x=_Zs>w_;n z#SMgA8mA2-8ZgDh=~tiHmzFNv1U>}hTFz>*yqR4rz*~=``CU{(KWcNhbjdh9TC|DE z+yU;|HgYldOY?qB9q1n&Y?xIQ1X+B^!t4OX@WCG`xR^2(g!~_5D#S#m%Z22*Y|V(t z2$3-`6qk8?xXqcz3v=E$Pp)ZQRp`zc05FeB8e!#3Oq+>`NxfY5d8~*V>R8(gn5J?^g{w{%cSX>S%2t9C>324~QqXme}OVANM(*g=98vL{UyY^4_ zx8cTO^Z8jn<~?G5)XOu|vchuvRVZRm{9s~yY{Yo}==|c-Z3&PL^7QT8ZBBiqB=2=S zz|ulJ7kuId3(heEY=fkL87ucZlU6zFoY(nKBiEwYS&JLbYvW`S0~#O8#7#{qxdn>l zUcJ1BBHiCwtxFWQE&g4-v|uRu`_7X2Z${7c`M8(f6tNtXn?*EYt?m~8r@6BXh_Y+j zwMr`?m~@FKDIn6Nlp-S1jgrzm)Bu8lJV-Z4C?MTZLyOWO9m5d9&QG^-io^`KvUFUTiw_4BB(ByTpcIH0!n(MwfaDdPre+zaAcm887>*sgF z{i1$~@1M%$?;7I|`mCx?)5AY$4=hf96u7~K_TO?|{L9y?N;+=M-^catxpeBl#^%HZ z1REKknYFTVa*0a%W>u-+726{J-SgKH!PhtRUB4u9mEM*IB!b`PpZ?=7YoddLIle|e zFHckg|8B_&0Dr&_#C@nrf)QRO`#0qAAfVX}a+iuAk5MD9ey5j{w=r|X)weod*84b7 zzuG~jPz((AcfpK&bh2S8w0wuI_a8lo!ueZ{#hj|&O8FYv7Sn@k%j^Jmuc7&ggR!D- zO=#N!G8beOcViw>*KJh_++_`Ewm|1WOrBw5^Yz&~a`eJXcxk?mMBOa2TXBI6+mNyk z(1TzX=yxBDshE!FYoPQz=Ye~;zn{~7?}T7}7Emwndvssj0UGxC*V&-J1_QjyjdR1^xog%$As)}ExQxgw@HOeL-nRSu?ClfH|0j(Z68qpp+aTc zs3A4S$><7$2IJm(6*vF!5k_4{Mn*<*bWXc{UgmmlPQOW}%kn_k8g@hd>&iN0Iu^Jz z^14$gTMVPM450=9dCLj1bw{(oaZX4+_fU#h?D zA|p%`ALXS0l`xSH`!1QR! z!@ds0*E{wwQ?WTYcsO|q_13^+kZyZcDZ}7GQMCkr)#}!$1Q;NlsUDRl&I2Hq<#9Bu zHUH|0Q51-o=2ce2X=ExsOlrsIx%9kR$Vm@whXb$ts+H+6$3et z2vWXIIeKyi@ui>7M~Qm=Da7{I!a^X6%Q}&-?>x6Kp*(YYsk6X+^V^f`NA!tX%|Tnu z3XEOB7x>DIkK-3KrPu!1javJGD$w>#N12!P38CWoUKh^9!d*~4y zCYoLrP!LfQdry=*HY=-&8NaiZ1E?POGS% zRxLN@1~P-ERP>kFaKa2R`^K9Rp5oUru4~r-`6n7U(UgkW8KNz)yRmu0c^w(8qQo_` zgwH2->~?!otEOqP&v4MdygYLBAmb&+S8!|W+3z^yM&Z3gDE3GJ?1PwFg6gj`K1^Y; zov74UWvbmx#U~=lhoEex>N;{(=lEy#kDXSAZsLS07kTt$4XF>_yKJB%Y~T&bIEh<5 z5Ix~mD}&YFZKXdXwco^W2%)8w7RY~Km`9%bBU^xb5BzuWJpb9(1ANc_rbkMu6zYBZ zesTq3VurICZ3+C^ZT}~fcHCNQQ1D-3_kgGJKYT7u9HDgCC0;;SPplq%TVu*%_O0nllyR?t2cWUf;Adzy$US1X z5u%bHV8_Cqj7`(#3ZU`g{nz#w5;i?zLOmD|w~}!H3IAD$Tbcm)4P;GwM<`b)Amja8 z9=ulac4JultKFc^me@DT0;&GOi=jvsBqI$+XahZOGOy9wARc)@tu@1j3^cuEyVr8X z45&V-OnVKV#BXck)&vhzaL~d{InZ^Vr~&QYtrxW8@crWsA_A) zH=Mp@q_)ZiUa721L38`@`;3g9ihahFiCRdp{xJ2T*rfaATi3I3;3GZzdJnl&Jh}^g zOsM-Z-VDL*!Qc>nx{<-|nlg=EpwjmcbNp9yNEP%(Rp*{ub-AIA@2m~?Alpo)PcBM- zaajwAhC1)%KQGtE%xJppx;W&udWkaJik8klSVe7ZF z{|%eIM%08h+jPC^^wwuQq}(^(2+9i(Q;9wSG1Eg@sjGT%@sGlZ+COQC94XXEI6p0& zt8s#&3{r*udtEa;9vvokpIwWVmP#G>saD;#V6jqVJ?e7DF!8K~(pTXdA#)?!-(A#A zjM|)(L`M4NFE0vK_=H!Fbm?1`7%q+*o)|TI7QuQ)%trbo;=FwBsDJ2x(zm<4$91(} zm*Jy}(a7raNo+6}|F&P%4a10vB=n`w7ZvK&^A(1_f}s;x0l*cekG)}p1k;558p~t- z8Cwh0d;`19*esJEw}I_V2HX^kv+b0kl2UYyvw7Ff^Ry(Ttr2jlcmQ@^-h2J*1G(Er zPV?WN>KwQ5-+usu(H>BK?mw{`!i$ULH8Nx|?~A*xoRpxq5Xz=>xt8wSwq^pv$lP{j z^j2ZOV;cYS#J$Ek4h|*VsS*mI+pKRdoVlJ;{-LkK6S`w8(HFw!+8M(&DkQYUGBdZ_ zK-E7S4o+$EfDG>)WCOP&_c-J!z07 zewoY9_DP?Sxp~%>-b}tXJgQ;A2Obw5wImtW%3sb50VLq(PkFY2tUl9m4v2Q^&&<@O z0@g(79L;lELyOV%ukMx?4-<73f6&5JLO(ThI{fukO7~9Epw89B#_R4C84cwtVR7iV zK;w%Xp3Jw2B5)R|{$=(n;Gk;Dv$~&{5*QD&+W(d zt?BSHRJqPM($2k=*XxBUwlFP=4)0Cb^edU?daR902PUjmaoe+6@480+4fL+y!EQ{n zcf@Vbw_zGohaP!(ITz60sQ zu^^z-4Q<>Q(98R~ol|A;yfa`|Twf)7a=1fXP}ZMSGkMgkVw2PsjJ+oW#|UEKiaCzG zTRdv-O9!S?j$R!482WMSsu>++H^0}?E?FkTT}dI4 zj8G58k_QIs^_BwfbZ6wh2Udh!k&SG^fKXpq<#i6`g}Uf)&-eZPo7N}8{6cHg!zCm# z6q2kGLPe3g)#iZNu1n2U?`mSwa*KNWSy+M0TtTCmrKN*lC(SaqzuDW92%;3`I>JKF z;I;5Fp{Qq5s~$9%b(uwvyraXcUUuF0T)Q@i-a&!$H_HJ)B-4?1JH&bM336z;d?DiI zBCea2(O*`d0Oen>yiZaTY?f@MvZU>Cf+!t0Ebj5Ix}b56=O*8RnAd}2%ECD0L*C{5 zw6;LotZe85meC#@03e_T5YDNBD}4_NsVWO1Ln)tzZRBLLaHZ{*5L@6$cDi}{3YTlq z!7cVlMOVLFylMSrz0Kuz;oDvYdI%1lCNB#Ft%!`dlMEMNJj z8eLSyx4+wvZil`}ixw?JMHHFb5(i1PoiwKBbIL3+|_DD%tIo88@F^80e zG_CL8A*i~ghlSXU;Lf`gE~uQaO?aHquoL747RU1 z)$1~S|CX=BW%_c-w`!&Pyip=Gr{>{};XKV~$GNGPAD~Rda0Ur=2fRcM;xo*9svlga z$LqbSYF_26Z@^Z0K=JT(&F4KW`+1({{bgBiMZ8)mC;MfXZ0rj|B;$wkH9L+{#BxP5 zjx|TN#}BX@3s1z>?0ZW3vEQmkY%bTQ^un6!P-rsvl8FiJ8oU7r7>{c=hAPLK1zSrW zGoYnhmLf82$ac#Z^hT-Mj(}Bc2%Y9DsWf#}Lbq@b``!lQJXo-LnOE18r{^sEsS%Xk z@!@LuoDbt9q>4i0HvLpP~`$3#{Zx7w@nrl$6uJXw`Ggetm_) zwPNJUprq`))PK2Q{C(kn&@i?>bab(PyZetjg3hYfLM3*bXQ+?xG5fH?MCTEgb2`o& zQCxmwP5pAX<~~f8986G&=3VHC1QPEqAc4$$nj!x~ zY5D9}%gHN%uoYHQ_VkFC|9K~o)!0YJ08nz#CV11Jd&|h@#5UxOk4Zt@K3Z%GEZ+$g zjvDV}Nj&yrN7ZX?oB#lM7AUhMSeM@&p9=FT{7MGj!*K8`N2Fu~oJ(a&e_@+c^}U#v z%EqGS>kH70%H@B2na~sqDhL{dgX6cxh?<$K&)-)PjlCvybQtYj{#{R}9L+usbIs4_ z9ocR!vFKwE@x(vDdtQw7+NkHGfOw6SGL%q+IfGHfJiiM}Oxop|%0Ff<@hgqLeJ0`G z4WJl4ZXb~`K1Z#<$Nuc_tm&yUEKsau2AWr^=xxnyPJ>060HXXkXyY1D&Hh5Nh98-Z z-U&$bs}kwsS-V{lE((IfqOu<3iMj`zqC(MELO&QuCGwfT@v2Z{$>5fy0G{rO3c4gJ3H-458U|;&oR(WemLWB;{+gq z^R^u8oetJ6sA}RMUR;gW+tPhxQUS6Bc9hhh!8>lbF9;3!?qI>1CW!q^aOSf7ew>}f z4^B&&&Vj6$Z+)nd96bB&d0~F`lr==UTu_i12~3{~wfnJd=1}`1meJXZiRiqgqZaF! zjW@cS6j}t!ztNcfPFQ?wD}UGKDty%fA7Q)?_e=T}29QVGg9jsP9Qt}Y8UL*_<4%=g z#&)v$W6r%73uVv|a}nO=t?vo~^G6VicA^vV%Od4E<|s=Z#CKBEb0BlI(>yM z@hORmH4H9*|7l%@dIK(MRvtQ@5}*B$F5a)WqNo+JKfxWAf4#g#PFJW0wQcK0#4bA6 zA>hrfvl09uPONN;YjlW!Uw^W17@An$(2P#K;?xcDPRCsPaYU~C$Co?umdiBHR|_>{ zn1yz0U-I7fvHW3RYArQU&}dNTb2495(3G2~f#tTi>;Z z6x`b<_MAy@Zw02#9;&s+6!Y3RFJbWyALqXi#Ml&i?MV55 z4PrEfcw)jledWmg@2+T_pe-_cL`{5+8V{>nk~7Pi#ZCEgPz!V$#jhjyTvH7Ckt!PV z`|pH0-W>NnosAYORz!DZX&LHDc^fW3Ee^wFvL5lfDYABKc@^=8&S#yt@mGqoNqIXO z!YaBBq*!ar8x}v*?~~3R=^cO-fHGsV{$*20X^N*%Y>mMMLwBVap2hWiJ4T~{*&VrG-Mz>U&w{?3WCV>ds*Q*UU<$1PdNkh zGwCOm8&<_a{)&5R!f5AQYbBB}a-pt!GaZo1&;y3Y@NW{g8v9a2F%87 zKvo4^U-7KJU9{R@>2=jX@9uW|$ODdV1g!3Uge{5YqR@AQ`5_VG<*IkDS-&3mT2gqV z?PID6szUw4M9nFK9UV@c_u|bpPqQgKh-5)C#?yhzTtSH*aBSOZ@dCgJ8`sT ztV`L*g>iNkp;pGOGi=PLmmsTdSZCYsce+xJZ=oQd3h9Qkosj8M+4sHx%%N}bqz>>= zferY2nX=`)CzlP}eSio15Qnq_m^zw$KU*3A!tG4_BdQX%S=q|7`=!FhGP$JXt)K@l z-dtd1D+8el$f#7uulM3OLwxo6Qg6eRBntJ@E?_I*$ft=Ls~$R^89s&@ICs9SxtvmN z>*-u=tMe9A-a4{cY)ypH1QxeQyc_Bz18_yGm}xVx#!>V0^AF+NsYd*2b+mX z(0dsNq;(sx09CTFv5kYZ!`9K!u`(gyDja|xY>6lsKCZ*7`YOSlT+h@r({^>Fuo4&* z;6D4vE8DN*8CQluYtaT=8Sg}|sC;;oYDz2eEJ0Li3~X;J*%`cs-1fdd6|~6RsUJJ?f6#ydZaI;9OxpN z^uKl1r-odC=7X`S5(=~&0!m-S^vU_Q*_Nqu?=onqRKCC?8UucbvWFD3Xc*1n=Wky^ z#2MOX=~jD$+C)%9OEB=$mJSMZYX-8s*TO|j>MM?ERseQJbhSa4yt8VgrQS}MC+q~s zP+;9AHVBHz@SxorU7p?!QbpKZfC|B!Ufp%=FOjMo>?$SeJY(NRh&gJ~g{wlLUZ>u){SpGc0Lln%P6b@*nWh(UsPbB1dsZ z2eKJh(k9Y)K9wNy?(lccxuN5qiq#&JL2^wtRybuYha0dK((^Jle)b+#J7SqWws!Iw z`D>g0HX4=D-F?Z$l^rlSkL5(lba#|yjyN)2kn;J8m@;a1wO>YKEOOR}l&CpYrMY-B zG4ZOc&$@W0hD-I__gy{7nKoBtI5zN7!Qha``XUp!rDlb$?N>vejr*ya0 zxuAr6Tz#nwkSfeIV$uw{Jm&HN*0n!L5P58PUB$uoyZ9c~kWSneY*127nvUeu2=4=<7$qydkzsQi5+>nl&gFb35! z7;9RC@K71X>5330>v&Q3MR0!&yyY$$Nb6!SKjo@Y`IB9>PLEKKiEyERVVBx{gnb=v z4U9P_IhYe|*pqS!bWyZ-9?iFcG|9>;Y|4fI7*omz7E)XX;583>T_54b$iDraWw6TY z_^K&7cF^u)K=G;KBJ>xQb@#Z)dGyMekfS1Q|%P;;+ z4O~k9ks07s-RO|P+y?}VC`lD`+{w{q&<=|J`mTMWfqW<(Gmh|cuHo>>1Hu?}IC>q! zxXY6|3wnCv4tnG8PMS;*U@8iUlcWc&5A$vU0s`+!?R>MahbRse{^doUrVLX zIVjL)(%$+z!HYC8nmg(ngQchd;|E6vRbpqPM36p`Rg+F3b1CA&z4JHK=0WF5bY#wb zBz|x1NZ@`)M;PYxJBE&q>|w0uDH$$6`-S$WT=i!^KnVJsx(d_W9u7?u(`T&XRe)3k z`VqqrcmR}oYjBsqz{rI{2vJP|gWu*-n7Ipq1j-OSoE%M25?S0%5uehoHKrAw@u23P zmvc4f52Zb0v(!rV;z}J+nfPuaQAF+@-?KKM=A5b%wfJ+&C@BCk^fx_BHFf(}vheow za#UpGyAOOLcvD&dKPJLjvDUv*6|kgq)uVdMl*UGRDWPkTeETgK!U(~=d$KNB*M7_j z5ha#@$V6v0mFZEQ@pI=dc;bNh;gpu(kGXk!+yL~!0_0m zf9dt({>y*)xaj7FhSUXrC0PoARHhvWW6h3uSLer%`*O{2+ozYuMx4(_3KC;(sNUty z;0(cZ2zdt`Z};)-yUkWn(NVF0L{k)_&z{WtjQ8`ib`)K%qr*6@OrqW(l8T<58#F+9 z#QWM zL0U6(vvxPe3m3{2v>uB2OGc*53i+U-zyOPmN{C=m2&a#=L%{OQT+9r*p(~BX#WcP^ z8DQlt_*ZCXEW!4o5u@>8HU6EA_}zTANk7FR8M)Id&_X5#R%16$&4J-#P(kcmvNqxwY}*)14(dyiW!^ z9W&ZtTRTn?#^YHtxv2f&FH`K&4s8HOSVUA5(r~OcLN7QvZ*)-C701n)r4%3c?aN;v zpex0-yMo98c^apJ(NX^5*+d@VQI19#^f;)Hn=SUzm)Rji+rpWaR{j(y4OSX>?SuM_ zmAmhu>`kMFx|-HnAS3Pq#wR87!1B@x$XN6i3VR{*VIu!{QFcfWS81YvdAsuww(Fyc zRP4&ALAH;aQL&+fpfOEX2|3(YZ_Q-5#GG0rHi`$J#uAlepGB!5H^wgN0I+|}=Z3X| zzfL~^7$XJwVB3{?D{V0Bs+5i#j}xR@#c}OD08!@BHJB#y3$!!%T?n}%kRYrawAGE@ zy=)WWN-~C2AR?!WxDrIl*L$Mliefu+MqN7Fajw3;S0liozKYjb~=3HCWv&VA#d(kSUt=)-KR8%bRD*O2OAaV`752d85C1jOf zBsDdXC^4g5_osUa&csZTv6RNpjCfjA}yrW6VR3DTy*~8 zT?fVZaN|C1ld2rj3)Y0^waWtvs4u0)nRo+!#e5Kg4H_FeH!D){4&c&VBFLrkctPOKLlUe!PDv-Y;cg-7uZYI`Cpx zM)9j+ti`LoJs_w>1)~qAAu0Pi0HMUcmkj0U3&^%6)t0pT!mQ95gRN+)M78x7tX@Bw*Oh{# zhJ|k;>!il1ZyBd^?X7SMl3o>l+?(P|_-1(p=eqd&L-q8Qf@x;m9h+)WpQo=64+nK| z%88*O1HHiTtGNe@z6kBb)FZWgH}166*`67+hH`fLd}*YtOh?Q zTj{CTwSizy?1 z0C-a%{0dlZc_vGQHYulX=V&Mk+8g+oAD-lT8aEv`|_fo%CymdX`nG-=-NcFfOk@9T5Y}K%`&8MSsr6qyW{~fVNT?WV2eQE25&Fk zA|4P1rJqTTt{sh*U`@(fWUjRq|3#ZS0(zJS;X1YSY4L-L0(5OP*@grpC$s4j3i0no zW65r?S;3gmyq}fatx4@@*#$I>~PYxV-dH9_0FuUtOmU_+wL+) zpzxJL!`7kE19r(-?|8xL<~1w<{FE_-kjba|CoERr960MKuOOFeTN+-g>DrYa`0O^} zhPbD^>#plPWRw;CLLXpVj(x45WlHxaoCo9dI|;6KJZ?1CBj$xk2B(P8V?vsCO5!qehGl6YnvUq+tbDGsZ#g@= z?HEcgCbuMChij%Yr!0=zVV62Ew{gAz^R104whd9@CB!}_7>R@!+2WO3AZs`|_8Q-UU(WSv zA>(il@QXh#YQDOy&7hwhHbD+Ikuq}NKL2^JGoFKE_)JK$GkRB8%6_-6qkPea%bQ^b zygaw@V+&lre;M86T|8oT`XlZpX#!=ZD6^U@x8r#Q3{v^>8~+;Z%Yp@Aotj6T6k5dQ z2UR4WAcP}1Z#zx94=N9UaU7ib5rl=>stw7I6&;OZiNx9)CS-ou_tWp#r+)| z^-45qiSfBGX4~8E0Y#=9VtCQ+#45R*EybpSib zih#LlC3>~nt&G&y9+n&u?LK07!xxU!4hP~YbXPE-@9> zzu$4Nie4L;o|+-QulPE?_)2#?7#j)x8CArMT7VjoJg5fYzx&Ws_5w|RBV=VbU+LN1 z_dC95on`FK;7XF9-K6%E*9r9Z&S{PWrbN35jhQxZAE1-|8%FhR^|Eis;Q{#RMP0>!4J8{V1F4f zB<69eRXol_qOt`oLLxtxB$%VxiadVrC9t|}hwKxSue=D;z!O)4ahWzgHKL~*N~7pz zoq1o(o~|cRr$AhQX#>|b=3lPua?jxh9(8T3VW$xaW}sy9+_kSBmwMeAh-lW~w=L6S zq@&}yXXK*+B*NF~Q{D9m#ixzx4{0~B;Ie*Q$G;=DJhjdY7S`k)Umw31&c&LpTx)86 z+Ef%=OY&gPWEqoo(!S|?tjdd?uCh-uXSiEV!!!6`i)&IEge}0$q&Dbjgb<{q$=fZ%3Dtl`dK$wBlOedd zBf2W)w^OU|_zEV_mhOUU)yM_7vGklc?D@TWqBI@5=eFzD=ScX0%n4Q9)rHLj*Z+uh z@G_20SDj7Mi-6ZlU%pg?mr6jI(8_OwtsdO)+7uF)52Uq=Ai2O!vv?9Lia7^Te9ME` zW?1z4KU*;8vwbx)by6a3W+}sov1`%qmSwK$TV$;JiFu{r+&-LX+suu8$_F zZ)|y+nqj&FZz{}}4Mh>D!91tbW&WR@JKxyF-TG;A^dqH~XcfEu>!jaV`089^WRjp& z9;yILVCBYDSWg>LU7(s@D$U3X;e>6ur+J6`eSXWw&~bxg{sa7&h;xg)?Ewa`_P68Z z$bJTi%m=ZY)0%J~a@<96;M*1vEG2yh_{*%mL6u}B@q2-KJxLXr_oJ^bP{E%3G9O#^ z6`1`WU~gdT@4;Om2q^T$0qi4){z_%XLAN#)s1AG!Gj+<%^RVJS9#acsN$P|y+Wv|U zXEQVNK&~45{%jEAHBpWS3@CJoKExojYpb_pO&_r0K(#3T{g=NImBhtdw=&zQ9h^X6Bc@P=AHE)fJR)koZ$RF z-w5~V|J&!Ie!!>OF?3U{yQa&!BkD_-iC%W_>!okMv)!^WMCWCn4^*qhG5^>juEf-6 zpi;ol1}JNO2y-rd%oyX!w|iIOG2sd@+iMa2@!&kt!HZC4izOEn-=A08npVvia{0VA z{-nX%!p!*q~xF_cWXql{V|Qw2e?cb&w< z#18nbC5Tq#WMmZ>lx;qbFFfV7VL*M`y+k(%9DD^7Y*%|GYn(Ifr!9uikSUMsZoaT{ zBPPa616lbrk12+T+T<=@STU%1a7n?y_{(36!(+4zy^fq7r3PP{s@EfMM6XY?*Lz~nHNgER^ZP7M*>CpUp(^NTrIM^U8HZYbAKpzX z?eGljd7V!1C~`d3AfpD54$w|f_rtTRUB4sP>PR{H9hvBJbWK=TTUp4y|L(I#pL3cN z!5fQiuwmw^gy+uVK^V`tP8G@`SF0*@u3Bi)A%JGp~A;5l$5Y*AiUS_$*Mp8gW3ex$BLUj+hr1NYUZ(E$PWhb(zXqn4eifB zet*|uWl)hftgcg|TKY`xrrL)$N%DkbXYMS;ao6&UMeLdshDb@Cc*mKf-6`CNH4uXw zTypO>`0`ZhP2>K7wSqCJOa^~eS59-%>3M5LmiPXD6!+er*l(a5-~aXL)+wVq(*As! zIbux&H!h{kWS$Hi!XIg zyrV;8vT;(3&Awsd(Bz3n)E(Q6DPK#&dQTCjjfCZpL1fZLM(ef!yQ;ThI?(8|Y16T2 z8xOZnsl$tXScPzuEq@WBR zZzx$;RZQvXqtu8WV z)v!+6c45&zR@2tny57lVQsPtv)fVojHW|hFncLafeYLX1V%?l~Cn}tHUUaX&dL^S& zs@|75aqWeQe+U+XBA@tR#+dSwr{>PwLg*^nt&VL*DUX2yE-8+-co^ct;Bw63N#5*b zo9E2&nob_^ZuZG_CjQaA{bKBjov!;ul?b?S?wF3Qr+Wc%vOHS_YoQ>v52aqWk9v^t z(rCYjzpS^^5p!zD>f3ikUxQcnMvb=@dySS(2*5);m$oAkSP|G)X7ub*clk7<59EWZaizaHtM!NXHRrxHm&Cgm34{_eiqBiW+6 H#{T~cazPWf literal 0 HcmV?d00001 From 2b5b31f75f8309930ff7430c6985865e7e59d5e2 Mon Sep 17 00:00:00 2001 From: schmurky Date: Thu, 18 Feb 2021 19:37:00 +0800 Subject: [PATCH 045/206] added image tag --- .../microsoft-defender-atp/techniques-device-timeline.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md b/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md index b4ba69661f..88ed8944d4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md +++ b/windows/security/threat-protection/microsoft-defender-atp/techniques-device-timeline.md @@ -38,7 +38,7 @@ This feature simplifies the investigation experience by helping analysts underst For public preview, Techniques are available by default and shown together with events when a device's timeline is viewed. -![Techniques in device timeline screenshot](images/device-timeline-with-techniques.png) +![Techniques in device timeline screenshot](images/device-timeline-2.png) Techniques are highlighted in bold text and appear with a blue icon on the left. The corresponding MITRE ATT&CK ID and technique name also appear as tags under Additional information. From 82455e71bac91cf881283ae1f07c5dae75d335a6 Mon Sep 17 00:00:00 2001 From: schmurky Date: Thu, 18 Feb 2021 19:44:10 +0800 Subject: [PATCH 046/206] Update image --- .../images/device-timeline-2.png | Bin 127121 -> 126621 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/images/device-timeline-2.png b/windows/security/threat-protection/microsoft-defender-atp/images/device-timeline-2.png index 382a004486beb2b9744c3243417d0f59ef8f7100..25fb776f62a5008670f71b5a53755647e0791538 100644 GIT binary patch literal 126621 zcmeFZXH-*L+b)a+*`ml+L6qvY(ZNQMjv@$1?}Pw~)X*XHCWuP6P^2ThCG-Rmir_{N z1f&KC0Ten-1B{IS)<_+bU`(($Q7K9ou<8 z56+Le-ZSx_qdVnE`|rTG4UZ2U-F}{`lA^wk`67WKjpgoW+jj;<_apStA(m2iSxz53 zqJ3Z``Lv}{PsseL{@>8QS2ND7t!m#t|3>?ML17l(^K(kAbd~r1yfjvMnxFGc`3u9sm{iah%VqJ+I~G=T}Z^2pygF9&u)7zstb~ z+W9>{EiElT&&$ip6Ui?qD2N$DIpNQX(b0u0t5&2tgxEZYY9m-rQ2tK+O791*=pIny{_%tMTRzvR*`QlO;YDF~czKlI}# zfizdwHU>E3jg!-$enn6IdDK07#_lJxAD_fUFfBge1@G5ac){@F27TiSMK1X`==y2e z!(XWVvHat52qVAvi__+@68yDOv*60VD#gO`?t4pf`nTyrvj1`YTfpQ829K7`?^pig z@nyl&Nlt6B9If3+aSRlDt&%f)w~ zLApnOwU|FVOzO+ziN~}$3jD64sLA9N&bjZP2l!G(f_ENVH0QJ-;Sk4Aj$DF9$nt%; z?>rJ^$A1^+*D1eJPY^vle1I-%bLLZq)B9(#F7kWd!WxWE9F&FJ0pnC2Z}uQgQ0R9R zpR1nULG+ER)|+BQ_idWfijugbvC4exlu7r@T8Qpes)a^1YinIp_OPj_MhZ ze8lIMxq#dG;*T(KjQY-QXtGa!56CJY^|lS821^(q>d!)zS7y3|SL1GYro~R2YQ946 ziP@0smfNw6PE9fhQTbH`rNZTBhQOdN88rn3!iGvs$_=m5`ZrT?NAZBQkrcf4{Hr*b&T(Ru-B&w0zt+rI-^hNpN;^P%8maJ!-21x-KdN> zEvL>t_x%7jSHaX;T_p>5SV89(6-RMpE&E@F1j_4bDn8CYoSXa(tqyOSPqP zoYL2s;_VTAhGxC%CJ$yp$1|nJ++Ap|kT${2-=)A4UR1U`&iFW?fl3?Wl$g*xkYU}K zI0A8riRGa6ipswa6s>+YdFGO@Z$VOT_@h!?BIx37It;Y$xwRS`JtUK{PLkxZF#Xj# zV1VKaLNu3-iB!sNjN-e{N+E3}rZo=#X@KCFSxR2xzHHdZmZ(zYn3U#3#Cv+bZL{*b zhh!i>rYtA|ju4iA>!$PcKW6{WU+yU$22S;#L-)^rIslyi|F`_hu>Ol4dvPjgcg+Yk z(b!;6q}%GZI`=?5QRwLUdDi3XH`@u)8lsJx56f90{iP;Vi`%3!bfPc>Lv`OGCgIa= zc`Sa75=CvVk?>^ngfp1-9&PUXAm%!*?=X+>1n-=56iby0 z#K^9Ex`A>S6!0e@(2nbiBhB1&#FPJwTZq~vUfwo?Il1qDpZ22E&0-j#A+y;#CMd_` z1}X*X)lAPeTvFD^?kLPvS63(QFu+G$?i3|#6TBy!NVqaIZ)QN>I^IPd_o~3W!OyEt zm3Kr0yZANsfVSK(n<-S%cMBM?P8wk~GJDXUui=qErR%x7wK8lKH*%CW&9X;+zuwx$ z<_Pcv2cT<$2SeT>v*r#UKQ+`?8aFC5oT^qu0IHnDw~*?v)5Yu))(iGsN*UaI9)>s z{!0xgyWZ@{!usk|aVH0>57BOc!qEO?+YI}OAgWV2+I4`PI29-FmAN)w7(MR4B-`21;oeriHIv$Voitig(v>RF z1Kx?QYFxIycR2^J=6#!kKx*z!!&mxeDC1eWQ8g$DvX2Gai3oa2Hi# ztM4$&-b|5@MVAwQlg$})`0(om` zC7+T+peakfgR61DI~OOgyn8`UdW!0X64-*}cW${f?Rud_W;25u@iQx;eoKQ58O!8; zU0A6_@UEETg+?}ufL;e2(rJHpDL72nCSBUw%ibJAB|kLsC=aAs{b(Dm-|5c z%j)Xt_Kly=LSZZM_3NsU`1Evgerc(Ygwt5#VqAXSn=)2cS7p=HkuDeLM*$X>CJkR07;|ady5ilJt6G;Cv~BPD z0Rb$GqODPudO~*f^O)b-!d=|%>T16hgUT$1bZaX5hPd&+hlDfd#v4Io?FH|(g+UQvt|c_+hIO|U-}b+rP49t8LfNzk+G-_UUO%gW zrC?wboJBA>_VxFvwpmI=8@F5Bn%)M5;K3$p&KdB~!|%)<=$y8$qEaS( zBpB~6&!D$W`5aKP!yx6v2KX8d;AN z=@raf`=V+s=QMgVDYip}$g(7v&^gzeLvYL6GP4Wn62tv1DDU?x z$Drb@X`NfS+{S$N>UlKiMrV`xGaI*z*yYl{d4j3c7KnPkB{b(du&%-rIKagwXSFX)kCbZB9puxAs&BGKCz@L1;^@>eze-orkR&+x3fOPjSxy9Q zq=SL%%>aJOvZOBYXo(@h9icODyM?(UBQbHtRDEs}J?_`(MSvUOZcn~_#_eu}Jbw1- zyECHZjs&c?ciR$rB51u+w5j&Y;dCjuyH&-QTN@YBy5%Ep=HijBMy3t~?J{#&T;)CC za}SG%Vcl=tkcD1G7BbD=ZO$nw9gd{hIOcJ=`;=@p)hX(JPBV0>$`Px{9aSg?&6C( zC*1G`i5)qn%DX!&Jt&;H{|J-B*rX|y1sza7-(P^&kRVKVmym|Ocf3YYNo7qa;L_zJ z-CqNb+e5gcg^(C{cpD)b|FlE9=W%SWSmCF^NM(EHsxEP_Z_NzYKnLjS*RM~@Y7(;_ zZ-|L@&3?^^ldH7N@ckeRoc{N9>QWQ7zJ8@!TBIp_u-46LBbnHlgbjF-DJYAluQ5E@ z?{PJFZ^yDLGLQ$%c#5fEQGF(GGnTM%u}t`o3FQ`-w3p+ml>FB8>C_vxu@FN+;eDBH z_uk!2P|Yz63OLAJaqA8iqZy11vA5s1Mq@*bxCKlSYiqD&(3lVmeb&TH)ap@_nN9c3 z@TUwcw548s5UOrLjm+ljxfoKZ_|HO_l_s?@=7G>i6$frz441C^>;%`C7ro5QKe3oI zdUq=eJFmdm3<@;4yz4POdPeHYd(dF0AY5fQ}2Sjm=kg13dy z$=wm#%({-r^4FSDAL(6hy7~h!Y=$;;!lU3+{gILbV{k4s!7G)F!aF-tBUuHsU3M!AI&j_2= zl2!>#{4Qz`eG^3Fs>Ha@dxQnB1j=Y$Epe(S+ah5+``s&nfdpQ9s}nNc6r^X~SdBGa zHHZ&h8#EF*|Lxm*W~_5_0NTM%E>>!Rk4-^u!}uAO*Bd-iq?zU2XE8zTEaZ5+7SGk* zwWxzkQpoe+4bJqh0_b!HG|YgnBdpDv=m#BBpVj$x=dq?N8{?JD0Fud3Z+hbwuG+*8 z94? z@;`7$pKPldv5J!&yOt5kAWf;wffy3q6%)QXglC-*8VCN3B=AM~6!OsE_B} zB-G63OSp(@mK6vZ=0jQK_StXTOQ4PxRO-M4dN=us^^JUs!{ZMI`6cSlu*0lZ=XxoU z33~PQPg#i=xTXa~z=NJkCf%av(S!NAb*qWFbHl!~=_@fhQ-`jEpFB}~&uu9O*<5fk ze`gQ@!3mRsHf{AcRPCQ+whgNdDnB3*rz{)(EK zu(;YqE(6PwwW#>qfZW>5jpjpTe7LnySlI|Yo7tpkAm6(j!!yA5AV?=l%OhVc^$B>> z&#+kPv4u09;JaE#lHA`}3A-41h4ZY?e4tQlp8%WImMCJQF;{H`L&x$fvI$`s1ZdQb z&Dr70mqVwr6K^bZYYcQHV6@bf5kf6i`Gx9&2G83x9b!)7FIWL^=^V|hg*Z7tPAT*k zha2UsDna!$GGs>J1zsy%5-Jc5Ux$h>{QH;_T2mi3!GI>g8zGW4M|6|iz9a7vDkBmH z{bs}2%w0*03Lo2ef)@`m6}OA1Zrxj)WnJw1em9S_j7W8^Bc4e@56jq@u_fe$N;4h- zD}8GWIhXSF<`o@BOX1{fGqmZeEouQZmr4xJYzr;)7oBKPpIR=2$58InQx+qOb2lm^ zTY7Rj?k=eq*CwQ!PP2NBfAgOxF%rdbJ*fBZbnJE%-|qZ8eIYvl=i`-L$xUr%y`MHkkfp*XPD8 zx0xjjVtO*OUWgJQbY7A^fID!t*G@gmnSiNFWRUwKm(d<>k@p=EFK>~&R74VxM?POC zNqNeuZ8TCT_)_|?by)z=k&v>}S~9&g2X)XkK{9_LN?2bWJdV-iDnpi5cQL%EreG7L z07^026YGwU0jSwIjho+j%Ll_O_wK6CH%os2U7&RLefx&h7z0?92(d+XW1|5g4pg>( z-i@$Tn5wWlAH=h&mkiUDW3BC*+^kTWs?&}-C$AYpdEH@rfC)MQLV<;4$k{K>A6WQw zH*O#Lm>IDA(YYabe-D`r zwHhyMjsDP~9lnl0kF#^#P+93tm&RHfNR|vn9{FH&{?6l*F%}n!OASao@Ya0QreUKJ z27@PUx>620SyL>3Yg;NKYris*#v8C=F5_cTUW;=mekgr`{&z%&GyLM2{J=o!I-K=u zM-%c6F2{4QZEV5XCzC_{mmAoR=gn=FqjoA>|`GajU15vPZ(-5(_o#OMjvo{#uJ>i!xHa1Kt z9+TUg3?q1@8wp=uO?IuDOA)P`K85|(atzuya5vR7`MK%Rrs2^P>X3{}{r9J^ysYyI zZXIp?HT-sKVBsGDHRnXU+sG7klyJbH9ky~h;K9uBKmk$03V@fqewiQ~dyv$)4sbRe zTE;x{Bw@(o?W~TX7(p~Rup^05@Zpibar*ZezBA|8rvL0(D>Vz+B04wZMpDy~p2!za zQV%|FbkrZh#GSr!zr3njs*}LblXRyR9#>#{SGbvFX9OUlFvQFUQQhDBf ztP5!DuJga~xpG^`oR%Hbw=u2l%Z)P&0{1&psHy}Nd)*|%Af(9Co49Ggq?d0@eKswd zt&^ZL7->PowflgSZDzs0z5J8P1@QS_aW6P|5&CNl0VlcVf4MAh!vFjiK@eH0SD=}g zno7#21?>)l#jJ|}h(j3vox#z+EG#T6AuB6uOrygAM$a60cqwt>Oa_%7&;(soRaJz_ znV=33tM&utENA7@r~4APfjo7#ByPHQj_oc{p_g-u8?i2ILT@kVI6h0H@y|bxf7Ro^ zS9LzN|0PwDn*r>sj`VpIkRcc+*7qZ}^v4*-lU-~#Y)y-Q-^us@x? z&2Oj@;TrCusHe!`5ZD|M#+8+oj-%D~>r27=coEFp1yg+1SfN2lBA54=8>)@lf0%}{ zWc}BVuhSKN`ZX%?rw<)D?h3uWH4h@pKi1zc@yN+c(ENtza1}9{TXvL&0XbxR%3%iD zCwBqNrExK%O?zvi)Ri9jFoeRED~(zaZQ6Ng5xADXeuq#;TX=eJ(rDHss8=#I0H6UI6A-B*R9{~)1Wc?nnEqtE zOB2)j8O_C-`^nc^;T8Ee#rSt`dCVMEnI*c+eSV8f6-?L5l%5PZv?#y76^AgcXvur4 zNN(ES^Y^arsJ8FVr;NgxZr!>iZr^ta2Zgr9auH_X+{D10&F{!?12=whoc!K!9nAc&Et~P;+{=sOvMSF3O!bFdS0cWn2a= zD=m!&9hxz>1(xNPcIuU(eL~MM&HjrOZQ}mpt2=XYz7;qb=P^nDnPl5Vz@EWLDNU<= z>b=+1F6}h(WzvE{F0f)dLziOu+CP1&j+5Kw!$5mlg7>Kt0rr9ucb*=vc&#OO%a82$ zl+v(azA@g~R|D483lldAJlBx(0S~0&mf;|F$4-5PLN=v#YR&d`2TC6m9uR1?T_#k^&TkiKt=mzF2oDj7O!iDC<>@8rXi+$>%HNkr;nIf)}_P5MKu5jnM zeFVuAamLJFF)E@NAJ(H|`r~Wp7Jrt`3mQND?(re0H=IUz;qzDcmUuIK zvK!WhAkGk-qEi+LdyJfX!WLIL3O-o&Hu@+=S6H=;3ZuuqcHH7Nm~H~*C*qnjnJBNh z@ip|Ai0cM~=nlHwG*d2cOpZRq+@CDAVFEuU?l^oE-Qc}6PT5m?(05o}z*bhyDUBX4Fi92osGY{Xs%vW*BF}`}v<^6!pywg0eT1?bCplr;G(*my0Yv zVwW08Lw7fn9;*{z!C+WCd03+RZhYPHzTE@gOxD9-8i#E)?bEzQ?bm5BBRtp%!xNt8 zpKrOiyD_n}JUbx_ZQI#eAzTX&6rsyK^2??2Qvf0p^m0{_1K}|){RP zBKn9gE;o_R;o5Xjwpl`}mfTjZL76#$J9x*DK=Dm9^fMPwaW4-~nRWuY4c(Xee*~%c)eQTBz=dOyd zy?*_Asd|!#Az-|`g^Mq3WE!|SeE-@iBAd`Gj(4X>p=7Xfm4&1hj00>%<_w<`5iy` zV|a}6#+}F4^WF}*gRr3uFXr0dkT?OW?s8y!iZLtSf$yH5H?oddnjp2EQm} zIFBpTc@Jm=Y3xFANhu&0oGo;Uu0sfp1_;wZ`bSdmg=thtpBXEWk%Z+@N72 zND~D^8vCvre{%{DH^6-m+&A|~ersc!)cmX`p)3_5_1|u9l+O9oDClb6)~8euGB0Nj zNzo#AYAJ?qrMdx7@gnj9kbNP6!s$br9aW~XMe4Hjx-5JSL#4@hUbz?9Bz^DTY!U{z zf}EZRFf5)-4`ws`kyvJ_CQ5^-M?zSrYWQ1kg;_mz8sAwha~Jp5|2!hB6AWCQFF1_u zG&6QZ-A3pI2%a#YgFzFz9J;jMWQCi)-b8*KV0;%RoBdDZY%!Hw82;QPFk8*jLRGZ* zjbT*ES8dle3v@@8@5+qxh~BY34T7RfC+wnG3{Vz;Bi;HyR#k4kDxVnDjRRzu#F-625;X?WlMWtmfaXnxt+R=B`Me?o*SylPyzLn`V0tC7gP?cy zKF&h_%gvVf4AVT-O%wgk?-_2dmChv(tvNJh+?Zg$XIN%Vo)M5HXwi@(bd>(+th#k^ zqSf8Jn=P4obiAcEDSw45hyR1%6e3F?XyAn-yj(leZQMbIe}wjhSW_ z4lowfTE7xHpKo|JoZKjMj{fk#LshklT?qKTdf50O`XO$=xxY4o_>l$VqkjeC*{o}j@06OggzExh3LImKK1zs zNCnZhIb_bnnCO`~G*sf9v31t;`1mp(>jFxDaKm~}u@f(22P;jN>Or(X z*`#qLU28&olKEM8b^4=Ka0`&7IrC=>o487s3eVvO&qg$*$vp zO)oF1V6J663@`Iop8n`8RJ@$^pZ!mN8V^klJU`}=E?HZsvSPnrE&h? zA62$JD8TxbeHIRlRI?i8Gk$wr+uN{11(4FA4ZaBz*_C>ecjI|^JU?&B?)kC)-Ir@9 z$r!qM%_j2Bte(Oh{rouD^*6_Yin5`^Y-dWf@W?x=6eWT;!*%NKG@q{#y@slc#anKc z0}toHZUfwRD3`7?j9Kn1liZw)!`llEBf00Ff;D%(Ak%AV^`1^&vn%LdKKI9fwFCl}yT4uAa(E^sv$Yz=u@h<)gO@z{+yWp>-Yy$$l5O9!@9?AOS6iIl_{H9Uh$JZfFgGPlBH zfbq8CB_bSb;A|aK%~PFdX~!m^G-XI_%g}Y<%QGG?{My!dgFkk8 zwK?;vZs%V$8K2h#wHh50jA9}@0V2hO+`hnQoDN7FN+W;PkDUuL;_xFbx{0KmS zLW;oIx{Pn}ke^SQOMx9{7lu)I;mmoe1mP`T8=L%8Sl=5#x)7N=K@b+9zYNw0vZ60y zBJWmknf_ET(Vmif{-2YO_(=%q$(GZXx=g!|Kv*Pj{ohOR{X!hz77+JpaXO&V>mD>9 zpjD%WWo8cq6Gdx?>TLMR%TbQ=U&DJ4CV>r)&v)Q!O)nqcKtp!qzXY~HaSEd_tHM+M+7RD_)ewv`cX zh6u9<97APQX}S*KIiB$ueFoc7%)&r{^z%@#FN#;>uBkUUU0tg~;;8w+udZe>+q>my zp3d{DOx7gsuBkQzh;cDe7b|;Gd?Jg^n*E|-F1)k zyWij6XoFQm_3RQ;Mkb1F=ouO&riwd{olUp3vBA{ki$F28tDtO$V5^sar#knp3ciEb z*#QqxiI*qpZT%!L!0&v~j2zP+M{9cx5ymzqCLCeH#MI^aWsZ-(Yp$Ru@aTo@)Q9_! z8uvO_WV%|s1rf6KbJLktnfw-d-+@y$YaOg0z|o6YM(p%w|Nixo-rGyVi7q(ps28js<6&T6>wK)v9 z`tx{b0E}kl=^E<6F2)k^uophR{o@C|i6Q)e5%0)H`^?tl#%g9ZhG*bKSp&HNFI1** zrO+xVGEe_qSWFcD#a7B?;#_Dsi^(;h(A5w~+7g8-vXO;`5XJSsiPMBo_CNVMOj zWZE5)gPvLxY`=spQDZH+Zl_z$ZAJM*Ixy8~5h)r92fd;ukQXMCaQWSo0gCiv1mkT# z9+c7TLQUkW`T8S>9~jg9D$2Y4vxlOAD%FI0OnT*??aK@}2A zI*#~OR#iE@f7-J5>_KZ5X%PNH&{z&<@!!D3|N_!uI_(yjhp1Yf{ER>l|%!mdo#6TM0Ho zA6lUhHcXyl+`^?el;C2giLd{$zJ;{l(F3z5YFrDP99pdkJZlV_F)OWYHm9qE1O+?A zZR#zDN-`U6iVoYljJC$5$d*407lulGaBkR;^xwo=;--7L%+sA|LLiOZZ{}5d`?fqn z$Jc?CG?X#7Zg8g6L}9D^>+6qRGu~oO--zKyzum96q3m2<;v(4|TU6$R zAIZQz8fi(OgxsF9gD%x}QF!JdGxsaq?86qHdZaLr9^Y}PfiNFU^p@(-lodAi(nP)8 zNVD%6TUH#}vZ>;+VR)IgTUIGJIxB2i6^0=7HdpSld;%5eK*t|ncKkGE3Fw|?Q(`u0 zXzl07h~1P7aN+3lLJ+oET-H@uf>WLyl6f{9Asn#w{yKH4#|h}wENlLhGT+P|;h4Jr zAcOuQPx(in0^nNl3KuGWX-lPydZEU1Lc81+M;D%0s-79a?*@1~LCL7N&@Rwm{tK7G zWRjDUn|19?A2eyavCK?py%~7dHMUPj9QT7)Rrt%X|J{kE+6IE5RU>pe6NoL94rDwx zSs^Egz3f3V4IQ&8@E~VWGi>iPy?Jz}2Oqp*D8u+IttQ9XjLj2=a*J(vQFdADLeyfH zAams{HhMyh2A8e3GK98-ssST}z{{I8GcFPmDbhlVUtrY!FuSm17y7ZF#iNY@5;u zEeA$Tmo@BeI9zb2U^tz_bXd=*y5i|;)=85G#}Jq`DH}HF2CIuOJJMp@(#**2l2Fwe z1I1Z1ts!UdxLn3CnD-r$q!hgT9}7a|CvDB`>zM0pW+~I+!?}w1;aV&A#i2XyU5&N) zVlVa==&4m{M@x$L&~jrE`O}%#i{qxuBO*=5(fyF=TB-1@vUOCdI|a3$F+5z^7&L6U zx4T#0!{uKCeYx^l47)8NUEHfo>dR9f_X2*!U9BQL{@C&(XJeNVBUZmBA1-`T%z!NJ z-o=e7HV>WJnt1^0TgkY7ba?<_G*OJ>+mw$w2K227tUnmmtoTiZo@@sjb@WGAa}`;L zLwrHhpWGwl-Hw#LS$WzYg|hN0A`e9gN=Qf;kN)j)tYcIR!O;=p#6EnDtu4A4%%70!N$&e=3F&uS@BDlst%Lv?GEVH4fsTrGUYio?!LYW6eg)XQ_?A9bN{$Xnwg{&}89r zZ`(P)wyB``hPH+BL#kQW&VpC1lWPJpwKGBqp?N$b8rJ6~Upioi=i~UuWOCd~wvh>! zt#-r1ShZ~Z&fh>HHw}!XJ_6-buJ0aPPkqAFbyfO->p6O#`tzSx+ErhA$n8F9;JRh2 znqc$OJV0AR241@pYCbMos|)c;OB)L|mhsrx$WjP6&8GF6Fr(!!PK?z%vpVaOg7U`u z8+(-`=HudL-isTQn7&um2nA^c;1FP#xD5GOeaa}Xp1X;!td`qT21^`i>ze7&oz3WU z_aWi+krvCqW5bOrvg^wnY$jOC21$p3Qfv6a(6ON(&ne^#IM4fuHZy+gQ|Le9=a?P= z_|_016!X&Qf_P~;D=Ca9oMjVs#PFiA2-0tj1L(umQ-0<^6tyzA|J*X8@eT@i^M^G% zVm@AEbakxK;J0p2J_P%0*{N}vscQ~%^xKd3fj=Q&p}DulE*6&8kymN{8|}4=T8GK7 zC*@x+F2#XN0q{8MDu+9-NWRcn8|7(RbkI0JsMV z!G(Tn28qfd+@ej@UJaIn)bK#Sua;wQnnTdn1^Qp_11HjXUwV%R z;YG-J+_>*X@DMO;OW0QSb%B`W;ZcDO0P0?;Z_V9H5HKk9O2;&tw&s%h;fZ-BJOPvW z(buf9JA)dsc2lTUugF@O2ht=J&(XuWIUgJwQ&S;jrowia;e!0IzN~)7zsD>uCyOdO zN>QS)jBH~7zk;qh+a%gmeK9k|8XdjWsjLODcG<7*=&C`IM>8VhxsvS~r=04(i&y_Ho@v33dZFdb!N(A-=$6>54E6 z^6<4#PM3Y+cgK_Xvs|O{#4rf$ts&X=6WNJ@ekSVJ$&japVw>cGA0r{^w9vf>^ln}V zcO?%5)wz2>YC7-bMQBv|35G?NK)($y=xcjSsf&gGe#1uTQeIN+t{l^ML;$#DB!C*Y z;iRUnS4)gYggbMQdQRu}6dyy`K0N`?ToZmC-{vzP-kM>Q$u#>t_VJ;W^cyBAUjior zcH!k>a)CoUB|Q;MvESC_C4)0u&ENa>1?7F|S;D?k_vA{c=9D`__hMV%zPv4%ja3eV zD5fESBhWY`OueJ4Oa6_OeOXepDfJ1Yc^W>EZ>VW7z&IC$E$zs9GZ}%}vU<3Y5E_(2 z9Vz5d9{I2sgBOUF*D(y5KYFCn>dNHu% zN<@IoqZg5+4CEpbWYo~nl@rNBk07bo3!U6s0Y!w3`G=`!_Z&D(uMJhA*OjsFRTp?o zdL-_6XZN=+?-yUGi`2L@r8+Wj`(!csf1!sBm%rWhZvT_iTUEg1yI>D26N|9v(vUYD ztVBUwo5Oo|8I^Mj@^CGr61| z0VXcN?SQB=!lgjzzV1J5sBoxiXoANT*)ULyJNx8K?IgIy2jnohd16J-uI&XH(1U#l7ZpI_JL*=xJ5; z@M?OJ`WpP>a+{wIVaYZsoNl=gLxo3+!xdgF5xf|9o;TPo!UNginBQ=38|P^aZ}dHO zX)@~?tx=Y;&dM`sVQ9F7<+DoOYH zKuWAI2;+Gz^d6IPY(#0<>Re-M493-etUG3Z;`J66`&JyLXL)p4X!BEP0y3B)$pNSO z4z(niw5_0);Xizrn!_D0WX!f(9wFGw12$p@DKW2!Os{YWly*Q%t+y@54Aoh4;qxO$ zP}@xxw6zt4Z?(KO^=B~x8;A&J!q>Qj`c5SFu)1&j_<~qT6zk1bter-~^9AWCq9J(- zYNf6?YXXKlp?odolDeL-D{aRq@z@>c;Ff3g;-N>3p9|Mw6DNGBPSWeclwM11$*TqR zLGsp-KV)jh^yK0*l~~gB)Gy>sLCznb)3pd^T)tQ1gs#D?=}COf2@u@J#3KGejj8#| z)=86B%qCJUzZp2lJB&>Zgb?ZPGv?LRj7k^_-Q^_*>Xuil);m>NPVah+*9n^?>lgK1 zsN}?3Lmqfm8;WU7QY%SZOb#QTzy+15@`D$V6M<%SGVt_eiCDY>1dOgkvw*c!|C2ix9# zH>_#DuV>>U0!ZuA)e1kh+>XK3+S+vcADsS#24c+s-2^#I(l*E5BB2ny4(V%B{Z&c%wil#b_g3YlR1$gvm~dB zZOQPF0kx0Z^(AKyT%62SJ#6YX zz^+6H-x7KMA=-B$CQ9$jfZyGDs%4mIMWOl)xRoI%ySxhYm3?&9qX6v>=y$!wk`boM zzyzoR2`Q%IKBk79nZ}Ieiwzs&&Y#kh2u1e$3_Q^l1k3@Iu*nme^z6-m+2Vt>w>y;s-+;-A`{+kA5CLeLHLf;Tyt7n3NCR8`ygD| z3ab?6#W^l6!4@fTZ1_+E6Vx@VV~~E))UCt>>}ImmIj9Y}&F(>C%+ktL-{?NvaH~1I?U2OP|;x z?0fS=x89wnwUn`e1zwYs3hFu#**-ypYRYY~u$lG3x2N7C>{&kRC;;R~4ionEZJ0@c zt-#qf<|cjQMF?h_QhVDZQE#mP_Us*yLum0oaiLDeO(MpE!9U^h70L~``dRq!183yE z((z}u)j`{{nY@Iuwf;~VLUMjZFtAR8caeF>p`VhaTQsrbi{Fj9Yi1~KsEENd9p5RO zorUM83@|5EZJq@V54ww;h{Gp6*gu{pVXw`~;e8yMObaO#iX(B5C;uH?*Z9!-U>bZq zc!~}05+yM_PZckRNsFP3f{g8_f-J05lyS}CC|Lw_) zVUuz=xe$-mXU0QO?eh%s?U)BsOm9FtPxnA(o&%le0JkL&&&-fFYY)ryrnt+5*xILpF@3nO4| zdT8@N+;+a-BdqCop_r!Qh64@Q<1o6!^S+RbGdLQ+|L~W(?wc$(2kHw<^N-1A}IF%*;LMs_KpNW^}yv{S~^hI|3cvi z?D}^yASm@B^j|~*I0Xk$&)M0zygK5)WBBH7LWDXe8sjAp`N1QfLH#b;o!DVnv^r2` zG4a1sVw!n7u|Ype|5i{2Bso3^f_P@2zYgUPYV0XkSkxyEP-p=q37KwKKEfeb;n zJdyJs72pfqUm>=BMySl?qO$;JKn(5og+=ebP&vR|b`@lGPe1tQiJ&(^5SKV7Uknf#70$H!OMnK74Yx2dPP1J3{GRr1aGbxq>E``282{m!BduW3ANBNu?sNac z`G5ldFdqD@VKP;=UB?0QqF|5DvnE;c-}*%i<$d}U(*H;ZYkjGv$o=6T0XTTef3i;h zb(--Hj&pGGXVvJ4CjU1B9KUV}cwx&<0df-&*GNIL}>rAMFblSeZ#+r}8VW9AV#DsfP zpoDK^!`2K0)t2Eu>d_;=G{hjkT_|Sv`Mjii=Nw2+W#ZY(uCc4QQ=Yd-OM2lxCo|kF z-(*yNxvsR-5ok2XP6g>+l__GdBcQ@Xnu_~Pd!~Pu{&nux;1d;Sd;o}}h6;5qmT)Ay zoHi-bD?mbwLTo?2y6n{{EPop?$?6hjMH9Q+A(#!#4Fq{9BEot670_1V^z<;;ZFZ6M^YqSa+Ha(qWmvTaX|4dh zTaR+=*)MW<1W8BS=F?ekf)pA#+ppDzKR`u$w=Kw6$#1t4^@Ov!<(I|+h==L;_QB>8 zIobB<=!k8)HINS&l(R<^YZmq~52)p7O+k-Q!fmRw9xCf-I z?yNq=?Sk##vk6eT#jSgL{_8T`8UE|%Ahd+XfbXp$4M3GQ!kZb5271-nm9cXl3p!@; zON~{hH6?ois2U6snm#KJ+=+THTZW&*^RE3BEsmWztMzYpm`}~|)BWR~LfkclAJM*& z0lZe_AaJ5moIY7%4gwpoS6(`MgdtvC%yJV{y+7BT2Fd5%>x1S#6v|MwxqE<^>T?i zT2{7gW{?fY4z5}!<5lGM`{U$C7Y0kha!$d31lh}R!wMQgYR`$S1Uv26osu&UX;dJ{T?8q2u7rdlj_Yu(eCLjvSGstDKUIFvNHLB&(-oGpQUb+lmdD%n zw%ir@_SLCMW6+Ynr`~rZG*82(C&LMga-2VSKRZNi@J-L<>_p{`CQK-dP@LDB`(ZqExzj2mesL?=iMF5x9c|)i+&+#^56; zXQ+9(lJMh7k7e(g#M2`)kU#h*D{VB)1=GQYChB%Jn#kg*$=3u^HfAk+nqwsNP4)k( z1uP9FQKONg7I5pMmBh|c)&48aT;QWNml(hK9QJ$lOKh**UE?s=k>ZRSc*^A8Oz%lc z@1>>VTdh?)6FSz11HJvf%4^j+6ZYPSbpn-8!{qBctDc7SN|STv)c>vOeP|yn`E-B8li(){AIkmWB-mnPBKB$q0_XNCP5Xstf zq3lwuRB;J3cz10b2-gmb}aM!U>^V$N?u|V`a#I&emB2~D|=E?T9*lu8^&@e^*b^*ZuEDF!9iXf zfFtVO&KyEceLmf*mPHSZn}QmcFjFVM=W6PpgffeAR=SYLx7GWJWk3YnRd7G~>&)d| zkjF29lk|-w=bEW!(u>bAC-8{3$?zDTNc2s$vwbV#keH=3?C39WOxJ1TK!*^tFWk@vfTxn8b zQQV>n7n0jaz4}%1gQ*N2o74NASZyWB$f|XO?$tqVsmbQ{eYONSbd&7O%f{hT89n#v z;@fNo0+|h3mevqO4+AZPD|(HRD8c)VG5bTG{XZ`ul)NwPG~^RCaH%`HMVu4QT6a%; zSrP{o4nahm*YceX6?z%`NV!0m)79Q9l4*~kBb{ebp0NIjg*Hf2-FD4u(sFr~e98F^JOP(#yipfPZj1@?7l znZp10sqni%qbFgCROMFNqdp-nBx`8k33{tJ~%C39IH39JtqN z<6l#@`xIb<1xZXinN1IiA38j2BkUFhUKhC@Q$KPd((%^H7t6pggM5c5!$5Pi>P3GO zLGOTbMYygb_csTQaGHw_zj(OHZT@JzG?<}@+Kx$dGCn@+uC^0^t{h?|s?hOi7p%sG z&R%ly8`_>OVPWV1OP{cnT|HfC=+Nm2pj<@a|(6?8b^OEFr`E3*;*; z7#ubOO-SJkiX>lM&OGd==2$H2siQp21G|Q>8>pN~HWwe;JtWp$w!H@HoGW`4X0chv zKX#CB?$s2c-s0vuhg?9Fg#`&0O<@a3-SxX+p3xcw#Ie^B?P;cTz%yMKqJR%xrP zX>~xKwpv5c!B7;PbfD&`h8U`5LJ@P4mTDI*N)1JcQnQ#NB}i3Kl$e7EHO8C@5)qPp z>w4CDp8Y$H|Nq$g<<2{YAo;p;f3N$x&hvA+)Lk>)qk}0UFv_9ClO7Zejsb1!(*m7% ztSwkyG%L(Ter)^UV?_7Giio{SgIx+ZS@lqYXNQfUX^9zOUZKypvB0ga-iB!LMvqhb z8*!^^!G4Lec~Z2MHSRZVWaQD0LTu}+GCIo?5H zgv~oWB`ZZUz6!>+6VBSPF*jW0b?U0MSN-BYy&6a8?a|XRf7ENT1mpJVUFB z=?q5NF9+JK$}*81VhE~z=Lg9Y>d&C`+J)nFb4e|-dLL{~w^*6g`+lLoh=*HkB=BWK zYI?P;jr-GUob}&``ISM3DkBuX%f8ML9!Y(-KwhlS^;(SAXTCtf(~3s0FK%j#eJF>K zSc6_RcVftO=E?aXiV6Osb!1=9FG!^?48@QK*2jeBst>lZ+^sDF+l`deY`O^vKdH{| zgBR2DuOfwyCOX_^GsbTOtHm>}rD`CjZ{Xa{kt*OXhI(&UuNF6s#ol%hK1pGOkFMXQ z8gE$77z{HREP{uMtVBf@BmeCbb3dhU%rb(lsyKAzt%glzZ4-ieRaPw4o|j2Z*sA&B zP#37;xO$U-*s%W1r75sD)4@8A+W3>Xnwvzmeu?MCCMuGP3ZpQDN5z4ymU`xQf>P4N zinQw~vJF1`)J<9)H`ge|Yly2wF!Ozmx_4!i>dcuFA%>aso2nLty8IXH5v3_pqB~8X zyoXx3xT@h`ASB8@GAo%cDK_*|mt3S>YjY2)G2DsDLuM$J$+q}*5~Unklk7X9=N{=; ziQg8ha0<0qs}{OG9{F;=qQs;#*7GM*4egd|r>JOrj4|}m5yBU-{n9>DK7p^|iOnYR zcfxm8_SB*+gcw(H^oexDOja6<*F?)hmc}>k#arO?UG}@#__goN<~1b$1(TRNbVj6= zXA1nVxfxM>vt>J+9y025#%KchG)b={q-Ic;$vB}n@nYM3o*%w6c%r_l)4$%$Q_U+9 zji|#Pv?GKNUDLw+w$Jynstq-xCNu&e{M*ahw5;nh;``I9Bj&E4Q)!bmv66R2&yZqt zJTdwGEskT-AACX>wbIx_+#&IvYBmm()mUmFsZ!1xlEbsI7P7E6%fY&fF?12<6=IzX zXIZD1&l20qsP@xLM& zr_>KAX#21liK0f!V-P$He}Xrpp4&p&W;vGCv)-5m7Ab7{ShcLp9W!!`c``=z^oXms z^^^$JJ@H7$-K}-=sbKky6T(dBsITYhn1;{8%q(R z`5m1{HmQ+Y)ByMDW(4XSXOx#B-I4BnW4%K>*fFx8bPU2}W%i8PmE*)AIav&4yrV9C zc|H)`qn4eev+$eXzD=0*sNvgNHRid;u7pL# z=zBS~ttv`v#^C;RgcP~u9!Nd5eHZC;!mEnY;%ptRDKEia9Kx#|=lB+4p($-klTxio zX08t%^J5>eWQoyZkv|TJ2zA`u(#pTKso+%KCT|w2ex>i3!GxBtf%(I=^pELR2&(OL z=Yg;Et12}2p?#{e@3qmro$Kx`jksZh*!4hOg{n^D6RZa>U^S=8Jzvh7)|o3U1U`7Y z@HIaiw;UEkV!ot0ucs^>V_G>?xU9NA@%y-VKDvsr^Z+;YS`BTz9uye(P<6PTt*|j- z8Y^sNz-758=k-=i+NkAjI@U?iMSbnU`Z7p%S*oHnX956Iar8=ir&F$aKaJ z5grdSO^!JH%kGJv%JJ9^V%FG|qiV=efBnVH+hT_$ezJ;^)E14xl|KXzsh!)>(be+5u^w<#{fegPAhmdkX!29Fa&E|fI)(aDO+0>4t-HeD8^h;S z4;;zP*LhaDCoFG&J(d>^-@okRJ~YRAxO?JpI@MlST}(?3wO=uh!VW~k1dOBA2@#`r z!P?p-XfVeW`24zFtM~zd?-j2j8m|7n*^*iETepS~={Y<0xUb+_qC!|rpq5ox9uKcr z{FBLn=Ta)P`|*x>nNt;fmgd;E@p5?RK!N6H3-&ly@i}@qlr7eiYVxi5&#f~m)Z+?s zNu2S>x;>TnQT3~i?$*kJG~t=)wyK6}U9L$#?&n!t@sve&RN4&86B_~r8&hOM)XUX^ zZ;i4;jg@$_g<|bih3=*=9^?N$aHxWpkEd-EcBG;~@$14q=quMpxz`G8@cRN{5zBCC(RTe0cmhqTLQ&H8`yUt!+MLjYa9`@z zoWj*}>}V6^>Fx@FK=Zz7>#6rl3vYLY2ozNp?ROw?PeI=W_rt2jL#nWl7cjLcfrWvV z5+9aOK!Q` z$$3s#5=t`b<`?aiT&alrborC9q^ z9o2v8E8r5SD1J`BM--){pwVa+v}qej=I9*#VSbIR!xpw~oh9!hA4IUHAa zetubp6xoHDNbH*WsEsz+Tvfz$-KYV3x_DjvyXz$uc;VZeD5iVrGe7s;6d&|J)|l$w zpE#X4?wwEErRnW9FMYy0p6e!B*730=+HY%3uM$Xu&e`VA7a~tPZoT>#%JV8oz5Mm< zg!^0{=Mdc*Ym)81BhW=itD5yk>qa&yp-{b>c&P8&&3AkzjzPuO>^CdqijAo?GG%IL zOO%Mm$Qy2twMy|SSEf{|lEb??&aG11J1gOycPch%|Tmb>(uQy6leg2gD` z16s40)WZqN`3=O0nz^lFH>|C4`X|Ec;M`k~51Q=M4ve=&XTdO@W1#+ z(z(`(Oa>8_f7D%re#_*b=JWKVL);%zAw|27!T}Y2IbGiobWkQOSmZ$czQZ(<%KVLrKT#vw3G`4 zlL_TnFV@4n+;Tc}b+}n%wcFGq-}J|7TFJ<&1@GDKp0$^K65hq)_p+&xtYC$P3l=MX zRAa{}KRc6WTHe2sZuPM|oxSESFEvBG8Qb2|%KPIG${R_M>;xN6$_s1a?L4dXE4}?>tS2g z12m};>T-4l^a#&DJ$zJ-IR9&O6tAP5ewhb|QE7R+<)*^?KXywA!N`4WvLDKY^G<@B z*52Mm@{ygI^m=y!;?2ule7oY)G7A5I)s-vYw)W`P>&MV^A_+Stew=^r^@5%a`5^56(LI9ZsyJO_<1K#bwWl=4 zp>l@-MjWsubbJ10`BcXK=SDR>CJD(q(3akr?UQ&OiEgW`Ti)s^u-Yz*Vg|Z^t{#tR z&<)W&|DLO5-?ZO<5WXq7Ftq&#YqpUu6dec%uZI+sMkR^6&)#K&EilBaoz5~wk+@S73w}+F%q_SgD>brWtTbt7FI6@Bh6$-*vuEd*;_7Tv*x!A8;I1BIG4wExp>t2U=kAYz29|Xj z*W*2#jzV?Trk)4-b-4BN_D9}p=LD_#`xgbB z*T+Of73(id#KOxadaD8pN05q2JJIjeG8b@6#ic$~IAM>7lLqVUL28}9yc$Zldnt zz$grV5aFu;6EYGQmbmk)v%YgVgG=ZLTNt=fXxKF0m+!WILf)&z*_;HPB$hmH4n~%jH}d4JYE^K|k3~mbq3`~? zKP;=&SjMEca9J7*gh-2-j7VS1I2F!k5#ZW!N#QbPOwt>FM&K&bel7^RDEY0o)K39h zWP95Hr-=LUW=2*nb2X2*IzXUQ|9T7dbez$!0tO{q1Z$tb#q)P~s`;5=izc-%FTWPU zH|LI9Ud%UnOGw&tmOWCF?icIQHZp;o8G_@6{RVcExZPUY??YC|@JDV*a?>{gw_)QJ z*m~`(6sU6Yete17Y9~&?YgLidUk*7z^hMX*p0gPZ`t4ZGKX1yY8#Bdnu0OS)2_#v(+JJsZ8B^(Y zl(iOKj3{YA*88`(_LMjOrqy>aHB^rM5T;{#v}}?n@hRI>M+I9`$BTs?6|vFx%9e;U z)E%!K^rGvpw zo{Ipg1N<8Fy@Qi*F>mpG6cQS9Z7m}W(VR>l%T2GUPlAXpUfM}Bkb#u<3CURf;oeFu zssQ(RApO-l7}x__dVxNpc2CF$&r3J~~obv<8f zDVvugCmtj5?(+0Z*hm>dtIzx1?t>Vx6Xd&<$Ni4|<0!;G%%Xp!+P?j^@0KWu z!goN>%%ENJ0n>*}Z1TM%tPPoDmeY*xTWIXg`vim&g0~sxolFORSzV=gF$3o1z7b0m zg!&yJf|7zqO&SoL(h*}Fcu*nz;J)(I~v6dL7510HmX;{z15(K?_Lw(_Dp z_t|D+*g_#r5r&-Ucofz;8520#mk6;QCc|YyN)Afv>b@N5**W zkW)JzbludP6B{n5CvVcf-^?yK^$KufCi%IPcy2u_CgxmtoikoyIh`FM`NvVwGv}*P zadA>w%Ho+J=jLm4m}`?8yRP5Zxd2~l1y4vX{t|m9JhPa~!*m`3G}|)YFZ2-~IpU@x z&3~*0e)nWxeBD;hJ=}PWn|o8FVDWUvzh0hnEw4bS|eIrah<^pmVpDy`oMiMcLK5OVKBVkDhEEdTIDjHNyN z6du|9?ARLnf`8E-37&IIAC~V?u5&#xZgYFgRB{}K&k}j^KFJGp-ZjHuS8d+S^z)ViSrzw=h2q%2+!bCgER&6j9U*_ELE zACcykWlg{b1!#@Sn=60qlFDCs+5&4q%tnf`)-*!M#gl4v0;JgQqdX zGpn8SAA1?3FX6l%D-)W2lnm7ifIKJ4BJlfh!uZU=J`mRTU4854UflBLiNzGRk_x%{ zcaKqe?+-6tO65>cv7C}eVPdQpk%9cTQ74tZfExQ9_R7@clgUMlnGL3}c-bjNW98$H zP6=G~u)0>XRoR#2$f=S!Khn^*Bpb{qd~+}>=9>GJ96i2hurkE|gWAr6;Hq}^vK>5) zTUW+2fc5Q-iZTLL$%WA@Tz{b%;gI^2z9r5vYFpVeT_^e4kZFm9$98dDrym)UjdAH6 zP!S!Fyw|b#-lr2r;#1i;3~S-zCuB334qgW^32l+~}k4__B;% z?&Yf#@f&PlZ>{QCVhX&-xq=Bb2)B`s5gqAjq^PV(=jEimJXe|9;9ddq8FI-@L*JiT zy_JqQXEUm&K22>n0=gV$wf>kg_dG_Gsi>2!8Lhm#e-MAoLyOX+Mf2z_P2x5KA8RjyY;qeDijKBXV?Dt>@tC zm+s|H0nDcZ(0}9tFkUY7fmqrklah|r^Ec*U-eOLYUrwYm{<=I5R-n_X#>ETRppn zg%4hSGRch30ovEz8eip+<$9ktWCRIa#n~-V1g#4KA{qPjlfGRIepEGoKo~z%Wgo4k z2wv((7bDy_N~!v@@tC%30^PTs~eHL}V61C4#QK@xV zk}WCcn&ZJe-yf$@;}KV zk@j<)9%0!!#|g=z7qaVTs{OuF*!gK<2It2eAyu~HR(2szC^A? zY;OYRs^s4Z2;eV%PW<1**$EfERj4%P=!m&0og{VCh`)!He(23LZ_ZiS`1SI3y~(t| zLOta0wBr!W?p^wa1T?-?SlBNe!0a7;=Ym3B9B4lGULBk4dD8Y4p|<_pk^hiLBm|od z(JlnA5bd*p#R}j5aGF$?wQX~DrqI8avc{|rhk#GqzaQcTi>LHfuZUu$8T(Cn>`~H7 zD_2surT_l+E{O;!7Z;c6xw*LpS0>hX<>rp|-1e83c9*db$cX{IG=ycqa_;;0CzU{m zi63ymgSfJG9gvanx)UUJkgbeBe27(0Q<*QN3OqTA@_=tgBOGWpjBGb6wwjwU%6af) zHO?8}NK=Ww^wyH>f6I?|Ud5p6-x65x#s4k_&-->GJ*m*RRY|b<)mWXg$Fhfg)IND{ zAN1dHeGt`Ebx%9JlCQ_THANh1{y)C+riDA8b`ZE$|NRi?5ZX_Z&+k3^u#F!Fs0x2Q zo@PpVzo8V3jD#539k}LaD_@#bJ@A)TyVL;A{cMBlxQc4F8orfyn$#{xgrg{$R1|Gp#R zDjmR0gw77;R3zgGz6%m?dxW(sCxD5yMSHC!Pomztx?QdalX1}7odNnem+hz2utpG28B!i{B zPVmPsBRFK!Vyh!X$xEe;hZNU_C_868o~n$?ZdSpTsh9mtMiSNabT@j1N=E-E+Wp@J z!hgwpv%b~VD?S7X9ps?28rV`4@$L}ViM#aUISwFDsYv}R8; zVfURj23D`-Wz0H>C(CZh)h{6Rg(9MvW~(iljeP`3OzZt%UMe0#nR2S z@b6^<2+sCWweSl|hNxOtA3!|J40A@|E$PQp`Z}roq!)Epzts3G2;Dz_{_39W`@3I) z_Co2%-I(%zzLU#U2h-%oHbu(b)*+h^ej{TkpO(lB*Tv|%iRrP$tioa3q?kGy4OyFz z>)zGm`D$P|`rv9$&kE>hM2i+y7KO@3tO;w0TV#mYEPLV$ zUXEPF8L{N|o@DMw9xY1i{?)~JKOJ)YZZ(Txv?rmmMxkI>Nl9e3&2*Z!JiSz;yI#<6 zepkk$ze5W3JM*QLU}Yc@?uuJaWj+8v|Emg0wh-Pjc$MB?XljWEg%-r$!^LB`5)=Ir zRz8ezvy7VW_W(f?n0*J2KLp(ia21_H(#yo)k8{%yHN3laPJ+BV9stnh7rc3W=RQ+I z$n=#jG$TWQ^%Sm$g$8}{) z4HJagEY2Xwvo)?KXk+KY)Eohl&R-^2;G1M5a7zwmYVx9&mT|b^34OXi-cNEAWOaDW z)-A*}c_PLGv2dF;ACu61O6vlbV~DVmir>sct&l=EERZ6y`090n?7K|cm{4(^^5+V9 zpy@*-;5|xaFp$G{1bmOF!OFBJnR3FPJ9Coph#!<)SPosPja>y`MGGSLlSrJcOX~i-T_{F^cN&FB!0=a!9Uxv7a&lVKvTK= zOiiv&B}Vt%o@=@4>sfWa<6|RF=4Xl|WCCx`6}VNI zod?RA%y7$<0Ox*S@4{VXpZJwG38}M*T&kBgOsKCh-@6{X3;_R#BoCH&q zUHbp2`zauT&2>mw*|g%0j%E4d2>9wc5gbXj>297UzduRwX}90 z!Gs*asIS;}e9c;JX0Og&VJ{u2dJaw|gzgfP6v z%MkI{{Mc51@m#`eg=SPtUD5vjK7LXH=hOG*T24A?W`}7T#Hjup z1grtTpn$-Y>UpvNHPW5r>g!`-I9@y;pD(Dl`9x+ZfRm^=8ieC;W7f(?$sdS?hGeTmmHue}FbYdv(}i@a!bbNdQKnKgu3 zT-Ro_3LiGin8ir)Lf*9XQbsne#k#E$<1Tzoxc8*j;ORY-2?N@qp`38)$WxyGaP}?O zGLYJ?<4WY(R*7Ht>%2jES)B|26Z!JdR3@d*u!-M|Kk&;{lFc9FXEvBTZZfXDJ%mTmv|HVC4jl z1j}Dms{4zI=oVeT>gtwMwOn2NcFhye|06qVI7z!2H${|;vo^0--4@Trx)lX?m-w4;t5WjJXMKuK?8n6Fkw~Z zlu@Wm_W3hs8jI`awXjBk@KujIpv1-#GzvV`aAK1=lfixL0-87(q;|CG7wSATbhXU_Pu~K z+4RHm;gRQir9?+PGrT8NcjXNRv>2f*roaB;Tjozk&$#BlB}Se{@}}1gsGi93;Zl+( zevJG)A=O%fG#T<|K*EY{guU?VZb};5skwyTo*UXJAm~H>Hn=$(>_dsBZxi7zw1mOz?zk*@%kX$? z;`ImK|vAjbdvYkif?-_)EK4UG#zt#0Z9aEmr#BP^0#0(xJLO@oV^0!Vk)&pW_E>&E3C^c)$ zi=}{{n&4d``;SI1YP7=-Z)(6iiQLbujk~r?Y7wIp*#_E|FOb z>uD0Em+dr-NR4xN(1yZ^PBX(UQE}T9moJ}2se&HThP}UgK^IK=^Q5#qg@B^YqH zjz8TdhYW!{2AsMu>lFf~03)dRQoN4*Dnop$O?k=*KN-japmYS~o6G(%EvC7PFFP&umPyqh>z z8olhZQY`o06R#65C&KD}DRzhPvP8*x$dx0qm%FAl=|=737A1kL4Y0@X@hz6q4-k>i zk(BtnUE_Vaux!O`#*Hs?&r76DGuPs#$9gZZhZ`x~^!80UjB$q{5u!mvLns5Vkj3?I zs)>8@21SaV(&#WpSl`Lwt9=;*V75LRH9VG%t;PScI)|{SrM;7PF|7BQ9T{G3zrUdF z8PTSBblRMRSuRmfMA@y-iU`crSJ4K^t~Txn;FvF&Rr?d3zRgq!@9p)g%VpPE@KJ6p zSl4cu-1$$v6BX5)(*dP#GXn9uOs7{%?c@e!u%nIybxx>^)u*msHZ~CAp|;(3cn2VJ zP;4cR45xC2cHBXr3|tz2DOw5=Ir}~SJ^ABLO59?z4lE3#Q|qqM97qmCNEkZxJ8-nM zzfM(WI)YY z{Dd5&b~(Un%KDHGt8Zco%+&nQLACitcz>6B8$L1W^iLqBGOU}Ycc+!AlcM;9#inEN z)2gOq^dn6D4T!eSWL$B`s@-aJT0b zd|zz@|G7c&B&+$JH>(6yrLoO-U@ceoi~u+>BxoFtTdGRk>GfIEtLWNmh&=fk3nd$Q z>DW)K%?|a#M{Tqh*SFQ}@5qm-Aby^Sx!vy5L=&X1oEIaxWm#hZmZNG1<)3h4aeLLF z(DWfTH@o`2Lq>4&B0>@lgXO`;2M%tIK>W!b!d6~(@-hjzo!dcgk^<)Dtn)5xZFd9I ztk@qvA5rZy2kg1BlO#A3?X!Kox-gbPL{A@P3s8alJ&k8-Ovid$H-6eJ2X?I-C$!_0 zYMOsu5lR*2ST(5!kC(4e3V`gp)Za(FE5m2D#za@D8x_0DLz z!vb?b70^BZ>X|xEYf4E(ZcjUz?JkB=jAKin6u&Vz-@?eWms#~TD3eM3 z+r=<+*xv)yQ?OSjvA9C{BExL0QgOVH>Y^iMH~$t@&_|*aPO_Cfi0L% zg_-8+LJG$+Zq&<%Ser-&7!#obpd3|YKj(J`xs6r87%FvDN^aX8WNZqC0%lJ<;1@UV z^n_(BG3At(bY+9|0x};`d#{#^g>gqk0GI{h&41-h<>nZ)k zdyL+ebVY4j0eI5L$3&x^AS^kv;ZPbjuwq8hfB7VK*@ZPkdC!kFCc^jgf+W3=yoD>U z^MdTfMGZ&XItXGN>d86OR=S z>Ybx+Myt=fbIvZ^b5C`t_N`?i$Q}RG7L;Z)Cw(f1))!P;9%a(CZMb>_B^9!TjsH=%vV}1K5b#rYffDq))l$JoR!9windE*i=xw}53 z!#K-L#lq8&qMg|JrVRDkxt0@o?*j18+M=l72s|lrSIX$~9sGMwaPW0YSf$hk(mP3> zLr>JAVUP?p=2zs%!&{pPo70?6JtmouLExO4MHUu%0b{CpF%2E~O6W!;Q}XG@>xQRY z4^D+CrJPq)bSKxqWJ?MJ)=)#hN($jB+oNoK72Z9_wIZcq^sLSLhKR}gNGV&mLv3#4 zeH-R+?F4LQo3F`%!ka|1iOuDfK84sBSA&GSnLl4@uy)F4Mz(OYqq^HZNsg_ZCEBbN?T+2a?5T_<7_n?Tc>XTY->+`ig z9PDN-U>)fe=^K}`<`)WKdoRfQl?HGiJh0#)B1F;6`=8>HMot=`~+d(Nth z1-mn5Yc%e}C1}?&6s(yGqqB$>eyX`yh9+@3Okc}vY^BY}4$pfu0cIdbhZN2J-H43$ zIsVG2A(ZI{QY6g5PH9y-vv#Gkl2gZdR;M&`OX*cw0HV zd{2s!r=51v1&k)|D<`_yS{`Tu#1>YJh^0SUdUsE6osu$F%u7ioa9JTS>cybxeBw0 z&Ck!4Pqqbr64$%D(x#Z6IZ_fTasB9t!}`aTDtkMj<}#PQ+~8BQaXlh*;*X<1HL>5H zDp)8n*Tm0yEiI#VOA0s9b>*;ZOZjYyHe<~HCFT5>f~8&C1ylEA!RbK#HxFe{APr(6 zG2z8PE{ASePkkORor&MwI!esEw^mdr7`;bpv)<_Q-Lc(;A7J}FV^Q^>2M%XXh@{# zB-HR^N(3A&t~GYZk?QDIxqD+j=8qM!lH_1Undukf{6ZdWlf$f2FJ=%IA~U;IGqoOa z#mR?TKHLzx#MQmRbFJwF_RND8!5myps6@cHW#?>&6t5noOI_`y>(USDq*ra+7em|x zO-#?bwestIa<>;`AeypPXDu4-_vO>9WSV_N!I1w|I5j3+j_XB8duf2c)jx?kW>0!o zx2`O=JdE=aexaGoumc8Y2bH|~VspmjYj;epMYMhI#Vt}}i^r184N%-_Nt^W>JGt-W zattxVRztQpsNEc_-Z3x|k5I7byX0?kRQ*~g%QqyG8u}#>X7F{Ur2L-*h|Z9;ac;lm zA*W%q5~qEK0Kj0g)OW^zS&)?VYs&#jgUlayMg3aTyvFcoKlE_1wEV$yV+*xDiva!m zuwtfT3Ft?j2)@OR`lap!D*czXpf*t<{KF+5MfZoENmjle>Q*-0{Fs7f;MBRiK(Bt{ z8-1+}^G6L3F<3p7+;Q+PWxkRF2@de)PF2c<)T`rHa2SpUv^FjBPC|LXE_y;~dWpQ5 zCN{A@=qzZ&7bnE*6QF|GsMljrn-7J{Wxlmv5xPd;9M_Eg+ON2@+7gj290kb~5*l9u zX)=XJ`~8)&?+XqTbkQN{E~wBWO&;ip^~jI8ZQj}WLI&ed-0cLC4RRHedVa!kOG0l& zYM`IzBM5aVekGlDx1st=<xU(rLY0{tHj4^))TMuqjq>-u-9FHo983CY$nj%f7@% zEcYuAtx`*1BU!O)+Nm{c9=zE3lgRhH8DI~b+DSK}Rz~-)7qTuxJj*HIR5lv`cbXM- zHgA#eI>Qz{E1h(k>Sk~@cp!nB-0Ss2Zpi<};_CanqF1NQ*;1+hf776PT40%c-C}*FFz? z7`QrrX9c{~168(vQJ8nS92q04WXJpWanJYaUz2qB$ zt5uwubDAwUXqmQ0bqt|26eYaZcA<-v%Xo9$jrsS89X$E}!ksQSmgz$8_!vRYM&)$! z_{D#{z`B$&lSE(0wDsAr`mlO|IoKi$6w=*$z05rb#lz5*VLGIA97&-OuCMYgKw^&!9z=^nsy&{beCY0Dcq-`x;KHnyk-+F3&#x#ZWc4=j*zNvURz z5P5MHSiD`+> zdDV~hqkUgy!lj_EoalXljxwS0q`nH13ghZjj#c;SZFa-EvVwF>gc_$vQgO`h_5Hoq zpX6nVZ>lr>UGJ1@C23X#m^hZ!w#L~w4i^OBxaSs~6*WpOOODZnVmpfCoD#RMYS2s$ zzpv1#Gf5nmN^B(gV}lAE4Vio6vt3PVkhflK_~Y(zbarL@SzzASg>1p$8^*;<1om=7 z_-wVWg1*rrh(D|Pg{jduHe)PMa*X>5Or(Ry!|kBy1p)%n4}M%{!K_~HrN`*9eQLQa z@0cg7f?1PC5`D>yTFb)6BNC-~L$BrisH(6~D0iPsu~m4KDFx%+1ndvAO z!>1oj4qbY}{#UYG)RL>^C~@{U$$7nK&JWt;mv3{PcGtt;F=y28$Bkgix3wLnxj_m_ zHsy%0{(P~s3hhZVb;VWZdW)>z+6K43Fm-Ai{zkDFRu>_WWCJbH_dAXU@`BmU zrpm#vC6ak>P$E_J_v?~{-QO)V!-_6_K~lC^#U9;wrfaq^|6$pQv8B`7O1q!Nxm0H< zRGL%`*69Wz!x*Y|3pE{slESuD?+?qfLE=u31(%xw$<=M`M0B z8JWtB%o=l_^h*uB%6!~pJd@WGU;uLyJa~Be?zF6aRm$zrxem*YIqKF6XX&TTZmL|a z#0!MNjWh*9BGK6~_$v~&vuvDqmd(|*y~VZJTWHVJq2^(fmB4nA95~rp; z?!$z$wFF?+P|nHP3K2 zppLbdD+0`e#lH~nh0P^v=(?(CT&Z`S>$*yVp|!u^v4P=3`>~4Oa$odoy*c#s?3%O{ zvHVJ256e=iA=+-;&SB{Hf=p7acSnxRWQ#-(Sl?{0z9%dmFDOpQpj%&W zVOiy4p<>=0uWDK9U4}Bln~F$Y@?o%Reil+(1*{^F2Iq%9**CFMIWeVfshPM#vD@_J zPrq6&J8aI5M&tde&RrtEf{*N5qFI9}iZ1h2Ahrp=1bP=yRRwRn#B*sqA6@vddXP(L zqROUQo8as`-4nY*a&19{ob<>B1Y4hA*KdchdS6^%vt12oP7OA^R-+j7m;&+B*7IJ= zO6ORT(o}vfgo{SuKYxeFtwH1gSG?JQlo?9~;X(Q3xZ8wmS{|!A z%SkUOXW7H0hnc`PeV1}bsMxe|mP>J`V^pldm26@*+n<~iR-MT1gkpwzC> zw*B0Axnc6Ga?Ff^x5oN+XB=I7BW=~UGp-gJ(J7XAL9UGD+Fv}Kp8e1@JbU0F=o)>H zmXjg==`P*ra}BW-z+f}|DJh6;8d^H)p{7jCAhmCH{SJN3qLJ#O2^2Si@1@*U{d*5D z8MeX*`sat^T6EZAQ1ki|f7bG3bVxa`7jBz7qG={V#4?X8^4;eeNyLP&ZJTMd?K4Kq zhgrt~+xmWSxlTg!uE@;n{*toqj?eeq@=H+K)kuc(zFY7Rf^20 zqfqmPXCN?hD6!eaJhN@Of}l>4Da;S=G=MgGPZsH z`SjUPzJjZQ)6<|p0-0&|W_`xjfrd*n#-pqB8L#L@F*bf+?O1PC!l&`dN)JG8W=3;J zW9%7P{#Im<(eZN2sR|YU00=8d#&TvrEj#;1570)2$^>p<=1*pN_kSd`EE_Q;-W-l0 zU|-!A8D^{y(MLolPAsFO`?15>aJVdQdCABz&)U9#v9`DTBucX}7xvg-M_mqdvjxRB&x{E=J!7^Yq{j9L;Vp+u=nYzJ6?4i3D zk%cykhvhYK#*vG?KhPiG-OIxT{iRVAv?>?<{w@4W%$B{U!IVw3dAs`yPSFBIV?%J| z^*h3xSeCh?+YEQhopVaIZtZmFPgAT%vs7VHM&a+fxQyKDW?55X`HD9j^z>I!8TD+( z!g&C0^eu-(5!Z1Fi$+-Bk=nqN)&v^sJ9W!j{=t+QT$6sp5jo0+?nm)m zH}Ay_U;IN`nhGhhYY)S>Uoq_`^<`%^cMX;{4=4>kSxtm%ZsH(ccgn-t=H32-I(I^LMj(3D--7bJdUsrOPk?L&yrd9TAcPhUz^+T*NgzY;B^qbcf63@c~q!l|Bcji0&%dI5~(f7 zsb7#wb6b924aM<&liY~Aa8FooQO!X6G*ZnXS~yRtg8_Ifu@Z7C>A1K*ldQ`rpMXt5 zw2S~X7^Or$2W74L!FR`@X#QnGNg7|J4xY`+xmi+!xhgSOZ;m|>i~Ma9j-a``AWUlr z`yA4#&vY_U@{Yho?$WFsAD$Y_-lYm?c~O3#*X|FO{L=#4l^&Z{4KA zHS^=-FW%k*sHtvk8^#7U#Lh!Uq*tZ)q9D>01f;7FdhZY*C?b#2doR*E z(n}~RD!rG`0w^UwfCvNv2_gT&=lGoS&ikH!-ZS%kUxr~OOv2uK?X}ms@9Vzq>)NyD ze{2^ru~96p53z54x0KDz$ya-FyNpBe;E~$f7(HIJ-c-Utt;aYgf8@2Qv7{z96IA{2Y`Tb}*8EUWd zfn!GInG5GfH^Rm#UjKP{u*O$Ab>*N`UrKn4h_0q&j`dNxb;Z>jTL_M39 z`nM+^bZuWH%&hv!Ht5nr4(JmXp`{HNx8mO_aAfw7V&+{wr6-??0v|}9XD<|a#ROHl zF-dE5+Y??Gtn!$Guj_2He|8D+sT?FT!{Uv7WJkN6M zG=%d*1SsY(&&v882RS`f0m<0-hOE6%Hi{_?H`#^9+k^DE}1-|;|rzEm%hr?MMzr%cwwrI z4PlWG&kPbqzO0cJ8&_Hgzy;a4e5%`S(3 zsziEDH@c7dCva=U=H;37p#PYYN#c&9xY*G0@!h1wlUrr;ui6+NGrE`Arbl}c0s)x$ z`cGuRr&;Lk+LA0?WK)pNolgaBAXmHbN8nG;Fr`Ec*q8=gm-&Zw_E(W&=>jr*eVYyD zQ9WKZs(KI3Y%T1sm?rFH?b=ql^@$+9F?4Xun7luE7MPXmyv<-rKQ^Nssu~ws{WU0j zFNE26VBsgKEw-*Ez8M}S?(k*1%e4=*}y`y&s&L z)qh;qI!+c{Nnt!NU+UFj%C6si1z-aF$Ne6U%4Gmk0?4zjJfmdGtICz$v9PcJvV8i} z!2AW68)_NIl2q&4PY{d%PBjH&P+zn_ajuZ;?MIE)G)r{8s%l~|yx^BVL5S^>Vr`SGZCzfp0rJjJ#!%m}<5eYEm=A<~Uc>4g!)Yq-KY8B-+N zs{Y||?tr`tB>GWC$@`A+!dx0!Jp&gRXf>44-`(3g-f*?FCYrv$wBa&rW#YIp3fIhTCoE;b!OxB6+N-rHyt50jvJEoi~=o+kem(RvR+Rx z76(4nGQ=7khaa!cjRO(aA+&m2y*G#f1`c--W-b^r`{Xx9Hm?T?4wRV!k}zqNsIzAG zpH{iO#&N;8)!Jn0*kZdsB`RgR5e8NpcTlSCr7-ftMj|n+MGS|;VOD&UG9x$md+S}f zR)~*eKWD}|%f`f;i>F)QWFPy=&IyFmukHm`bdB7_tFQai_^Zi~@Q0uo7u~;<33CYb zXKZ%PxBxx+popNaSc)0eYpoR+@~LgfaxLfm=Sa%mh$$}I^y(AY+wh9rNcSS4nq(wP zbvOve_1yScpkxZKbr=~3F?{9Z)*8PGlKt2f#S?0nB18Io0fg1}^-mNF9~+}E@O)S8 z+gbolCqWd`6D~~CVsn1x2rN3$Nyhl)8gOjo5(OzmnespeKN4_n8s3dy0pWA@ZfCmk zw8yM>CSten$0Ta?n8Wfs`p~!dPeiTVT%JE+>NtIoUFcc;Rh#{c$gv}0qHghPb*FY` zgSJRV(m#A%JUYBEv+c9MeWJc4tLpJ(<;)$(>Z&+F>AnZy@+BXO zxj&H0i3D1(z>|@1!+SG1dO#SMzia^3CsLH>f=T`G1SoDJMUhN2Ld*VQi9cIbr)rI6 zfFglMQbw>MrUM-fEg}@UaWQpA_6sz@E&vH*{|8s&&DX2lJr-r&6=Y%cc+H-Jnx-oO zYaG1#2Lrq|6BdsKWZnk11C-pAOe<2_o1XeRkc9OV4}S_KzYqShF4@!UIt2kvK)|%# zNYmX^MXx{p+~1Gn^}?#EziOgsfO4!G7+OK52g!fM^fn?gZ=mG}&-sf-bE6f1cw88T zJYFi|b{659xC%ENlxRK-@{SR^z1>B<9lYcT6>{auL#cXYoH+^-8C_r${!ez^?m zDAjr$`>xEt63Fqs&bfW#NHURoQg_nm(d3GBFoSt6r_ad2b!LMmcbgAvl{t|T>?ss7 zRKJR;dnm$j)W6(h1|V*Cxz8^nCak!4hX5aC&=|tiM6UaRfHFTiJa8HM?qXHx0C)I8J8r@cKDjZQ%g54PWvnj*^+28cQZGS!8b0dOdh~i4<1Y45$!v zEv6NqnQjOr9Q`>Lk@fr(ZsvJF8*t>Py*)oT0msbUOn3*lmo zH-#iCx>>Fuz2=tUn!cq-Svh{N+S&Q49m)xFz^~(U@)da++hfvi0|cc=5UF2R;?Y^z z;TgGH@ByW%chk4rpLXp9U$g~AMFGpZl6-bVgfOqW-XPTN1e{F7E~s+-F??LlG}KM# zR+bLd5QyGBJmmNR_ZXEBh5_OUa`$FkZ;VOxNwI9^2g|ULLtzGx0h$=j%^i)-5a^7TGiIE-}2a z@0c>$^5pqffTB2O+41)8#(7R&XLD+bTq9RQn#hn2-44ESZ9Q4_{~h&-F`$hmAFdy~ zFfu7Js`^=b;7HbfUQ&5ohO&Zi-cz@{gIw>to1=iK0q4gYH_%>>J87lUDC>Nvu$17^ z7O!^OM3FY`Y{9jnCk2Y>x8qd`N6zHAN#01gQVgSZU47Th=E1F95Tn>7(x|T5^enr} zpZtF3ogK3Q_*^Y+3c5F29rEd78|I+28sX4}Ho+J|Bgd;VaUOFOOG?*P-D0RIZ@!k@ zM=StOvguyC{I_D_c^hRfdj>y74X+E8*;!NDn;vipqgk+U&|e@Zth>RjZ+-(BR%<< z-P8F)Gy!M-Xmwt}UuLBlpMQ$t(!N=B)uqmtLH&!pbGrjj`?m*)j|sd|)Q?u{&DQBP zStUO-SYB%|Zwd3+)!kukP)kg0m*vE5V$${TAB=w66z4+EO;&yZ170X!9F0v@-}{ z>1#5;UY{WSQ(kW9t|?2chPBK+8wts89Si*jw(<&Snli`e*W;6fj6rkjRJ(7X5p6kG zZ@jbd9E#Bl-a8_RhQ`J)#wr9cM*d;^cqrmM)kq6urPViFB(ztC!-1o3xyZDvX=W%V z#DIEZ;(f=?c3rUS2db9xDM%`R2wb#D%QW-a4PT8KUWQoZ0e$o}Lph{b(8W!eA1xRW zDCqe@j^@Dy?UN9BZV2#>;S|X&V`c}Mt_55KDb)c_u{~K z73wj=PkA`wkCRy@ZW2B-=+`URq1tr^VLgD)+h?b$`p!p&{@l59%Od>zn(Fq-LDEVp z`0+l^zj}Dm9s+@OHw_9ZM&Xf{rzm=X{bPJJjC7O+taF8|FtaTZ(7pAp$yz)8{{D0+ zH$g!`SI|n+C{{IqsG9J0DNE>Xkyy#eFVGf?7KZcPX_l|wFX7N8a#E;vEaM?!K0-ok!I zqXwPaowuGBooJel%DQ6P$HlOQ%93@Pb8wvh(e~}yV6T>h3Pdk5zv6qp62guFX-B7N zP2l#=g!*B86QSuI+X;XVi#f18XyS``xMU+?Xj+5womS$g*D!XJnQ`5HI_qDv{;Gjg z%jkQtzO32diZ3I6ZMI;x>FboGPkMDi9^}oq*s#lewEp0Eyi?wWfL_Aq3eS6y9MthT+)kX)dXw%Im6q90u%Wm6X+0OjZ*HNi*$JHul^*03&FP$~9gx3S-&Ie`3b^Z3OAp3YF-{gW#qH3ZkULQ{0sR1ud0lj&`j(#sq z++KWlJGsd8dn2AdJ6y>zRol`VR(VCTjzZI(cJ$%;xJHVI!;5@6DX*ATe~cW9dDwMN zKh41V_kZs>;;-BXck+4?lo>wIbFfodhGpLQG{dy%o;}O)Up@z_j%RhFLLG{7qS4zB}mTXaM)3>RoQsc2}_+TF2Td}uRX^VUZu+VAHl;ng|Prb zOp{Y&A(8*+x+Z%hFPxO4z(BdlEas4Drbl9_wuIekAz&-*BDH|IDdqV!W0=1(jU@IQ zmu_*K0eRr7zw?)mk9DdoHBJJRcKNg0*V$8HQI1-N%tq@h*`2doJeIt%vXKF|ZV)6# z+Lj;I>$fJ}pqcdiYu^pbQ46&Lb;Y1v>2AREZdG~7+5EoIN~6Z zK6BSptAnn>J$5i99T)0nrzuksP<%QJ9YY8y=x&@=ffg>aqrJTC>PtlFT|WxYpuWVs_$=G3jyA>`RK#wRU(6nAazHkXHDkJYDg+^o9s4T_TCB3Nv+LA$G9Jh$(2OQb z;gCQlh@;hs$i2p`{8V+Cru95jmDhl2wZdqw%IfZD+G zQ%t_4i@B^c*!}rGchiM!va#!vJ@yEqJIp_GI>V998(q=7k%#aK*Wtj3xS(^VO&Nsr z%GU;Otv7zt?f@yj3BS!)w>`!Kl`iPHo|HAu45q4dN2=2Oyr-2f6h;P>Jg0}UJ@yF} z5`wqF{I|zmXF^O;PbUx7W<24sar*wF;9>2zaL8id2m~|T1F_^q&gN?*^v~AOHV-=f z8dNe)@g<%(u@h%DvPG<)TQoL0%9;MW? z;kwhetZNh4UNW0()eXiv*=J+B%yVNZCOZ0gLd$aRfnZ@-O*1gO=y`Rp(^oZ|^_K3V zEnp6h7Mt{p4moI<6kx?A9p+k*ywGX2)w?qbD*=?W!gqFj-sVNr&&?v+T3i+`SRl$x zz@xi(FAC+2-9OpY)wQKXG@97$2%6LHSwV_GKAQDR-?;T-O$EcF_|30&to%>;Q_{5s z4^eX`H)^s1)~=ja|Erty^k|V$NB@D~{hA9x^*!Ys6qGT$=<(^Y6SR-ES_jll2{}Gf z)GdAb*b_7B|M0{K$^h#JD%QB?mE$|Wc`;r!o_mswsm!b4qpo;L*AK?~aH&wm0sR4~ zn8CVX$&I7ieyOh$mOLx-JqGnRO!8);l#-c#ct*9F9J&uxWH%TE9wm`tqX0 zx`EyBFKw27DRBuwX%9?Qfx6UWMubCDoIAozGCUOJvbr zPSGj-t_oIHHjJy)R7DE8uiTS6Y1ctV`XF1(=TN>JEMCN*587npJ7a0 zZ^W~k(cuwP8TQjdCT(3KUibNA4|Sct zjw0SyboA8`mFzi_u7pL++DBi#J5xuIM$9f6)06Ds(-yL)c4&1=2(FU}K=bNIZ`_4? zSh+do^D#0pCwljI+rM*Ab}-^A$X9Rt_gL+kuj(H<~m2Cu+t!JanxG_12O zRxCrCO_sg;qfG8YE@m}qbwUHuBVk)P)5c6h3@o2VjPj=PGOxoWh<>)bXZv`ts(;d!<2FrA0hAzGSx*_Sc#fx zcVMDCi>y)C*2oXvX?^)JEHhyvWI_VH1v@i!*P%}RoGm;Xn$U!DYriXdw05a#%HK?jl9-X--bxczd|JtrzS+{ivub91H&(B@#pHXoi&mE{UUYYJzqjIP zHF7f6<_EAUlQDwjsBfKSc1N!7Ner8PjxR7t?n|gMd_yzMu6wk^H9&9vwAtRTW147i zqU*@y0oA^)E!Oksxwepc*s#qAE(32W>fv}BmwpX;QD*=bgPFySP1X#N!P%a5-b+os z-el4t?>eOnw<~GHo4u@i=gQ|=+gN8V7fl_Zn0mbYeRR18y?1u0e5bWZ2gow|fNUo# z8KLhb={z5p46I5HD+oA@ScN1IC;1lV#VKf;2|=CYChmo%pK>k@r`e#d*AM35Ap<+-et7>)PS& zV4UxY^&F{Fe+Ynl5EUL2RmCicb_wZcb9Tl~Bh}c)PW)tb+cbWY4CLS?Z+THL& z4DOU?UVN?Y5$*@ocE7=Ho|WuL>Efl2;oJG@(UY4E;rxSj1{%*l9Qjdc3izvN8s;4|xSb z&C&&^sqltx)K#Nz-CpkgN`%FI4eyWla(s7d$7bjeO)+w)vBs{}Yoj@1$2{@0Q@v;& z|1}A@S=iUcFd?~<80|xeD0cz6C07_-uy9yeyJ~H zT7yZ_UvsO;Z{DPgPccdDJ~`s?RBg5GL(z=3)E!f;g03yW=}o7-9WT1&_0($l6wk6% z0f8F3dSiEWrbZ=ONy3{8arE4jKaFv9or5nmmIP2~JV6w-(GnzE&U%w4x{l~s^=0X? z2jryMVx$z6Cc{F=nW@638(hN&^<17|^r$o#R41VpYfmCr#6~aBAvgzHtJw_MwXCO2 zScJxuAjDEh|>89?Gh|Ac&$GsOW*wWg+30+9As0p_qdLgSN%gua-#Qnau^vlgtiQU`#1XRQW9e^|P+k*fp1s-otgF>VEY6 zr=aaUBPSKyG;j+Jz;}5a%0TxzNiw^yS!X>%!|0?QT%s3eZYwi$il{)F2COPgw!zvA zNK*}!mPj2f+2^y=5sXGXZIwF8I++B*UPAmFOdyhST>#|I_0T1a>3efIvHd(UAy%0_ zQ*D~lO6XQd&&^fRO1mb~Ff z+8x>1#hc?CX|@iXSG|$7t{NdcOCzh96MP*JvjX?YsRTWw=+6w5H<@697?IcVrprtq zzziurt$9lK*fFXZ1;mVEd()-b6PPv`hpPZ~z-lv3=4KC&j;B8ifxyztTtR)KDL!Kt zjY!6?pj7&ZYdkb@hflu{_N=)J?UJd9%`*ERiOaq>PCIB}{B;Ivj9W05>Ra&)MRW0Z ze-DD=-OsgA+=Nvn>9D}FhGRhp^2$WyIa?mK3@=s`DzApILWJ1(9D6G zo6}-s+J5arR!-$)7O;B8pw7O?M;_w~S{5L^4TxMKAWn;%007oDqK7{gVag=%wtkLZ z$g1}a8WkX-yf!8^;xmWNpBb&S%Udrh=w67Vil#OT&=qx>Wd(vTRjy08DpaJLMcU30 z&>d3g-dUYDi;g3& zK2};OGN{gP-kE)J;Eli7SlmA5i5}XW4AUYiG`rCW-$4~3mYr`X!ZQ#b-Z%do<`Kkp zkzxg`1`_1bp!bz*_46Fs+`%>|cQ`+z<+9Wh!Y4N)lMCT9zGHSZML7C;p1dcxAXnnd)FARtqwm>ZAhXO!`FQL879bj?VzCaB3jeGDk2<4VCBNQkb}Cd&e*l z3uD>A7nU}mm{=)aY>l0!`rk?Y$*f8864-$OuwA@0a5$&qs$Y>I=sWsQ;U_f99GVb=bAF8Jw4vSc=oh1zln6g*g>?vL^4XAKFzGTwIT{8@l2KLq-e> zBt6zTn>-p%JsGn8pb9gXtL>5Ny>ID1kFm70_KbEMAq&;-(q?13_5Lld$#%HG(GmOx zdqWm_hsVt-|D559gwhTHV^d{^;BQ=>YD*S%u_5p5yfTp5H0!S~5bH2+$tb;p)mfIl z$#2X|MMBNR98So`mTiyeyY)g_PzQr;OmRTZH6?H=hl-?}@rUGuMXI%En57+Zsy5W8 zlY|61)Ofpv#Xgm58qWq&NlB0mL=abfgd7mN-({x->+N1ZADd! zhV%M}@rhWh1N)sF9L)W$0&NS&_5vu?M&ICR71_`!(c|MXsw*|9NT%ycHRGi=j(WD~ zR3W!_cEVD!g+luIwDQl0z&DQ3f zo*S8MT19NgDJX3PP+^7%OW@a=C8JF-V)HAW)g3#E9M_?kwnwhyHD=_<0I;@rfF zFOt!=Z*7cSK58(x2++OmYf2ul?p!wE@W0#!trrOTRAOwL)_lh|?i{~jchzJ3{9Zb# zmCs@7@GCtOw`rpNO_moJ!d2xK6r}q2Kb798reQDCsb03(2Ia^nrBA!;M-W)x4DMID zw>im!Fm@}u2n~3BxZN|b{Jl)Jv!$7ML(p>uz5Kl`!>bS&U?$1Okt-du)vD8&@E`Tz zb_6_HX}D-7{D?WQ91*hF9wI~SPFd%GT)yBsDe3~2;enb+%X_<cQNeXj0+kdvob~Cx1z4QA0X=ndfYG&)FfP3zeC@*@dxsBK7iO54U|6|W zg_@bhgq(CVe!h(q%M<$W)H`$lam<2!w}o`VX1K;+P$Uw2FtOz4nL#J}`ShzDs5&2_ zFUr>a=)f}F$Ta6cxNB|5EUwlLA&T=4DXEBl(NB7k+m!BWD-rACfnTld_3HfdaZaBv z<-JU|&BpD+&d2QcAHh$KUgTY>dk)lr`>H%Kg_$Q>Duf$K=VArg1Rppy?uu3;Z)^$` zO}^Va@R1YaVENtQC4Yj`peoneSb^ytx?*$p#J-w9nCK@ulZxpUEMixn1^cRNRDy^d zSsK;p>CPk^)zC;ASehb&haJmnj0F8V<^1s+%O~JRF-QXNj-7*vwRIyx3h;r5)8VQK zg2)eCls{MQ>kxy9P)zIX5`EH(ljL}^HrIIWDu3vkNi8!E3At{4PJuDI(L1P;B^!V2 z_rr<16)Ea(Z_EYQ^$R@d8_`SzzR+D@jbF5&6qo2Zcu(b*>Agm>m>w^yGKW4>XRbG@ zq`=Gk;ZDh|SIPBCfYudn)4f=t; z;$h#_`^4eAp3YBaFGe(3ee@HNo$-Y6Tpw zDj)Pqpq|Z+2sNJ}4kWR+5}UI}{vq8Rdu?z?qes$=Hv0g8QPJ};Ts zm$bSMFyb>O#eutO48R#v>c#_eEmN?t#VaU7%Vk@AuQ{OhmQudLxH8=l=9G)T;A-aj zJcd2_&03q&Jn=SrCbG0=Z9IpRG@&y*Kw9weBSfe#NeS;~P4=K-=RLg;eSNd@#`hLX zEkjQn-?duDl;?Rk2p4J!O~9J+GErMq<-4clF6O@6o(MeJwzDmkJG)Z%9=|g{+@2$~ zLQej`OV~Qk`mn>d`ZHt}(MqAcvgOX1Dl!!N|BP<~WdloLk>S@phaplQ^bDJI6rnS}zqyd}Moee#@Ut*_42y&ks9b!hY%VUM+WPc>EY zq=*}Y(pGhL^0~HSwnx3xc~pIJM=Q5SZW0*}>*Kf>d}jWj{A{Ba$EZB8R6jSKY8Pt; zg4?OQIm&d&)cH`^FOd&~#Dt+%*ieCFI~nI^F{_Nc!bvyZZWefyKB~-ihqu5>4XO>h z^$VGS=W~j2)SzN(iV%lA^()$sc;!TXL92f1D(@|XXIbPdinh~xukrhE)e@VhgFKKG z?wyd842T#vF!P{)@64@N%osIhj*EtBilx;DUycCm2ejoJe__`e) z?4Ztgl;xkOYL;aRaqYGKTpJP*yf};Vr9$sLUAx&IGLqjlhA_6P@+^Kr$;8TUuzh`X zoNvhD(JD$kGS3_>eYlb%2;D2qBCyR^4HH{W{!X5uE#Yd}t3v(JjKdJ?tm;CmICI>R}hgD{( zYj|`vm6bm6gLcLrf~=hI0_4&LWOk+zM0bp?dyObnKfh+ctN-RM;)yfyO7RzgKcr|z zgbdbu!N=kX%$uw&qaysH=PGsM$U%77^jLO(-hU*0Y9S~_BZ?;t5B#JBPxs5BjN$Ag z?E6|v%hIDI>gsh*9#7cZtil3~&GcH)8wawUe7S^$WWT~s1 zYOu+niB;}cZN#tH^?8iTccO%>QY!CT4y3R#IIURV_J$}Xtt3$UNp9h_JS|r_4o>n* zz6m2=ZZ;3K9(*`AM~WsT+3Dpx&=Ato7N5$HB#(;Fy{f5DQxbv7H96C?P^4(9--2_O z!`+cVw?=W00nUuZ&(i^nuKU*5FeVjl>85; z4zg_9*~1qnrR7hjAhQ<^tSyHYx>SZ6cfwD5JCFXo^ac7^dwvhL*!rl|ff;h~`xXI3 zh8g9UFrHMt@cVK2_gI4b`#LX-DJW`Gs*#aV|NeXynI8%1HC)oc;JO0<^w@rM6G;A@ z@(-UjS-dqK`L1eEwMYkluvowZivwA>*z_@&K*Eh)+s>(W-2Z@DjF`T*gh!W)R5Ufa zp)^%!#pSO$!F3%srj&kz0N|+^H}DFjVV*6^OxzSY=u>euFNhfa-o3ZI#v?Gz*U`@e z_v(rI6x4fgitN?jRn_zIIXeSlLFHbJjU~zMrU-`O;XJjTVYaz_p{F+mjtt*X3s^3j z6r{PnlODt<_&DzGxPCfAouqHV41jQrG+Y7C`q^dv8>yFKZ7aYW=MKB$@Hw z>ECT23Zvge^!HT*P)JvkM_YG>4AkPwPJ5m*PBAt*r{_Jbh@@GafupB>9; z{x)GL4jvwmX7bq~UKhN~0^kRSnAZk3z@sbe{6A$5$fiCQgb80*0oqxDXyKefQVx|G z28xLezHqY>q%yl!H*9VWZ6e`)KH>CR%@P)$N2vbeW$bqy}m|c<{z2G6DBHZ`;OB3{Wvyb`QGlrk$8q z{JV}U{#jG@z{1CK!nyHqdoQNSuaP%NP74TG-ZD3X-Ul`kJUt2gl~D30McPWBore$P z!b$-|k+DhOZBAVx16z+)P>JjcqM8v%G#S@BmNFhEeQ?d2@xmb4<#T9+%CT5?iQ1W> ztJM0lkm!ZFU#LYNW2Xr;e6sY%-@fi87pJ=pp*+^}`#IC$Ou(Nob4IA_Ndcvt1f z40fT__ax~bqg?&;Y8wBNIT*Y3)oy>MU`pCGAmDnw0_kqSU=)Oo^G?FOG7XrDAw6mq2ip*KoqV62(2c1H zYcGdLHnyG{`X+2V`T+s}q_J$7Hc9n-c~f8Z@?g=U_pi>it|RHvbZcxD9#jJfTG#xe zr61j0<9tTFb#Ex?RDkeHUo#^HYgn7B`1Y#nlubc$R&)lc5hWV+;_JI)<}nZ!rfuU? zf!I~v7MT73oT`ZZm-q_sRWtLOA2kJ_$N9A3nkLnL;9sOdOw6jDs9X~sF-ISM3Tkyb z6S%+}rq4#d^L`(y8ld1>E2P(X1xwf^oo^~HWr0>4h6$kiL zol_!q>K{?1)dQj?V>UR)DWvhi_Kn`B_f45JQ`wJA2fEG{Ym2z%$3)0I$y3!G@lT!l z@ZGD(ur`GTc9u*Nv?l%qX9wo2SJiD;^reisg6Gd?|2?b+Fs3Z)PxI*HhY3rP{Df@w zdfpGtYY_JIyRllb2|*N8`*6FFyPmD2O(}R{5^s_t@+xE`Ut{>-4SLB5;U0xBqqA!A zu^Y+`#%}m$V&QES!d}ZFIvh{lg1b*O3p3kX8*4wE*e_M_zUH7O&r(C`-+Vv%U+8Miep7&F66PI{G=s(QYgd@c zz;BYh%YSubl##r8L9ZY;Hwn=m9ToM=bm7MjMRO^O?Z1u&e*crqLPnneu&6E&T*vV; zl8JZ!kBk@ajd#qypBeB*>GJPs_3t;Pe-Cp1TVl=sk;B~h9|(fKY6WDP*MBhsKboNY zJqp&>?RR{C&MOF2RBXD>e>@=sl#36{aF{tKQxDsb{BSPJBa2blp8gYLfeT7`a{-lZ z2Z_naHl{k-+P&!S4UR;ADsLXUJx-TQ=quG|C$HIlWgGIWMt0S zonRk#JMpWY0kN`5MSxkI0s@u-@Mt9+i+2APk`?$y2oG?MXwLuN-Rb}7CU!=~JsCU&36&)t`m|BJVLF;{W*lk-bRA zu5?~pIf~*j57%kzET+V$j^h-i0o_C_nW z4bwDBBy1Av+n`}*J*rSQ0qQIblk%y0Kf`+q<7?ujv@MVrk}i9N*82)gSj3HGEf_ES;f z^sY*bq$Vk+xKjFqee=u|w~DNhsH&u1J)Cx^uIR0xQH+L9g<7^S9ZO6ur0u3a&|F=| zC`mlSJaScCMkn@wO7wamF&S=wxa5T&DVH&o$ozh36Bj6ZSjg+pOjRN}5I?yqAl4Qa zekgN!e}-JP#K#}VymLZ(_;5tgxcKv7ZlFAK^aTUB)z9xQX52RIB znSaY=pox;U*ZSG=W-@M+i8bg@?&JlpW2&qC5Fmy>_JP|8A%(##ltB-~G~$^IjzZv5 zH-b?L&LIkduw6p}Q&kz{88v~)aBTYFG`@B6zE>)?1}U4yh&c=~rXn!apG)j1vn<=m ztT!8oIas(x{8Y55iPRRG3YR~z@3MS4c|RdtHi=_;9lsD;4;MANlfUiJ!a6HkIy_)> zn8*I*+7gucXX9>w-U%}C00|hietoPc{x&&L?85|14xJ!z?G)*a$5ERGVI25nO&iAK zrcR6429PY@w3?BS8A;rB8!kp{94SnY{RkSTwiPEY-WU4>Mz?go!=5p;iXRWo z|I_YRorh4+ivzC!XK1MKW(;f0T0~}N+hZ^gkFcO$w^gK7c=qs}91&eRJWe?;PI`%L zq9jk|8fa~b>TB3XGL8{ z4ie37=|%q^=cK}860fzismRDCKf_Efu!*#WQ!ZXF$ACg}1jEMgQ|aUntz@drKuX&( zM=NFFNKF@4i>$TT>pqnK78$V`TLQ1MR{u80oID@lQ|*%y#=s=7o9+HKrBznf@N4F# zQ72~Wh09rwcbi@+>6q5J5zoiMtys}yi>9zWgRMR0E4Vapq`(C-1xCdshFFd}^F>GR zVA-heZw9h)P?#E^Xfb?{djgT;5UOxb?toW9w+X(xM@2@(Olk(Xw(KxGJniUdgZJu83qOw=iH>lRrio~J6K2Im0C55NM;b=^4dIF3wp zm!0lqlJV1(e9Nj|?E{2(8*BBo7SRkOI28hYxr`fe@{J9KZaVIN~4CxP0_H zxodOtCk7mdNk8ONC@3&W9lVmJVCCr{_enz#**jw)`M*#U@UJc*qAzX_n$R7e(edkl z#e4X_8xsBvKK%1A;@qNrM~@{3W^EGZ4aI%fHh`BF*?iPrn2bDG{)eZH58hE4aip%Z z9AAXu-@NjFhPBMx8=9pPw>N7Z+??7~6$)f=h%H0sR>K`8Bvool+@@LYGaWo;ufVR$ zNr)%1t%z@m_W5qDTkUOGd^!!`@In75D)1Rt^bquU`qNi#r&UC7k`cC|I%n&YdKw}h zEEQ3Hp}T)_m3}~CuFP{t&?C8KU=mh88n*QG_=GgQ|GGDdxi3T1MANzHGVM7fB$3>% zZ{?m<>R38)Z_L%rANqs0D^)6QE=}{K6DDy;_U-lFAWtK4ilqb^7J;NH?w%;jFj3(W z>xA<1 zOm5g`sz;|Rw-D*3M5DV~t1?R2(shRIP3}irt8D&hTO)%gGUAFZ2IATNrEdiD$})a6 z5&Q%3zx;`vMoee1Z+cCY68?ZzFIo&z(JN}exs+#z_*j=f9arT>n>KOlRDT7tNy*d= zU3B+_4Yi42XI1YAo%>T60#)|amSyX4T|#?ZQ9MDBLLMWgR^>Hc^pPCZ4uMLiG}G-G zdZ27$le6Oz0p(5B&ekP#7hS#UgLPGpmZ-`nL~StR`OP&NoX^q4yAqs5Mt(-;?}e{% zNQE2^Z<61LjJ44>XH2(^t8+V`HoGm(Ec{G6 zt4Gj{{@VV}(@*t|ZuMN{eu%iBdXPvl%1Lup(?5~Xn{<0sP`-*)Bo|&Y!4PMpj&p1+ zTJ8-JU3p^Kv{%CW0=+h%C`nH_5Ep(9s)2KuEnhi41Npz^?PVqFI~E1Gj@-Al#?lNZ zfA)%Zjl>%<$0{G3WI9oln(cwOsd3I{WbRB#I{rWqYMW+e$O;MJow0{omUzaP^vB$y z-oGzBT;yLikCXFpWSo>5iiGMJXI(E+}`Uj-Qx^k z{>xuxNb;wr9HtZ+A=w;37E7XyUpL4d+!CtQn2jvI*S}O}q-=G^J1R4GR(hmM6VlTM zsQbpF=Ow*$`M5OdH{-2zz9hOlseR>s(?r%_N))^C;-rF**v*F@zarRYD??be+>w^( z74#2Hc;qx^J^ekCm8N6oBKgAqw$Ke_QXbzHPEN^>ZJtugB8z%+^P~$L6>(}aWEx{S zket5ky9-Mf)pjU&-=vwTl0Tf3*9*18H<&a?V2q+Z=x4;I2!54o4Y!NE=x-771qW#1 z*8ZEj>vT^jLX5;9bt({&OJ8Gd+}`NO_p(sQx%#$AFP$@5?3#aqhkED3sqG4mfw%-u z-4!2#V0g`@FXPmWv`9;;#$8;UQ^8(*o?G{&=xIMx$u6w!4csZqUZ#UFwFRLh^k?%f znWprAvTtFmjYw!iDUdXsH%u2=n{3SapOd`*vN+Fp%<6k_zdKILoew2q6d0TA{`Oe< zH*G9nH2+`hTbGAo*whvmB4uMh5<4L>#AnuOd~}3MU0l1Q-*v3|Z3s@8^*0#K$$E@L zgDCIGkAXsTCTL5E1uJP z_N5g&J+Mc*n&QySLaT>2^i3h%Qd7cFg8N$?c>tUn1|mw;<;Sd@a$|`dU)C^M32m_V zv7TarssoBY1i?s4`2aarUokUS6zje|F;sqrj2X6vnZq1vbVUKR(+LqJBg=e&fT)<5 z7p7Fo_wK#&2@egu7QXR&43u8cb#DEtS#(iuTR-BkkLn=zI#kFY68cIsfo;y+B?bq_ zsDcOKw8L;MCb-^lgTrT(H)#C+Mw2~I_x-&y)l6h$rg$&k-X#5{Hm5c|5)Lag-0b59&s&lFm-))MC>&b= z8hWbiCj}>4p!Eg?I{>R^w#qOtn@tl|X-$$bV%P8;Q8x=X$OG+G6qa(e&fibIjf_kr zweFOs`HxQuy8JkO01)?F(CnB>1zE)yHwd84L+2 z9?(csL1}L>FVQR-*gbUt-WJe?dQ!|KZ!_y8*8bf3~aoYy}Uo7m||& zCeqDMHarj7@v^9qmh(&EHEo`7R1*IUUY@7vD|hKw9J=c(+^!tNK__M(HwV*-J!V#J zLwc5egc>DLyZ~M`@ogqvEooPnoboRSG(XY{AhrC3>yA52JuDe7Tf&ZLiB$jxO_#cj zSV2e+;E}N{EyikzCW};hB0SqE#geM9h%r>g^v5`_VHJ*Kvm1$=E-`W3CWhUK0s?JE z_>#lJ5v`b{B9VJ} zezy0yk*}#d?LGq$3{o4~M>o8>ckqDcv0?lH_)n|s(u(97*2*IYH@NkL6}ZL7&XCDl z2NnRuP)lO6Rfb9y2h~4Eka7($lZMo%bW_Q#-KFXJW(*F9ss^BXm8MJL9Z^cz)Ty-< z8PPRdt3V%)402@rDItVg`2L~4Fx>n4>@ zrQ|9ItB6M#P;65Gl-Os8n_)l-y$dL%-(Kj56q}SS(XU9TpH1OCu8tG~$4lHvvb4hO z^FJHTVikYe3T8$5d=DNPu2Fdf!|zQy_2CU`ZM$f!zVv{u*SzQLZ!AsTUS(swyX9#! zRa!Iy9grE$_uxqe4PrFZ95-p5xlEfIYV4rNe)v^)c-=GWZ~cKMPW2uFJ667W4$s)} zvgwEQUletmKwhgsx_Mjzd3;KmpAvf!7VsJvg-Uo*KB>&j%}rZew17X|huBZE#225& zyPWwoE*#`uel!AJ=^(~G&KXLMRG*@bF=%roj=m_De?>5%C02CFEb?c@pR9va~^a9rDlZ zm4isXhW->p(bwGC^t+dM35EouWuLKM5IU&L2DZol{~)~#Q!$u1#f=utsfuPnD0IEF^@Ot>?z(7wAi}@cTO6%>Y}UTEo-N|Z>h2w z1B(%p^oVE)=rB~MJD!Taa?8NOsV2=$x<<9Pth z1wces!1K}!7gf(Z%ir3LEjJP|bzC96=Vd^)$9gRE)Z8T;AU2`~Lc$UUM5GEv9v#da z6zpqVo2imi?sc~rY7FMZPtbR{b|XPsDNOVN)-r6`0J+6C#e(w;OV9?gd36N6^`*3NI)tXG7fzbzH z&P4&(m-CFi{P!MXpEJfj`2vHmGLp6C%AE7Quj_a1B-=RAzOU&9zg2&h=Wv)) zIp87EE$!GFXO#oJu`gGSKl~0T?L`4^IRiOEfk5HLQ#%EB%r-F{q7SsGmZdi@FZ*Oh znV?mh+jdoWQCP{@ET5af({v+yWS&Xli{LUnvF$pL&QjW0$-`K&pxKJEpyTj)YTvN( znZF4{?CFqa_3#U6%J*l`&fhwbYE9f76;U83PeE2uH^9U4J+>^ODC4-XN&pd zw>P#M)K*OVtYte&yfhi(&+0*c-oPHGihbi3XFu5IcKl$le=_0?wadyfBN?(o|ORi2z zSkCE%qrS|E{-EbI7l&}Cd9J|rqa6zK!bxZE9U7ZeuWNzF`+OND3Ci_F?q^j9n~rpQ zaV#lHFn^z8zL6)I5(G=V8&Di$-qEf>Ms;1QNyK8Ir+N}j#Wkc0o8`K3dC2y;hoHh} z1*XZl>2GzMPnH>G)^2P`8DvsVWW%&6x%8Q%)|+vCRO9;e>TkBsbu?OH6f)+Lm9bxN zLI32TpWB`rtZx~YGbxKKYk^dT+@d^Ew_54H#;VxL#PKX8M$IGfq0e?;$kYq2RrY|9 z=cEM?%7toWqJbZ=pE^-jj^(x5lSkE#sy@W5O5n5_m$zI0fRr8_^5})x z?5%s>O$u}w{7rcl(2bQAu1NJQDP!ypM(-t9V1a`6q(dgQ+wEb3$A(t@J8jl+moL32 z9^DfAI^&3k{)Hu>@wZ;|lQibQJm>?|l=ky-xzI1W<&Gb23(}`*P<>!tK(YF(-CAWZ zs$HU^H_PZdU>>e=CwmcF&!@+6NYdIe+~VX1WX-9ZNa_!h+TRI@#v|87pZE5Mvoxr+ z^i<-B%f)elWR-8fUCt?=z;g4K^9mL)l|_W4_2>7ngjA(@tD%;n)AKY5%gS-WSYO5Xt$SzE?SV7~YT(&L9%Q}&!2HQPs&Iv#uZ z)z}|Q%^s`gOr!tIS3Bo07oP2w!+$~JyjfLYUwnxhIP6GUt<7NlA#s!lnR=Lt@!6hX zoG-J@+hOLA34)6g{J5ohhe6h_HgpR031GU)o?nD1Y}@sEvL+?Hk>#y%*;hEfW-!io=ic*oflh z@TB*(vc}0YBk@*MQC7HZ={z~gDshkZgC=v&ieT(z)=R<`d>=FR@{*ave!DH2r{@IJ zGtC@H6zweLXEQzc*6p`I`T6l>1Hm1&@t*QsN&B%HEec)usQ6$QpP+2DfSF5dE(}&P z+J9ZXYUSw7nq;!OJaGySyBn=cnE)dW`ObGsJa zOiIjZ=J7doWWc384h2*wygm5CMKeRg7&xP(FC;kC_Va|(7h>S5|6_`#v~Ek7yiuZN z_FhI!9Q9RYuLr@QD7>dVO)#wE!|inZW$E*K^OUR}ch;VKM;GsL`te|SC%1i=fnAA- z0#ihA%Cx!1Xs_y3nlbvt96c5P7A{vPHn)9X8ycCh-qpSxf*jZdNt5x7%?9wDhkK)= zcIt999fRwC-gpfDBtD+W;dhc|--9$%RO?lT+9hw-=VcH=Z~kp?YwYASu#3B$3Ej;& zsM^lLEtjF?W4KukGVf@BOT|s6tTo6PZx(tH4F=Z!V>$z>3|X#oMg?GM<7o^X}8!#%Nd4fUa8t8r+f!h5!C*r#F@0XnG0q4VZXhvKElfyDH}qX}lt zEJCL$?R-CJd>|?qWKlosGbz78yyujXy8}hZ46)RW*6PLNJ(`Mwr+g?XV>@c< zJ8pVac}l#=dI#?Ma%SpjmG5cI*D#9yR7Yn0_}TtZNN|SxO%0ziXTc`WR_b4MQM<8& zyA;{nVeyH2_j_fw<2%fkYy0b^B_&fW@Fk`*MBBT0&?cCz0mx!i?Xr35rRMeC)>(~2 zczOpkIVVu(3SJ#p6L9Y$tP+%l<0e$}6`Y(wnAK`?p!k>QJgnt$^Gj%=&k~5Ut$k-k z;n!JheNz|7NB&gkd)}1x`7_l<8Q%j=Bu4Wk?^yLpfYUgQ?-LgUH4$@AWuW z_C=++229j0B|sfgF(P+9@#hi@c0g!*JN#mD6fGe-Z13TMeE&1%$1ONavul9z;x5r6 zR4BKB14E_}YLvZnWwqb!qok8Du;TPeMe-{rWlzRwH<$u#K18AN#2FEzc*`E#lfC=2Tnog2h2?QStl&ZaoW2j;~@RFf}YeL9T%wfKe{5`AXSHHjFLk1G^4BsLgs8pt_t4S`{&PRlin(9 z`FW?_XuiPN<6zw>SqMGV;AQ*KDa3IszrW_(&gPiHMoiOlD{TjCck72I3kP?VE>GQu zy~+`>^_%|iCi{XAhY8qzj$`W+7jxg0^d&-IZ@oXpW7?8|Vz=gsIBUNoyMeT{MoftO zTshmYe}&SkTeco;IpGE#d|5(Pk~6#OAn}ea9}8)ajpF&H@_-Z8qu?Ll)}DAg-tWIS zzU5(>ngLG`sd^A3@ml&Nht!zd6((&+IeKXD02Po<*$;Ra?SEWw(C~V=Y$qrPtxTLP zxP#?p9Da~pF}Pj#{4?<@OibEGJgBN{5Q?1=YMV zTR}-&3#7Mal&yb>IpYW^Yv-b#8#!8Vll7cz#vZ-Azy|1R_tA@!qi~`o+@Yq1vM*sPKM^lxDOQ=6~))y=C!*<6XND) z#IZG2sn6C>`T0QE=9LYz**y)J6+I^fk7mduqHKcmb+eJaJRH{ImCjnquP!&S@zshw zg5h+eL)CJ8*UN^Z%88gT<3&okYM@Q#UV(}dcE`E>*PEUT8kd^Z0(+T8`roLxfGG1t zVx05=F_@nuk1Vdv8JRr}$!w{f*Tt^4*>3M!mpe4=1P&4ytDPX+-o%#-sd`5TPd^aP ztg{hE-vmtO`oD9P!aeHgcjG>Z z`A$@YWfsKt?m^_sjJ+Yu4x z_ZLpj9}YrJPcM@H;(J~^3Ecy$4-_Cz+^qz)T8eonQz-~h8XoNt0wlv3Q1nPHe;l8CkM|4uUOB_bKdOE~$^$=v zI?U}lt4eVFNhd(t-yP`h-pT#%GbhiU`8PR>CaV>+KF&)aYq(fn1`5x^y}q|lJ01Y| zt6nk~Fq*E7;pG7yn4C$DdQ)sM#2&auqyaJ*(%08n1=+FRPy0XFM7eR}fNoP&{zr>% zU1bxjp$f}c2_=J&IzPz=i?K@+j@j}Z?G=8i>UT9#cITVugbjZ~EC$R5tfqKccBue; zHKkF({`&>a!*^Mbje6-K8o5{pSYr-kXgaS_L%srERL#y6Jo*f z0Xcdbj}Wc|=x|^kl=g{<-yv{u54|*?aV$%Y=2E)HMIC6dUoS3Ca|fKmTE;1oM9*RU zY|k5#DePs(nL&2|LLXOTKi>PHVBhn){fuIRh!{PYGqPbn`y9NGjwqYs+41^Bz<*_Q z0*RY7Nb`qznl)Hg1*_*M4VR$tpC@QNIJYNjmoh!qC#P?5&Z_AwI~dpbjX|fCmy=6B z6W-wF$DZ^+-KQ0Ito^O3rQ6_zDG{5 zTESZSHd&isY!GYe4gG2<$aNHPjf@GbLu;XD0WR0dbPdz=qKKzOJ-SD)r)4jtY^7-f zx;iF0trUp6WZv@PU2QCgi3n8l4{*ih4eKezmEXd%%^w0p&YT=1#PmnJ!-<#eeOqeo0j& z4emVN>3CMW^ywe~JfClxXNXbmr(Ru-)u6_y1nx_lX)zdNbh2L+=t?&A`$1@(4_J&w zFDE=N)vvu*u0lwvu!OXn^8%O$d7?KuxBzwuekm$d1cD=>r8SV{6qb{Spha|=u8GbSjK`z#N z0o|o-B3P;}S-h`g=OgH7s=+T2py|El+AOoIN3Fw_lTFjz8)7$#2}48|){QWG$saO)`YT>?F37E-FEp)>hBegmnS^GEj!rnnoDvnpjdRQ4fQJvrEV&!;%Y zhQfixD!Z^7`Zas*&YVM(6IC7(&48CKgIqZKFLe;;bWF%?q^T-Dh*f{*I{LjPuh27* zspVJ#sCY`Ts#B5l9s}jDza##q6Sc^hh@E9ta|^~;7lYiDfDli8x&Z9zklB!|NM(KgYff`v~<(M+;PgXT#Ojr+lX5qDLeImJEXxE>EL)j@bNl` zoM*+oh68-m>|4D4s}-`tt@!6_Tbg0(lSk2rEBJ%M$1iZfKvS5+{Xn$O&O5f)Dj1rX zaAiNVqFG@qP+L?61&+8{%F*W?mFyr`x9mi;Bwf}c|Gw1%jCV7@6$x>3Fa8I97b&1Y z#LlC9D8v@-gm}IOX^Z!JE`0!%ea5G7CyPA$$5+$q%413^A2AC)-89lkRZ|`Ux<*wd!do#Gh6ok@V*W|CMYB*#UaRRa!99V3N4SnB7K+`Cgcq zRfG25>?fu!=px&FVQv;dqQ;<6!9dzt4i~rTZXCDWLMH=dxkbHtl)f;&EZO0#GeUQ! zi|jSlW09i%bS!dm1LFGwl1fKvWRCI!-04^G2Oe}G4h8`on_l!|{)MsX)Z0Smmd=;z z$i{bn0%gx@7h5>B@)^_o_BE69``Ch%$7hRbymrrNTq0Vd+{6)?;{QS51p;FNcH>On z#UYQ$UDftj7~jIU)KI@%HRht=ur|_hxKeI>5tMvWq=onm_n46Agw~$Y8?cd~HfmPB zDE~@#Su0E<&?95?oh_ieKUsVL&B`4tm9i3Assh*(()Tjzt2WR!_J@MpnHy8PuRH+k z13*#lJ=!)$dJUg+DtQ26ZX(#o`oxmfZhKHbN)*Nzi&I7b6obsg0WcGLy5Hn=VCMaRT0Pp~2iQRMHLffq z0>DICGtTeZZ#>$oto@=^kAV=aq!)+RK;kiHpa&(iO*k!k1iJwA0C&-&yak1BjRXNA zb1IsW2v8yOI_M6GL=a>CqRrD%^U>Kq3F_mZ9@HDq^r92unFou>qmG+H^eB&XfL3`< zMZhR;5l3sy`OPX!#oUpTl*)ma7q8yNOnk3~WIz zyUuAL6NVe!&G-*(4C!9nQ~v-mkR8_5@SJo|UTZAt8Son+>vcRv5ri<3O2QAhU_n2G zX*&%6k3RF$D!`u#Jm$3LVnv^nKduRMtAS#r`(Cbr| z$=&_+30v$x@1iw+E(ZDEcj2$kMUfqb5Mos* zCD?9XS`y|lm;C2wuO+8kfq(2;fXw#N(oje&!=_^S1eGVY*@5&{O*x$>w%@T!4sGq& zO>1a(1`Hs^Xn9& zBK_Uq_^$toxbCVSyvzWUMktB1Qx&$6w?Q}o02^H63YbRzmzVKPE`Vy44*qrK#2XFZ zhZSf3{T2mY{NF}3@atJ^qzPoZOE3?1tdnmxEU@wn`D90eFohV{5HG;VS#f)0f{-g7 z!ye<+9H~U82hpve$tY(gAtS>j#V_X{8u0p{baj~rYkWfpEzLELfA+|}UfEx6{o}p{ zgxeyj)z&nRo#dSD9aU2X5GTEK@fWzIbnU#S?vg@d* zat5X8A%7@TJRO^}s=cJYc`x7sKM2T%G^` zSlVmOw%}6-7rPL%>Y&lW;-bNvL;EMAz6y-}D4?n`p^g-p^pZ~mUA3bC^_634@9%&G zo}+O?75N=b8!~R^;PAgTyNUm)7SIUYHMIsOGkka2)DDyX+=D}xDv+HwAJD3HV^+-X zz?%Po4SzMS@xbS_0QrQ}H~wr2&36Id?e(NnOQX1cmA;Bmen5j%(3c7DCTUdxU6Oo< zAEJKmG|e^6f3-0ow!f$BGaOchn8w$swuq^ zBeVeQ;*qve4{2yNLLX{tJ_Rm6@aSj-5Wig`!X^g(&I+K7Ya_{%duab8!~O=4yQIvN zMmqIjsKbO4N$xv3?u0AtKT+$uW{kW}^Z4oiJN4hGi6(c@1=ZajAeQ6l2n;dJ$#}m? zH=ly_tk)nWuhow%J@F!fj_KeH(UT3S3d@|0qmAFhk&z7`aB4BU84Nn(OG@v@=$nNdcS26Wk_{Tl-l zWnvhAh5zG+;~d;!>>w?98Q9gvHIXllC)0Sn2hKt(1HS3PTc$F0(dFQ~mV?g;!dfBp zXCKk3eI$Q8nd5~r{`0jE^LZhEAunk8k#X%vm+|_X`UJu?a(%k?J^*-*!$9`Ce!dpe zD>4y%_~+vrGOUNnE=#34~xaZ*j@Q=D%sOx!0Mf~|M#<;ilvt;WR z_GFcy<8(!v)6a`EUWZv~2pd>urwUB@AMw(EOiq$s7QM83%F7KuDMskCxy`9D>>TQQ zv<*qmG%Vo#=c3Vgl>ofq8-~Jy%iURG5P!GSDCsm<=Q zJx>ReXO~hIMfn1(?1~nT#TilfdtB0v6qP!UNM4_@Rm+ai?XZEabUN7WNL2m(zXyXp z#9Fw0=9@dyf^Ok3l(!1kIkKP2#S_efL$3E2f0-*kQQ5F$ybutjxz?>vd<&bg%V0o~c5 zK^}`V-@>SDuM4{3uK;6mUMCLwP31mdS{MJbk575dC*MM583VB?9XnR&XVD4Hrqz9$L%cNNXB_zJ(W^-W9^L1 zzqD{=a@Af%hrFV%PWXR)+fiwH|TU|z|OIWBzf)Azs#?plDP;LUaV6P321PH|47 z9Hd|U4b+U?bXA!*4M(#(PHPp8pVi4Ce1fTpLOIX| zP2+w0spKJd|9u>Bi*5pWoSUSW|0$^&$5_nWZYfN0bVKO1ZWXng*)PvrypH$%C_7s{ zdv*6s0T^jth(YLzTAOE}i$z8s<=B}jQpd$*{2`}D_#y6#Sp>a$Zpl{C+um~N5hd(dd<2p__tZA=uWqd4#u-u?9SdX!pvmT z?WO2eIcUOsFTXR|W3wdQGB`)~(MM|y$74`*ulck3=R9+(jJGj@2J7D6dXsGU=grA8 z-RMV=F`hl%*lE7fR62Awe=@W0!xyXI4o2Jt5{d;aF`VTcZ#_?2XyuPF9EaTX!w17>EPqOe$Ii5_~y$N*0V9L6o(tt;-)qU~|tMr0^)rJ^f7TBs;bTerEl6$IO%jAS@!~jNW zbk)#DlBucki&f}Vvy}+H=GI4#Lt1S|?H<9*Ohk=gmCq1K zMoVA5BjD=lpda-@nl?7dFpMvX){L7IHSKn(qgtt1jHyqcD5!MWmI$6_h+iY&oAqON zzIC>^v1(2{EPl|#CvV$6QqylDz4o|4XJ-tZ$)C?EzmA88=b!csr@rXonxq}0Qw>rruXK)o_j#bZpE6uPbh`1_wO-OR*Sl$lr8xg~ zNe&O=v;$?!om9KrhZ>YjhTmRhxqdMco>p*asfpr5RzbV>~Z=81{i}4ms;jnQfZoK6im# zJNkL>W1f+8RpJj~9dx!vwC$X~KCx*9(ykUkCNU~G91s-PdG^+?262$puGf|fzHBTv zJfy-@3v>4W^gD`qO>c%;da_#Cy~v9^L6JUcZwN+JmEgNQZ5U){)lgPw4`v|ArFBBA+~$Ph$r!$i&Zi*gg)k_H|P zg6T0vJInQhdmDSw1jL?y8N9_^mB8#Vu(_u*w8B)U3hv?n-(KZKIBb<9zI)eroLsj2 zd&cht&(6|>Go$_R4df)BjD1W=*1nO=rm$~I%!g1hCY`?l?0JE^?q=z=Kg*({xpdr2 zeY@=hOOHp-AdOjC#PLV0!nd~2>S754+tG1{hgD&L>inYkiliz2Y&uRhs|ChSzxgdi zqz@Z9ZLjA`#wFQ%_Egov-%jO5^|gw)?HLfVLCHos6g}gWBC^c z+NBKMHieO=Pu>5TP~BKj7UWtPpG98C^aC(S^SB0lo6P_7Rg=!^by( z!Sn9W-8k&c@gIN4HoE+IT}p3IwJuV~l2h3k+rN^p=RaKIm`I`)=27RTDyK=31?%I1 z0V*PIxr73^QV!j=RnMIV2P`72nyHWSW@$a)AT3noes77LSx9 z%N{>~HRZddE7VP~cN#Fu6H~#~k^_=8#g<~FlICJKsHbmAdBW$MzBpvY#PUrz+BJe9 zc$tc~ND9n|e74WqOY~W8%4~QPDbg^v?r(2ezm-Yat^t1|*YqaRF9{G^-mqbAQzSBO z`B0b}UkkPEQHoJ$;o{l*Af+T9sy{ebJjlAI|5i(x40D`xN07)=STI1?X}0Ib@(`!y=pllUNjx=ioBQp<1d z?O}D~&C%y1XQPKoQ!{*Ev!DpNyR-7d#Rcq)95Erd&?#j3!PSuwcN4cCfS(q+-#Gov zbA;zJT_&7N;vP`S@w*x@;@;n!P2ja5vBkM#IqftSHv*wv?p)n}9ov*VcIf3g z*NRPET#f-wmknkHf-_0?I9&v{f5-5?Ji)Z#qQAOI^IVZbU?W;`cfMG?uE}Nw*~tW= zcMLiBD?3hFzb_&h_wY+7Zl%`nFkKewM7w8RP!4r3_^?6l^8$OcgB&S$uIg{rAl;5ZCJg(TsM-*T;pYVN#PReB;O0K?Hd#oJ&=EQxu|cO&x;BF z@lNo~uRoJoV?{Px^3bC*Q7bcpEmmxHUi($<>~#qEUK<`-xW};)b7txH8kEp;7}lKb%zYV%>DR{C`SM6eu(>~WhnwvJ3NnNa z1{|S6Xr*$9Jj(GtL6GUr;fB4Vw7Uz`Wa{YLpQK{!Dm0jI-J|8^285#Cv86?OUUPzh z?QWc2e!RxrHyI<}Y#pPSDxK5e(diD^tF*!FFB&BMSHg?up&oQmp4-tZ*Yvp;jLPka z!&0{EhxhcV!ltF{eAjOym2a^JIaR(0Q@q^pbtksPuFy;K(^nx`A3>q24&U;^be(}S zXPdW;>z{k2uK`JPu6cWp!eEKAiNf6Y%jgYfR<#w$ZM+_@nLE~6M9w-u&sau1g%xFB z{-6{>t91O`8KnM6CgV|6eb0%{`0o4z;AZ@GgXJLqd05o6%rFeXQ za+>bO>ssd~vF4&^rWq%+bWMI4_LVt5-c`vhy}{Gb*{7OH7WtNaYBJw=N14j?jZ-c! zhCK*H%zC1*c}Z8~5k^LP?3n9lQ`m*I9hiS|I^SDYM848bht-e!xJim@C@Pw~%mD7a zU^vHaNWa~dqI)WV2X(o62LY8{E5?Aj69@ooqNfPe=v~{02t-)Lyk3+~wMs;$3*+r)&5mXsyRNyotNszhdg6sv$};x zJGrCFqQ&*q9tF&rO@8NZkkXizB%pVW`n*^Hfc5MWIm>nP+3c1j%hk<&`*Yzz9<`-c z@lOO%j-~x;z|Nk_KD{KuiIs!855EPKJMbV{HBzy0AoM_O^MjXF!a*Iey~ofbNA`o} zawxh>&BlU$xb`f>X2~c|erHx+YRjfg$Yo^f?1e@%(|V^t8ySdfaeGm0W^^@G2MO?0 zzQA<$|xUS9Lh7jm928Z*S^DfGmr2En92`*bY$y-W+Ct5HIT%OjIBjR zw?9e-`vp@qR);#$P;-{yQH#92Kn)2`bxD6vdQ4Yhv0m*9*#r==EY-;7@X>dhBvYX` z$w5SC9TjdvHKpP{2Nj?I^0*F=e{@$~bkGa0Gp54s6qX%p-EdRpx&A#h)e)J+>-pf^ z=C_Z9$q5U8D*07<$`nPWBk4fWEf+8n!?PK;6lORM&VF}*25<+-5$&L7>~qcxMLsel z5$LI|f-e5A=U26^;UDz&O;<4MhrNToTqHju1QK7Z$KNnFN_;ZcBeJcwyLDbQfKj0! zg77MruU&fDC;1iWrsuCCk-A#KsSGV{f%=IX?L@+Z4U{mqK3!;aLX?`OQYrZl?9F#v zi{!nks`HU-j>&tUewr9hdXh{I4Gj^)9weKTOt@)vvIfCd3DUzxa)`D1{5Ok_Z(wUT zA-l2UVg%C3?Z zuST-gAbPr=k+=N=->7V3I75H9V^n2~S-(a>a@Y3AD0p4op*Vz(DMfIbE|Ig9-q~^p z&ufV41b)hY+e~;eet=Z=DR5j~&W&7{q4_APzGZ(|B_fu!Twp-#L-@ACK&wC%2*ig})W8q3bz(JX0vBMS7{VP*F|+*i6b$!QrqgeLWOk+k5Z0q&Str4eb-!D@0W*2UE}-L`bbsTP1R{> z<}cH8MlHfmg5~})DV|X&M^8C$a3QjeK1JGcjl0B3%tUHD`}^oI;hM-U?{~1ST(2D) zXY|icZDYf2+|^r*zzT~PH8Xt*zH0BpV?P5VMX}F%TlcmVg}Z0r@C@hW8ccc>RX6sm zUv!|O2S5L4sU7RG3kwHdx<100MVHin&iB5lVlrU<73q0j7U~>Ss95BHxZ(WAwYzE0 zC;@xp_%?2OCQtnfeP!>1^!t*0Vtj^Z zQ3F%aW?$u3cmsGWULy5#E^liKqSY^Ji}VDyV8&4-kBclz`#w|Xt6s-5MaS~UnW_7B z<1}Ry!wNLtH1Y9^ifYZL|NRcG+KKF@miCTD6hxH^ga_ZYwRo)lblYjmQY{y=(N-%GSxZINKUscB^Trh=ml(?Rk7*fhZBSj-ip zo0EKpXmUz;oXn+T%C}}mM;b8b=-&cC3RrK&H;_>7^+;WxZV-{k!G}sy)m&CdOkuf6 z-&v&hrBJ=rRT{xHv-Q^6t4hO{+fxlgR2)|OKqMjl)F36j{a^ChpWzhD!`!MdYV;}5 zoeic)ATR8B|cskhQ z!q3x#$85*o6jySdZ}rrI1gFS=0jOh%^rEby#qUF&eidY$#exD_r2de3Y>w62Kk zg(VNSozbh2sAarkLk>K>O9>*A8(J&zTosHG3OAQjsG0r#fo`vz!&cAlHg^{4x`UkD ztlFwSGn8fS4?((=G4s?Z(RHsXS~g-pP&GXZbIljbjz>Yk6-zO&>uQJ8IeK%5!cmU9BhO8@xM zJuci9EWuAPPpTIE7y`6SKXq&$sr{hJ;00L^7A2g6`oZ2N>80Dh5bX8@XQuq)`sH=5 z@Q@i>N&SF@+9i^95JURB=UMlCF# zm{^e`zpS;xDh~e)^BzpEtYUr?6=Rx4X;Keb^HcKT(Yt8J83&sgnE~hyG>WR}=^o{Z zX9a<9V_BdzJy7ujmg+W9Yh&p8Tt|M!`dP;K=&RB1A~|ZtI?C<%)TVSDnbxatlH6a` zjdC|=A`y-4<1XRz!3T0q@oyI6E*;(-6X%ot@nz~)v|cXe&jDn^1 zn9hxHK-9I+5%q`K)qlu_T&1G-o-92X2%+;v|Cj`XZXszJ=N8D}`+>*ho&5JK9*FYE z3oLdyXq*x7r}3Cdj!FMTA8_9C`mAJ4ldZ=5xQH2!1AK@&H1=O4Ce*p)SVErc{JK7O ziUyzyF$v6`p-~J1vfWah2`!Sduw%GYSX**Nh6waRryj;QSc7}qMplDP`pzv9U$aO+NGqn- zX7qE|1&)IkgG~#~2sGTEE;*e=+#jGgXm)fLXIswzbz>qRBwhk!S-nSign#OcVfwtb zXj?wn4am_%gGD`&!i1W!ft{0{cj0hh=Caqas~UjUaQW?e(>!83I~LM%zoDc02*6&` z)kuYWjn&Uy95E9lBy1z4?Zyfy#@p5Br8nCfD%ZOr5_~+Zz&qRLQ4Q0)8JMQ`*>rnOOomBZ9)F7+z$H8%00jJaVdeD zm--Sso8y;&4-5gspubcP&@`baX}Qk4P&&*EAQ%O&q!${bv;B4&%nd!Zba`6->g^Q? zrjXSwiy9Ai^pZhOBOqnT2ZS)j&G*2_F+p>+CfR_`zwm|SQ7n=vCsNUew6Ysi>!EHh zXDde_cvE6|e-CZblcykF*~tzDnQ1(ciF8K407y%;Wx#wmwe?9` z1e3v~*1p>xmbUltl=NF{vLn(cRIp5s`HI=zz_w@0E~=#)5QyrhHyF<18uFfrUbXY0 zJ)iMJ+IRJ;x66b{pSM_bFQB{Amhc$*RmSlCxsm%-CXdw$*ugygKY_zIKMf{*@iYRi z;+~C)-(R;%4__3R>2Q_&T3l;Q9Y8~;OtbOlPUP#cz%D(n`YyX8!N=ET>FQoMm4z$y z%>g79T_3N{9;S8}rOk0vRhh*kL(~Cz2Ez6Cnfa%yYIhv_Q~PTgp90`>do+zA*MEdF zA*Y|tFNqb|IK*aI?K2A$v}NyFqaYv2B7`+D!qW$ZYWengT6V2>%xzjKZB^O?grXT2dT=@(f7tHehIMkPLDEY;zY{Q6 zie^Y$>Mm9u_dk$ro;wX*8lo2Hr4?oeKcG?u+XQH?yDUa9^&hjynCWZ*WRf|}u9Y;t ztOlpYb8vsE>su8zF*fCcH$}!Z-y8R4{qrqefBD3=)p!zEVWZh0#dOmNq@U9aHFyx= z(C4)OiH`O}>TH)h>=0imcWWq;%Jy=o^#3kbaj(K0Lw0(D4ZeN#Rj@WWf>cHNdH9B?lLiFoDd6xBxJ99Qztx-TF zSijIMnh%027aRc$p6(hL(hwll3ztqE{ZW01rvE#MpGpzW1PJ3+o~LyTGOe5{9|u!O zf)=PP&5nRKGTzgl;Q!>0XMn%T;@ecpV9|g!?|q>CQx(j5QzGcVi}15x)BD?lMhfooa2O4RHkN`%mHLgUYeldS7rp}Lc-g})5230!K6AxScLY61^(V*bHs+} zj+YfOcsLM*-}WZ~0EVU3(8Xe8AR$e4QaqhKZ}8`ig%t{Q2DZBgM9N2}g)TBF1~{8R z$up9GOvtXgYal=|u&)NG$aJZWmMH3ZBNi3%&Y?QMS;28KIUOXm0x|;SX@4*5VXuDU ztm48`VOL}<5U_GxBKKX*(Cd0s{ zeox=#i4+@iL1G{R!0U9;F>+$NrZ}^#HSiKc_>UJ`x1#??j|)h)b-1-%Y4Y7BDg}H1 zBtEy@8j9bT_^Cm_=K*mjx0}Meo46+9a9G$u&m6sWYHuhH^XyrfrI|G++5E9pIUyhn zvv{z=M6EMfZ3|4L86tOx>VDID%pNJ~nGh=8PkAT1q3$H35`V$j_s-96GG3P|?=!w}L8Lk|NCu`ZtbzMtoP z*Lt^aTkDVYeb+y3Y;Fo%b6w|o9LKru`_EoZ5ue-pc*{O%xA}0$xbqbN)%qq~)h^M^ zIN;H=ytCmo_BI=A@E|RO@;1qF+f!?YEKG#W8~fwY)+UcI!5kdAg=-Vm^>t4$XlKEN zL8e6qARGdCK1qO0_PQ|Wpk}jOozV~kwFO8HLI%vU@6&fWT$e&qTI9wnC&vO+;{g!W zJAjnJ!-B%&_Ch^8+`DqM(|4ccolB2r@7o0|2mnkd5!iAZy0^sV?a6I`ny8Sr+7-}} zK|%Z^tnZL<+!>!J*-u(-etCfz=UW6e_)c6GeKSKc)Rt-(fpfrD;AUvo`#Mys^l-Y@ z>CFk))wg+`(+nDq4!>(R6LLEWoK#u&%5?rxaA&aF4WCP*O~R(!7^ufu54OtI0-R|K z8wq`yJ)6Y!aX1qizuG7@A<*>1hEGYfFViSYt4x{^7~s9Kc_^BbYPi+&<)uq711q=N7U0 z(rupQbO?Rm6|lcR4BU5mN&>b^_K~nB=P|x+A*c+C81*kUT%LN5F~y9@#k6SPtK$>N zB-uXMaJ7%w>P~l-$m?Xqd9V6EX@B2`Pu<43Rl$B9dM%ag?T5OwJ~l8QVnxa&8GE3- zz`RbA5T;VQ0{%45;zWe_z)c0SZQyYs?ii+KhyxJu%MOt)y z0A=Cz^*uKJf2CPP0Uy8eq0 z7kI(s|M`i5zx>S94QPxb{?hz@k6pc1DARxG2|%m&fYq`hW^HH0uYHRpM{s^HA6Us< zjp1(_UXHRWzPRc9VidrScsM-@%VCPn^q0@Vk4v-;lNv$>Qm*_K)B(`0YLM`Mi4J>; zeo(FC{>S9_zY6QJ_&d`Ja7ixj`25QysXN`hBAy^~j*IiXMn@}XnC2h(EATtW|Fd+^ z6&)paU89E$Is$=?G0y@3wu}{Nx&Ri*29QP3E?}2zRPg1;$+7##V5!w>_tfLsJ4mYE zm^^G72%KP}fEd3x03B=yghJXTc?15!Y>lhuQf)>n@u$vhnUH4s>eVS+gg$@S3)Yvx-w`wVNGavN z+Z-w1o%SraBwVAAG4|EUEiTv|^~~#9ybs_K^^?h#3&R^-7Wll6TNS$7&pvY+L1oYO zf&i#jmm_BEfbb~jxuEw>0^s>kB_#FHC6tv>W}uy3$X2We=!tWaWkmxgp3NN$hDG6* z7df0p(Mw4csjAJ{Q>w%E0O^!&av=Gu{IHUcuW;S^EU1!n>!mupyknffd2N`8QLWDC z`Bb^7(=iO)91U-89xjf3G{s&2 zjCmJ;$<>GjJcn`pa5Lur<~rOPmFru1%8@G9f6WB!*34kNE_kn`Pv7MiT-ad7_K+i_ID2coj0yQoov8_Cd>DX2C^X=tqcdFtkC=&y&p(u2V_7~<+0`E zJOFaD#6a(%@wdaupuTHxCPeMQ)dz7h6ImctvSI)4UCP#`Vu(lTQ}4>{*@k{cO@nr0@a`;cz)q0d)|9lu z7ED&v&~)r2fJA=8mU*EGprAMb_~SLyczYM{RU}kV^Co~QFVcmbrqqD=LawLtN8Xg@ z*C6hePM1Yb<~i)C{4-__`qpBfxaT4T6=6VuRA- zEJEcIoxVRqB&FE(O{qj5cJ=M5!#oeyhZB>AP8~3whWwdVn?0`q$j)*IZHoPLbuOd= z;6|qk`#Au_9d;1%Ws!6O7&%qy1rjm?TK&zLy5y#$=1YK9cjs2GeX{GUVur)q37$vv zJ3`2_=!#Xl??6K0JHQ~2WQ>J&q*_;m6Mk*=0<_yk|G8ZSs_n7Yh;Gl!scTHx`JVZZ zd+9a(&k?o*zi#~i^I2?G79R~9+MkL>!bL3b6wVee0q<)y==o=AvOwbmpx?Lz@*-RA z8BCV8FRHzK`I(s1A8PSl*d?$g;qj{FOF}H7fiD8swdl?odI2X+Rm1zM8kGTQ>gpW1mHFpTGa#e{FIKji(a4~ z3M4W{*-#J;micNk&kcjJa+WUZj{GV>Rp4+1+zvAlk)Kzm*3Avgt?@=0#;(Hrp zzHNSb<(TmI+<35A(lxU3>QXX3(xdYRaa==CN2{oF#`z_77x0vFTQ7y4u3gNUq(#B= zl1b=Hr1pASqv&(w`j;2 zN4~|pY;gk8=eL{YF=FX^u^UFFmWe(wB&&$F!Pz`f$PN%ySPK;C@iZ@7KSIO4Y`1)F z7aEq*N#ZfM3+ACk6v7;@T_UwM@`Kq=hX<$$p#D&}C~weKLWzy(rgWi6_hx=Q!_IyK z=;-QLz;KUi3#ZCCw^g;RIb4?nMz}aVhW}IH2t4QJ<3^dQaj}xD^W%ua`H8l% z<6oLq%Gg_A5*!>3_CW^uC7tyMUofen!N%fM-*sRG2g$)^nPlUa_U3q-rj3Ne#Qzon z+NzNFABxu8J__M|$ql%vVte8UQ!A$@{;4a%8GPTQnfT-ygj*^JeWn`7)`Ws^V!}hu z{IXJ0JNWc~(6L$|=mIEyT$O$AWV6-D+*TX*;^r-(^y>{ymE8W<>5B&ILps1nb#33O z2f^kUfuTB%5-DJ*k;5%vf=S6}%m&Km5a9&dfd?44T*_;2LkvVrKMe5Ybd&+fiX=u! zQ%fJ1>sY;i%l@X#l;|<-u&iK$6MZ-LTP>ho-IrH!M^D0ft)1Yr4ZyTfnWYyW=d{5q zbMC2ogA``yq2vV%Ol{ukX;v>)Z;Yfw|A=Cl)!cpk{@V-iNhOuD@HT6o&n99PdcAw| zB<9XM$#I27% zp-%#{KwA?X!ygq&LK>Cky)>^}Q`F$w>1G0do($i|AvNN)Xa8cQvH@EwRXhmEyb*lf zT%~E2dc34GhE6iN#_rXE0s!nX$5p_(bh86DE3kgQ(09Ud&0y*c!-HBpk5};NCA`Ng zLi;+A=qj)fZ$d$Y8Lw;!E%edizbLIqmoSrX727>uIwoRRC%c~qF zP={9FL{-5+qB)!c*_~`}d3;y}XU-<0;m-zvHHvZ%nhrJhv)R8{dqt&ej^%mWHaG&z zfvX8ZiYxQjv{`G$cr>NEn#npZEIo4tv0#E3Cnz$l%RJmqrVxu>EYE$iUgRWXp5zh5 zj8vGt?u4%MljQI1@Ha@0Q=HsrA$)(n+H-Q-;lc}&W7-r%g1U}H&F>gH?x<3kHY>)? zrw^OGfx9b&89^q;`HM|+u@x~(mriXL9eBfR4m3#!j^2GX<1fNuv*(qB!w zj63EqS}ZnmbdTKlu@fy zy`#t?^#KtZ>RI^MsV?cdZfaNngWG3z)$wTMGyi#{v7=Qww+{DjrsTL0G%DRO$2 zG11Y=z3bGi`+}`qJocb#iFts}#=Y~jibK%8;5UVDL?1@`ZoUB^L#Zz79&STHdaaj& z3;NwiG|}(-I||R7(j~PoFrl0aha;ny-~*4M3M074E7oQh``l?gcs4Lb?WPA=evsG; z_8CaVO?Ds!lyr{61>VAHonkCdmw7R?hbRh@QA_TFMY`|wPq~)`>Ya%mBkDZ(Fbg06 z0fwKA-v1n5@4I~6I4lzrgDSoryZ_8Yx$1eO? zkA%?USc6?N$Y658UGM@q_X}fZA#2YL;MH%g%;X5u30Oapd$!{KBU5PrwOsGAC@F66 zM}Jtzn(#Uvs2!YM|8nX~aj5mvs#Mo)nPFu;;AwoiwZJ}j#~o>Xskez)UmqLF_#%XU z1KLS^Q&p0d-8uzuuw+hW1uwd+h8so?t9a;@#NkE=_9{uFT4qD!0NBF` zI<2#+Y@AtZ0+@06>DU}0=2wJ`X^-oKZ{7vb@CEoF6GWb96ZDH;5mnxPxA)M@H@$bO zLF0==1rWR#yRx!)&=a&1M84@)Jf}H3y_%AGsFK)_<=g1QxWn*Ir_0^q zon`54^w0f}#gHV_)#XhqAbxuoO><|0?d|&k_hZJn&cJoA2dsxETP4QUetPwl&j5QY zB^E<65+Jp{3!6PeP*r3+S*Kvp#u7kXtnJ4ywPZbNGHhAr4{$ZFL=&yj-0P^FO{GsS%U(pA-T(D0V zBJR-5cBqOZMt&idN_RN;2wgJ9b?MoXuaWHY^dx_`#BBIV&WKTXs*FFbS?0tsFUcH8 ziT2*$Z?PonN)d!Z_vzrO{bZy=_fo!4UUZ~*r}8iqp$_PuON4^UXE>J&U24Y}Yv(G% zH6v-ee~0z>NWC^I{B*(KUT9~)JY>Q??i(HJ6VzxJ7)IO9LwdEJXCu94yI}VtkrE48 zsR|%fl+Uy!uu;plie*-3@m5%4MD}RRN2DlN2a%6BM-giLxN;h2l#lQddQ`NYN$((7 zevbAOg0l3(8YJ&J;Vgcf&S+F~m^@nT-#!7y@`!jabHU;a`yKVINArtR495-sU?omf zs5FFxC^8<=@2bXo1F)V3zCL=b(ehNXb3}=FLBM&QGA~xK05|UjV{d)Ep?mH{T$O2= z{mA9%UF7NY7;*1WZ5+FvEeIums(!x{`@>Y#QBrSV>xy|OXJ0m_CQ-@t>AGEm^5^`o@a@R!;LqI>*V@q}$Fb=fdMEvf8BJQ+nj8d8J9p4&zsoasLsXAsA&B zQ43m9ygh0cJ8m_f(zK_R?zgk4EbN*uTlmr61^)I@aFC&{6A)|xZ_Pc^I0IE;V`&Zm_?fkw@ z#8HjC>X{&(WEzbKS>`UQlj70r#R-DCt}FLTFupXbu({lsbTZK-$DX*9GDa^T_@tc=G3dyy<)rxReOEPaH-+bMtsTBoM26rg z%{ue#a`R^K!^ryrg8JUdH~1Z;rO)MQJ3I|qW}n*D#yndg-FVL5MK8-TWwx2l_hG^-yP}#+4mH(s_p!7-Yi=zDMs>mlI&Vd`a0h4$}1|OP4bC)Q(MwR zwNbQwNxyCXHh=55`%Jw{c)9x;b@{A0v`V7h?BIn(PgB#6c?F5fB&_(9bGe@`v`B8d7^ zSpXu`9_n7Q*6H^yK;fiY-wi_yV>8HiXUSA@MCqJ1TMc`=?_m!)8V?83bu^;ouzpuB zPFfT|rOVVa!2v&3+bz=u7}jS~YhZI1Y148>JTPHF7ySanuM6j~#ri5~^n-RJFiqBS z@So@a%_0ggSy3s8E1z9a!Z{n*rO-AaH5@^0S{$*d|C6Dr{}aUc-6K^YIpGI)A7*^4 zp9eM<`==ryI4_Sb+K!e|N#!#2_t*{sC8*wmU*8i;+9_K$KOv%p1*_IOhk0g`f(nYB z_ELn+t<%F#2_}d4GP=6W#~h8NHJP5nwR?@fC-v5@*A_4wLjp>p4jF$8Lr?|=LeDdxO$Xtwqe22G&GwGH*j)r%CEdC zG8N3V*CXb>+U0Ekbi@Cb2;^{>x#tU1-L|pZzxd36&HM4=;*RzIe(uuAT#c|N`E(8f z#Fc_eEi1Py4~1z~Hd%OB5H2>7Dz{p)FGFYGlgXshyI^!8-}narWQm_g;B$StxD{q| z#lJ2BVtYauS%rO!MY^K4G^9*Wc6whV-}6%yD25iKDaYC1fPWbM9?sfRR$6>$TZpsePs2^&L$j;wt2Tr&53-p zA&tAUAAoM3leJNM+hzlO_uD~*j?w=PiT^vRgP(Craoq8MLJIVOuB)YrG!8WwBY<}6 z$=$1eWhebLacLby8^j(1M2L#q<`A#v7DH8PRt34jZ_En6k+(T09szS)AMD(_VRdj% z!|H&Jan6zcuZ+&#mCl-Kd;O&I#z(58HtX$XA?J@@wWdr|y4FrS_O3OdjPN75!C8ex zJ%4>q5OVV%XJm}%jB+dD^TRjd62d1>Ot&Hr2y%d5IQZsG;QuCoM3Ff&_4NO1asy<~ zQ?;Kuk&z)@y*=v0DmL^_7rdPVJ+>R&fl}T_G~kBw06>F?WN?qv_vL9ReH&Ou#y_I9 zzhgjMTLHY!zw$LB7{mcJ5mj>lddtkJF9BmUoF#1o99@0%#bjRfouQH2X^)n}?05SC zbyN%ruF!+!nf2L-3cZI4{9~#hznsODc9P6@tE6wNrrK&qcej@b1^m<>4Nh;}C+51x z^49<}(uOILR`P{}@rUrg3#mec&PvyUBKutbBki$(Z{iv&$_E^MJk(2l}9%symLfpl1&~XN0W^l)b z5|4H7N_trAVjxwhjyA)4LCEHDFQS27+E;h}0Rv~j%fvWsHr3zURc(BVU#KQQ2xhUv zwPFhG5(~CXcu=tERvg0D>V!^Rj4LesPJB)dQ`^xWK;Zhvr6bmRo|bpD&qTa)IvbNY zrehEw3jTI}HtsIHK2ouZ9Ls-AB+`b&IMq7OJli}wFVn7n6O*4Q$!+F;6y=c}bZ$o5 z;CwinD0mnKoe=Cw2ovlkK_MFll25|?tg*wgzXLM;HrU!T)zo7XZ+FCiqopghz|2}x zg(Cf{S)`fhyFInhN^L+O$z^V`SgY6peu;*ySXGf~gJHvJQ2NtikNQBq^oD?G16exCXD-d^YXQf( zM;o%ji^!-(J`-zz^H%G!YueUr4xg&H zJKB~mHJzIoL4VPnU-(T{>Hs=FtNsvAs(0lSoou!O9F6KCEi5fp_j@Gz*VNM|j&BC$ zVjFv|W>h5VTQp6#7c?(Vmc1KDt#isb<1e|pKHSkm5_KGxvT|^gp>IA>PnA-Ukez*H z&4%_{g3KV@`1Iq82w(JtAHqt*M}2}L?WLxFDOeH&lP_|v?=RaBuyhZZ<~IJi^y!TV zcoL0^+;crU4ieTUtGSx4mFM;2@U3w~?0xl(F(F?JIqBb3(_TLsiEp!>{+a3^QH0B2 zrbXJP(2~|DN8`-S=W!1Oz6CBkASGlJS&B!EN_=mM1pjUpVcNt zb;8|B<^6jEQ+%O6S3J9B!*Dh<`Kf}nYV2)>)@5A(bz9R3RXl)smaVXP1r47m>eciEEpIvcCy`Dy zbM?31GS*2S|B@2ak0}WCwKM~z7DhezDmAe{x2`S!gaEhLo%ufcu96Xpm_@DI!v(ko z!szYb#~*DrKHNRGW^}#hE`l5$uIjbOs3E?#@8~${)Ey5xVDo-`7RS%B;~q~U1U@Z> zNe=@N`-|W{ZJ}yuJk^^%kT4ulJn@216NC4~I$zf+w$a7qTcN&PpAwe2#NK@;?Nfy3 z^1TMVE8S$I4ytIZGqp7KLwYsNQx+#DdS!~cB)ne@_9M%-rMr#P;w#+T`o%;>@z?cA z#(fV6jq=>cnM354Y~_*2r!|14dOuNeOq`+MjlV_S-|nY0X?gkn*8Kv5L)WGXXOjlf zS|gX&*TJ1OvM*v;6!U=?RfA@b0!ENFXr76l!AI*xq?YM=kW68yY|zehF7&Rw-@=79 z0NyJx!hoAL3)6MIJ*Ej~lzELB;(*{)Rp2~swGqBmy3OF3sx;FTX6rdATCEB~e}@s= zymPqt&_L?#APN_JeuI#tGeVB_9CeEzjF|kiMU!OQ z`5OjDo{Hf89ku1lbeTY_Bqo}nuPFi2wXOqbp-wGhg|dczs*>TUG75TK3~0^gTZd~$ znunrR--IMsDPm6hiZAgrtel~qzEKEkmjRG2=|@rv79BO|!fLwJjh~d6g8PJ!?}m8Bo=Cxxw`G8{l^JnQMSKvOQ*sqH7lgJ(}RCOBbOxyq*Q3kn@= z?Ys<0Zw+fUUZb{T<8Rn^RUNJ_cBp!yhc#&UQgq*NWGS4uP<^23eXSU{dMtKiaE#?k|mPLf*&2r;yiAN(Li!}3B1nh4%h++Oe^Q&I(b*Gu!Pz?KA#zRN& z94CaPmA@x`vyueAGLbkxEhk1?pVCT2Lo5$3?6t#$Hilt`jIK+_$0`LBkuwnqeX84E zExlu@BZ{X?xE1_1p4e__{&}+Z#$7V`rv!n+nbMD*157u#%?2*DNrYsso>`BcS34y31(#?Se5Mn3e?F8U{`FYCJ3>T=y#*~!arZ9E zYJXz9bc;8VjipF4TW?0}O)|ab;W1j@tj}Y(gK1nQosV8ZDhH;eu@v$o^nsoalVgC~ zb}GeEssP1Jsg)OmVZ=PlAD7e>u{CP!c!Y=T)Z7Gw?N?lerU5~vvxH<5he8An?U^FK zPE8+LtymFt5)sIdZwMmnA%eSRKZ0`zLMcy41ieR0(nI9#32NeWQWE(19xbUWj!r%E4#)))&)=K#Y-%R@%X;$-IC+GEUIg)+mA*^l;z0Z|=cMiz^UaVFrd#6-hYG@;} z01>hV$p%YB;0579$JIrlAjrA-)J8>3Ii{*T<7=q+0*~S2D=g}%NvKuJyv`>8HM$rQ zc7Rz3D)ZiWbAyOTb-5+I_qy)mO@FFtVG(+3Hi1(|&$(^TkJ?r5)2B~dUy6GhV14ZY zeyf;;tD@`sDUZ#P4bmZ7?zC!p(=zm|F$7{DGxb&Vu@p|X@H{HS4ZQaq;aT>6o6cod zx)ZAnZ25?mw1anYxV28z(ovCT>jZd4Hw9Ax-}(>8pIpiLT#MRNDLBW|@?C3rS{6C- zn*?O!R^Ph_V>`aS7BA>e z(81!Zk)gi4#*|fICkQO1>cG`fPj`8r1&mHE)HVsRZYTNrmbkFnIm~{4c<))v4OET! zFX&LME8mHKj*%E8!7YMNg>TRSX>&Z);ANv->iX>86PeSv(x;DQ5f5 zAj3}ZSDiop%cc?RNNa^O)^8})1;oJoUf)jFj9A4v4H}(ic%XCcWl{^!>~h1VXP4-0 zp;Fa)Bj>i)E}S!!7|-E0-U2P=Sn9KL)ug~(A0|*v8I+@0hSO=bG4ZKVWX#7M1gp$t z^&JKY-8NeeNz|-&45*5ig4fA3Ty!dUjyKRo z1@$0+C*m7ZKY^3oe3_MLe)d9+^zP<}N+!`3ak1o%kf(s{Ry6ZS4sNpn{pj0l&Xp)U&LiE|PRQbp+Q}oE}me2f~-5|NlQIa%h4tXd~k!GeVp`IJx zx5jTh($Pq=DDyUs^45wjFC04PhzP7WIE7e3UL#6fzwlXXY;0q3@nh-qD>e>>#DlZw z+kd|)CekCQ6pp$92~hs)A>Nb$LAXtKQscHH2BF_dwO@D-oepxG^7)VPiEjl2r zb)tZqv;R{_0N>aI9g`Wh^CyK~;RbP-)Zfe8zy7#E{{P`?NdBJ4`=fiK?+?9Y_f5aH zcKemSwfOh;_3?4^#ABm(WG^{27iE52tlZue=~JCSxFiJK{~Qrfuc)ZFIdjf0zF(YB zrKK|b_w5*+{9#kK$w~e18)9o^RSevb7y!NX0nl+t_SoCoJ47%`Nf{?58~qm9+Tct+ zAOdf40<|#L&4aC7h=W6ER-a^NXJ_a%X_ypb6?b`mp;kpnG!!@^;AriIJt>QW{HwmttNknO*q!9|3!)8? z)2Ghy^694zsy|ML9F7mGrReoSa9CDEV{L;2q z*l}7pYkSIsAMLacUFbd992InYlRr_ZqZAq%dX%P0h7z?s<`MT;i;#k2%^YUP%Jlly zvxgG^iHpi)DXhdA_=IjK0#et#%zuAor_X^M$m%G?4flo*4sNMnXQy_BFS`HXA}+x& zc;{SoC{wyD`QseCHc>5AA`%zq8S=ioOa14c>oTP{(sTdoUSI#5;O&&wvjf$!r4XXk zrKsrMA2$wH(_N@kkW)@pm#s~uJ8f6!jCy;&Y=1GgP#)9sig}%tCYj-W1v2l1*T4^Z zG%OSURVljnx;AO^y;9w2Z~1hOOIJA&`dx-e$8Kh9m(Ahi=1esZ=OX2)<*=Y-)P8YH z3-DTF_01T0(gBfwdxntF%Y?_ARjp@f6D}ii^o-U6>DUHVHZ~PtW?;S8VHTI}(xf;~ zC-N-tVwKv2Ha7O_d|Vh2S+V2SzXk(|K$sRmsvsn;+zhIBi<*yz*KqEUrtG*Xkc7!y zQ&V$r2C7m9oGI3WnzA$N7-giW)2i7pnp4Z9?N_!KKT%Y6a>PJ6hWnL9YVwjk=OFbT zN)yt773P1Mt=sM=yB(-2URFw(6Xi5f5PO|X05dVMQUTCTvHdB@;)*%^o&Vc?;R0p# z>tOX@>F1}hHYKuC|0z2A@#8?qZl?E2P{+mESMwYKVQOT*;m)=dCqHT00%WgDHnP8C2<%U8-$G(wT zM60OJ$2&f5Ip-%`Tr;(hcvGDxPrfTah%t9}fOpC4!M}gwzMfK3@67tPU6~T&rrLTt zx2jul8B%WA*3f(W4EdqJ6KAbkIMnO~(q+1d$WP=qGnJ6q3!W%`r4V>AnP{%_+f-xR zMt$WB(D(*XT;@6CUIgj18QaZ9M)SBpMB{qB6Y||!&>d+2?d@>gv20G9X4fu9FTDN` zy}#H+R))T+PL5oD1G`UfXHUy?Sz7V=<$tN@qD^#)V~peoP1CB7w7k5|H!X9-ML{z=zG8#2l>zXxN$3Z zAPZUg`Wnz)Jn-;4_PusgQE_>CYqj}>FO4iX!t-+7@?hb&&IC3D&+7u+uyV4$9Orse zY#QoK&Q|7|%=KEEzp3_m{?)pt>;X0J>igwe(ObCyEpZwf%A8cC>z9K5nl}94m09E3 z-D8l1+b4?l*`1ts7Zg#fa^t7&xq&?H^7T#vMqiWeX0FCMFPPwFk0%&=>KhHfS{xID z6O>`%W&M76ZEVzw7LG^6Om^J)XjfBg87@7u5?=+W&7bhR-+ z8no(K;6vQKo}cX1V=)o*q(j6GQX(-er$CI3sc^r9vJXfIc> zRe2uwf}3>HpaII06!^2?&ZFp7!e1Xh9!L^G{u!H9l4BYjIi<59FJ#h>OQcSJF4sDv z9s;2I;)z=%lSalV?CR;iBfXpx^v!5k88tGPU}iyWrpp@-E1lq2tA+M}vBMIE+JJPw zZUxs=!GkSiRoUjcFD6d@is5nOt}}}?OO`vB-@Ad!kVpAOu!QVkp6MUg6S<5zV60+j z#`P^i*v>ur=LNdO6j}ZE*u_DbDW`TnoK3rG|EdJST`uW;TyJcKwGoN_P97?MbL|`$ zT<&~>*JvhgHRR8t&9_cOP;d)|mp78*|FF>^PMDcO?>r1DopPP?wr`e{aY=oq+L6U4 z%Xj&bS0RU6eCcD~lY@audHO;3I?{fiIIHDJ$23K3zy?!AR#0M>IjCj~ZF#8OF_d1LRMx z_iG^cyi}l>uS>YwMp;u+AHP{hXc>^9i*%DSFjV&SSFAkrI!aJI#cw&fXYxC6e%<#f zmjC7h-C}L^tvNk2emA*AoKz7MgP-9IuoP6`JBz?&Oy3GFfm0GNWH6MTo1|Hh$H5C> zu6DkiwQ7V>qM`_uV$WHwhUlH`&KU zwK^*rDvIl}y4uiE)gjR=%-ZJy6fffQMai(xu&^67^fv$Qr6}&p_5Q)7OpqhTGmy@b z|JWK_8-3ZfKr_)fE%Y7Vb~r=ZK&01I0GHvru%LOh|J&rLTKmD5_j~0r&XK!LMUC<} zH%xk${QLCFSzedIbo=8e|F9K5=d>lfi^m5v=qfd+l$d7oQbH~lOD ze9=D^{Z5X8Vzi+9-|Ym&E17pW;r9h~%gINc7)ah!W4hfmGB1s55?~Gfg5>KC4&i@X>%+bwKBc~!$A!HOEDB|0}HYBSJb96)@ z`9ejSWt%Rx>aP$`^PpBhbZT`cH?o>!X!4AYjU`X@)4zwEEP4LLo~gC95Y)>==1?Zm zc^XRJaVH1*HHsX8-8T8-eqh4uPWY63LoOI^Ms%8Lw?$rygH3!i754~U1$ym@hfU(s z(P--@B2SSICbWK}{7x>;c8WB~2wyo%i@n)UAsJLGD;P1tX6#&R5;N&>e57LA_NqfV z=n@#AiHo=-rZ4BTUJu$M)1caiVpM%EXo7w@YWGVqFMhDZt@Tl>9=NqSbh&HyI?A43 z%`#QwMDe*N^M7_zmcHq$yFSt*dX#_OfI3;oBaZJkO=WbocATN^Il<06nHPis1ufNO5C9O*x3TU z9;m4?$_lDpJi%#JQ)t7J9-6iOlCl2oz!X@}N=dZl)zLe;s7S%lZbCfAVtm1L=PM|BuHT*cI=~ z{bzJ=-3a{8U$5%^klBBv`!ukK8U;bT|0cEXfm^?$Dhrlwe@|B{BZ`4Mg zZiBNTWV43$NXsydLCT!?Y&yJP-`&_n^{>T6Kl%sk-k8pFNEqfG#c3B4*=a26?K6>> z7bLt29XE~(Ah+e2ZBLgikF>AisL*v2pa`EGYu<6*MNg}cBkvuUT(|RhKQA5DhIgFb zq|(-vyTwq8oea+)BsS8E~_yz3_yu z{btbcC*YIp&3!S$;{R9^LiksWmwo+d-%!#1K_RV3ZIY&R%W3fQ{eq@|^5)Nq3}o0&O%nU-r4a@@l9Lr^TK|*G!l> zfwp#CGC3xrWM;|G(4BR#Ocb^vJK9e!GrnynWZsB+at^$UbPE4)L4cYnW1IBE|~4oU3uE$x*)KWYg@9?>7RC$L#SA0tA>0lAQpjVPi_l19+i&x+ATq zV>JLU(>(jwl&sqZP6`3;|E(mTBaaFSUqR!1+`acBC@(M1vzOyaRYQtvm0Ner!_$qq z?nj`@oy^Dd+(<>LlN)aE;)bZyk9IRsIaz5xtLBQ{y-@96r4Y2BPZCZxS8YvPD)2vV z_VEJQ8sK*FcffzWtm3^&@-^+#MMwBesisahHvE*Xdrde6`|`b_^}G0x-+MKm$Itoq z-}1sFGFLNV#RUwWjoMf&IOi*`{EYhZcv5@46gO#Us?l7~5wlmmzD?4Y{gAysqo;AN zjucg0`#$=hZerZG?Z`7-i-uwyLbm9yr);O2Q6Ber!O6dbbvr({BOylqO8*(ZaxA8! z>BS3h#h;9;KVO!|YLRG*q?AcH6{6AMf8xua-$mb<_|C6U{U7a!8Pr|$s7HV3hw z%T|w!q@=>`2S2*HUIP;iXjg|C1;)S- zZi7baGRH=;an>Idpfs;n@roZLrkpN?bzjuquKrR~3Mh8G%U6nTr*_rU^5r!I;&>_l znR@>+WwrB-@}L$)m9+(YXROcY$sY^XvLe;7OEG&YL-k>K5n`uCy+5RIjv7tWlm4(F za^f=HyU>LT$MdAzpS{yrEaQX(m$ICt1ENbwmMtg7-c})MGxVI&eEI6MO1;&Hcto@5 zOG9A;n_2kIk4tK97y5;G7Ms2YL~4zy8TyjQBGGq}F_#@+ah{ z-B|KXF#*HorKN8HO-4^@E;~>QPZ5&}*g;Ckm#FZp#F16dk*%!C6c1UV>6tkcE$LvO zn;})vY}_S4@p!bypIz_6dSO3rJ-&=fGoAjaj~pYjTQTDl2}xZLQOPfG`w-0BM7O*W zb_+Ay6Dv|%D%!3;SM|vjZex!Ou6$juJWR-?9PBjUi_*ek~P&B3JaZk+mDqUxa~NQU&>(CJd+ zb3_K9)h`UVDnc#PL|uGk^@NgA&HRc``abt+XN}EV@YlR3bEMHHAAdrrtF>PdF1%&4 z8-DIz9#yYY@cg}{_GLd<$#pDGq(B{YncP{E-yPo1Mzo@L)EXGjWt*B^4 z+-!U=3tc|3k1Y0(YFwdzzEa(k0pPc)HMgVniK3yTf`P!|>gn22L%V zeTx1b^Hk+ap4GehI9I4yS-7$fZOt6D&lAqd#(s{{sR}y?ktU7(mG|ePvlD*lpZ#<7 zKYaVSgGq~viP|MVxu(g=pNvr7UI>&e=UXq6tIU4Wo>Ej2>)_9dY9x60D9bC5V-d?@ zbkp=B+grPi1wX}~D&@q_3G%b*OWU-kigQAVKZw2Q_`1hrd?UGLu$ktd{YwXdNyIb2J9)2(mk2Zc^~aF@8V1TSBAHaw4t2)i)4uo@cg{Wum+e z09Yb&WtD;W$lpTG?;KUnsE~n4S)DIlFtmn1+!q$yvPi!{d4j6oGgnD@POglnCwIhr z=Hfp`*B%-E^O*v3om|HpB-Mp0b=WElh{N6@k~@=6#yHYc6VlC1(k`C-YT&fBw#!cr zj_}?97g96}j(14uafN?E?iYP~!Iv^X}h&u#5uvbiEsg|2rcbjpZh1w$=gS~Ej> zACBys5#n*4BsLm#hcRvy9Bk?D7=%5$oPq?s*?7OYRC=b^Li+GcNjP+rdz)?6=}Qtt zg9&cvc}ZOBlMVLNu^y3ufYP)3Bd^mLeSF$!VZDKfUtR&aRFS9c)np;_-qfmXRJpYd zmT|r}T|$`y4e$*g)LK1QPg|r;PCmB(x~7{@&@nYkggB0@tfcpafivQ`+m0wm@c49|>;9F20Db^DJgSmqOBQPMh^zR!RC zPEZu6eOtCkVO7h;t5cwA3GB|SKa|@_hY^v;SnG!;iz&x^ zJ7W$>_G2A6d^Mw|GrF1^){L2Jo;@PN4bX3-s-;sOS#WcKv>mSrkyEe5iV#ORU(R6; zb*TQjs}!rU*C!vLtei_9v+}<1kBWAlP<9d=FA!8&%Ii?*$+3Ku5H>gV3Im9~z>v&`Oy| zc(>zZosm+@tl*+xxl~_WQb=vvj^(;b=7&S?B;=O`cd5$g()0_{+Ir@p{)$Nc7FL4>oAhW6OYPVc6mR~2RMUn?jJ6B?440phC;}eO)cA= z-kBaYk7#Ji#HM10ybXXJC)vox#wLmR(IW+tf64=1Ufw}4Fl2?N3fVdW$I^|NVs1Z@ z;^Hh+H8dL8SXrk5Ae|Et8ACk^(E@7(GG*XV^pcJO0s@UdmfMV|NML#dSNu zM|Vjd2g7G-*SUH1>GS6?=Is9*=8XP&@7nU+JioiN_!Wy^~y{Qkx1h? zG7y>$ufDp^VCzQ?+Z7!pKQn%T8KzwdAFf2663#7V+dSdcK&h{j(zpv7UKz{t;!wpz z<@GkAj*8+~gzuq^TO5T8Ys>T@yKz?dd3hOurOpfP>7TwyHkvQ>O^Jm6j)C( zrg@1FpI$tueUzrqdBHL=)5VTFk?qvpRJj3tkGdqHX+wpd^apuhKL`LE*eV^^P!v9X zCgthba(_5WY>(|+ zxF8_p%lA9azTfc&6c3_>2RMp9FWK$TGVlrE{OGe4HyjrSI|zNz7tdy&Y^hem5y^|+F;FvRGvhT0^&0W2g`%w-b%CXN?sQpjo>h09B#+_ z^S>a6q<6S0+9_s})fB)C5%>YvN-F`P1(=eYx8ErulNoFwnQ!6?w6>p(LDi7{KEQ5& zC>y{h+5G>9k6UmEX+=5mUPQ*zh_sZVjcLD-mX6o@_dkG{frpK$-3t-_9)AtSNSMZF z8{0<<;{b{_p17-SK=74WL?_x80{klOuYu!`66*=>=u>!O*LM=272TDg2&rGYF z-?(K-JMS@3J}V;!?kJCcH13nl&a9VHTu~5glCPyZn?Lzow&Fj$$_El5JwwBE%?&>_ z02QK^KV%G2y1qz8NC*it7*)d%FdRzo#W09h&@23_F7xvJM^dxN^vZl0>30fLVv0a& zM#0HlR2?Ek*sSDeM@*a>_=&lJ;r~cqx#%kwXU+rtgVBJH(!7>xo$s*Rx;m-%R&82P zCW(_u{9B8H;VvBlS z@BUltJ);Ule*x6k^4~68)tDWcd;C1`1D`sWtOE7Z8lbT8t2p>=-LQlbxLP!EKnB7~ z;IW=p%XfFcBIA0W`#ekzHd$^q^GS^n=*P-U`cyGQS!I~MU04aQ5QLvKFyUG>xmAa^=&K= z*4MwzYtf%074q=$V~Ir0OM~{(5Uz5dH{+S_z?~E!w+aFZ9`#^C%EDlkw;hZ?B4IuE zwJr~j{xoV7ZvKSb1DgzcG9$_dSpf69py#WyPZ~E@fqhv!xIX_zy9m z0rnt+*lTNtC{*e8oq7=+_bt!oKZ$4)=i5EyDl?TJ!<|>L0E@U8yQwO^HUR)K331Fy z;C_|7{O=iVCEFYXZnF*{ZHQx`*O0mapsHPJ3k=#^(tnEWBvEo_cnL>Te@)dO&NdNZ zKGe>VE)CtpRKe)J32!$0liwi1*y!l^ZxSJjhI^FkTdedg#KpzMo@{$`t>ph9Y_GovTLD}3dH<$hz& zz-lzVcqZ|~hYiVpD|OQGGQe~3>pdH81Q5jEr-9jO&G35+%0=&X9xyjc)af%far7|ew$PSK7%@(A18}PCZGh&?)xi`P2Nh-40>UC%+y)tfl)uGMVSDu z{ohpYF?dmx9Tu^sWC@y%zl;08XFhx=y76xz?|=6(+g%C@%N~da-p7?Mc|eRTqlnD! zzfD>T|9?Gg7}zmR73F;be&dFm+Eo{q2x;>FUsd(5yAS+BD*m4WuvSt2I_lhjW5de$ z|3L!&U5rsQ9900$Fv-y1;+4{$6WyOA%54?2FaMMmRL~kc#+Y>4PW2LEq}7REY5ORj z4^9`abBR*n_YEpVroW8SdtnzZdFdNnAQX#GrO(~|wdBtnDm!-;v0N*Ru?)7&d(-Q+#m<3F%?{VQy*N{N*laI&(pdMb_!1!`#L@^sYygUfqmiT>p8lug|!c%Rj;d}ZrulDZEXtO18l?1Yp z8XB@sK*-|Yj2}1J^*^)SO*-XE6M%?&FouyO_Kr+AarOAuAm3@Jnb8x!TUyz;R_nPk zu{Z=J%Gn{_s(>=Mhf6PQAHXjU-HJTwuxA*#b)X(l>+9&k9JBN(bVSo#yJA&IrQ5e} zM*cB?t{p?)CaHZ=9H;K7z5-){*b6?M5gE`a$2&5CGA&g#hPXe-s!QNtvOY4JF}-1&K2}Cf@_|Q(W6~y9 zX_6)u&2SHoB@Ab*l4~}v;i*d(Pwmco^JVwRG2SY(a`Fa<(~4*U+)3%=&UCGwZi5wL z)<`M?sidUo_y@jx$=;7V*27w(4D^yrk+jUMZab>b(bd|EN>f(EsFE-3ykE`n+t4@q z&u=;tKa}YDBxkSEt~q{mFt+Ik*WX2F(Id)?C-s4q5|Eh=xAD6rvEl1*F$oQrGCimY zKudY{gQg5&aHN-e!Ji#41Ka=>Ed|?<9pkOw9;|h|~y}ZR1xtbJVMKS52*0f)*TB2?lBl$kxbU^iv zeqp#zO|-7tas;1TyC?AQ0`4#oPiY$O4P#Pbs~;PR6BCpz9(j;H)3e2H5p)b3)#U8= z0XC8MkjkB&tU$ecpu@DUHH84v1Dx2T`HJCQ%vi-xrj`EliJSIR&JWgap_AckBy-Sj zXjcYqe-JA#>~?0wzDH!|)t>tGm>fP&ad>rKEqK64QZufY9R1@WMpQ_N-ui&Q5 zuW7%rDmHZ?`1F-DY7A6SWZaJHAaR9kaGz`#Cpn+e8&tN9QYTT1RmP5VevEUR%1o%8 z!jkW7^78So=FQt)Gea#lq3lpuCP zM9ftf*D=M+O=l`Euc#4~9d2~Lso8cPldox;H@0j=t{L!6%QA;st(AcBS}RZx;1j?a zCH;v*X)7n!mr6D%&v5ZuB`SwfvVZm#R1p&HKpVAOmX9T~{A7XUa}n1pAr(IzYL6)b z^2H&bdl``Zeqw8`Z}s3sLV7p8srTYiCn-8w|H=TTX;`w|=Mn+~=IT(3qx*Zi*Kb;9 z$S?{I6zL4-svexaZg@UrO8)uq@+pqpgHqhS7maR{+e}@@(>Jvo>6v#-%VEf<+3Y~K zA0vSF;Cf`{8$h(hXgIM z>WM)l%(jw4;!fQ%{@G93JxIK7lpK=z1$h0E5E3Fr73b)Q|7%$Rreu_hkM`QLWfi-q zk|X2Pr5j4+OByYZht)T0wR_$|A#1W~q6v)hNkSnZLZZ2i*%w{BbODRKBM!x*xea;v zq717xEzll61%^1_%|^Nhb@k@OT{G8abquAbtgy#n6Dv#~&xnmTnC~YDyz|GZ@g8*D zNZppy<_*5F4k|pY-};ehi~i%PP;NIMXBKQJq?6-Yf)tG6S`*H(79P_yZ;IY#rf+cs z=0D#>a`3Hu6)A}QZQt(5?C9Ey8-CRhhTE-M2?(vNNuD`$MH#Y}e(S!s+OD=1s^1d& zomD^(1a@XxO3aO(9(LpmCK<5vv#a-w3p`KSBPwmM8?Bdibdmf@Cnm_^<%Y)<@LHSF z|F&4Ui+iZ`k&adC*~=AO2zT!zP<6V`D+32p84i12-`PFZ#*u^$!>Tgdaov>Zv5rCS zDD7RobsqpX>X>(_Yz4crPo0BI+dKOzzu}AMbaErsiTd2;N1FVG)<+=?zB-*499f2q zBN_EnkmJkTIo`6i`p^u-Y+uDBzDV(4+|3pnnN|Vl_nlU#jL!}LStOug9AEl)6E*GZ zEqe{NL!xztkKQChMpg zOC@YCzH2wC&W$M71|kN_-l$AhFB1v)%y>;omh0A|>@)DQK?=u>Zx3V@6r#=KJCnxm z%8;u#dn`V`oJ@k{wLWw9Gv8LUH~p9mgc1j87e zfe9aLF0J>xUs>YJEd&d)`1Umh8?6Lc-1op8pPPK>0pe3r&`3eZqxFbm$#!Cb>JEm! z+O$^ugg96DO~lcJ3+0yO{IZmEJT;aF3+0g6kJ$1Wk1!f0*LdP~Cho<6sj*fDvlKSJ z_XJStrNizF`EZ3OuSuOxW-1Qwy48SeHnm*D`5W8_s~rwrbJwz?QKYTG9aaYsPNFCT z##lm5%%}o4-aF5J0o8o7cLs|q0Ppjdr(sUcvKTt;BP8rzM}ARUarh~RCpQCuR#W0sLQ{Mq-4T}q1|CRBcGZ)xpe58D&&YoO%HnG}pXy7JcyeKhsrEzDJPXvbDe zztF20JC^KKVv1)f*C+RB$A)6z7USsf)J{1~&J?yFCT!U$yb!ZK9pns!5;*&&eUpj zowr6+g0c`BI6Bjxt7knsa|voMpQMyEHu_=7=3{X~d{Q_wQr_h zqUr|7)40oJU1e?=d0ow%Dlf5)ccU}{d_Nmux(Z{-Xb+Fi`J!Rl869q1$~ zJJ!Wrqz%QS%@Ss4t7P-92nT9!+DUp1+)2DmyEet5DV3U zq0m{N(cM71AJ`b#6`9IPrno7GJ<)MS)VD!q|2?EIDfRPnM?>(fEumls0Mt&iMK+x` z_~JK0PbOgZPuY6p&j39*fi(K`tikuz3n-PB8K>IBm^Dxm@30-z6tQkfAm{J%VBQko zE?d?8RGWV23cWXG{-a{g+w0XW`3wxs9%bm@iSO{dkyoRMkg323N8hp2!s(o*68F(8 zmc3}+4($B=?Xvvph5>;(OZ z%l%_U>0|F5KzXfh=)IhQ()gVDK#_YLrd~(87B)`HRkPJfi}u{wVnN5S%01j!Kf4od zQEX3YQJ8rK^dycZJ&Upt32}J4Il41u(BOuo`q4N5Z?<1hx;1QjB)IyzGxXlTek^7Au>_xZH+&BP8IOSdU zt5gH}*_JCE@~6`Xc?8GweP8ukaptWiJ{AG)PW+ma&+8^Tzlc6`fJriz)ugIOS_OY} z=Olr;CTSuN+r4X=N=f;b4x=1(shL4mcV=wLzfdaD_hqze(5ckPqS|-RD=&N9yp=vGfbLX=sMTn2cj{u+dl-^+&TGt^AjQeV zDA_Eo`IOG*q3Rvhhs}dNCyXAOt0!i=@QRuaS@})mL?mR?1;iU?n-db?D+cQqPvOWJ zwrN`P^vG@z;(ao{$On7O3_TAn>t$s^+Q}MGd=RjXyO1%n5`gXXmkm^dmqr~=@Q{tK z!^>vp4lJX=Zx|63* zw6Fz~*v)zM=a%^e0?~%;lD98hnb&T$&~8yM_q1$$8;JQ)wkIS0t7hAB*U@FnDaK<` z&82o_qh(WhR=1CbS%wZEr4Q6O)y2FCs|cJb3QLRp={}H?vb8&F$@u2@fU8!_;UEb`op`%+Yq0aht`Qn zdl7NTETeS>;nGby;S(=sj%5{tjqkMB6_hLFJ>UDktH+l@oH>q@WFfz$MvlB0{hDyzI;PTbh&=AUuT#*e?o%JC+uo7VMh8LJ+x?dV9fV(t0mq{c?%A!{n#w>M7}+b+Z132Fk6S9hn;)&?$1v z<$Z<^!nPK_^(uP$2tZp8?i2FZufTuRzBr5N=Q+F|!-+BJAJpoJLAAH^cy(pPhkxtl zB*Sz1^3Jud7&;=G@BXR0DiR!a1cwb+i*Tk(P=0zCI=7SjSxQ1l2Se}*B2H(fkw%Jk z{o1hIOQt=Ez6X#ak<2$7D)vF6Hy0qE#t@ayG zk0r;Nd#HBa6x^(&k;LY?qhWmF#^cuGIUPuTc#ruyn$wyLvVQ0Uw>r1kIGL@RI3b?z zG!yLuAOcycj-(@`{djBfk!wU5H?(mfiyh(ULR7L>@3{ryjNHk4SkZ8%FcB9piS(*} z$=CjsQCd*Zx$PR_z%hk?eK1^2b39_u&b2o8M6>}h&~d4}T^dz6-@bZkBM5fpprs)% z=@b%aprv5XS(Bg8N^`Hl%j%=|EbOOebSzg^j(wxH?TpJ>=J z2qlXWZ)g`Sb(x;@gkD4C5<=aY&MX(US1g4{{(4^o?n-9as;H=VKKl;{3j?#8cx3Ti z73b*O^&|dVOtAV_Yy3W_Q@3Z@XfnnS16jiNEeo zUW~-Y@eopS<3Gl;TrIzhKJ&j3%c#Ba(>IHMW>?3unF@5RlVs-Sr|*o5G#!6yX7&=o z{t`=z;gvm5=&<#vZMSe>sikkpOWD*gwmpW+G{u4|1O9 zhlAejWxc^oORnAXK}nuR|4WjHyR2v954sw-cBFSb4){c#KGjfK%~)JClCTL$5st@i z5h{=AX#G;{io4P-&&3_d5xo@Pd^>n2u`%{#C3I=(bh4u3wP}mb{Pzj1SdM$ms=9h-aNLc=C0gv9Knh!Cq@!TK273D@?yzfdt)NfFoX((P( z{3*=KO}Sz>uPe`*PB{5!Ch-c46YhB(RlxqV&wn@c2upN{e80ly!s2X2d^K_u;(J!M z=bL*`xy?Y^k3G^5pLin5K!HWyz*RBtp~pyN?;;|BpXfh6c-yT*D0XDCQbfvuKxC_Tx^*R4O=;vmw(?b zFraC)KE?RU1E!u$CFH7rS`^}w4^GKDnxE`~fH?mtM_?jvf42dyyZk2G?D6Hr)8S$@ zONvoMt(ar|UO|JiOwCbBt=h=V-Tu%g&1Nev>irBPQii_TuoCaQh+hDRS!mYJD%xaVOkT{HOCWfFL29u=y9;J_95Bg{zrXJT~u_`ocyUNt7!q=<5TIqjFb~>D3^2l-A z%&jqbW752r2=|m-yqLq5jt6>a{%!UGV}B%NXX5UJr+Pm|%6lN^PSp80Dv4-v*B1T~ z_8Qxs?AlJt6)I#fX_Oj#N>X;+C!T$FVDR)G*>)LCfF_=yC}8mgqNX?BJCxp&8yl1I zQ92cnF7d-}yX>(0GFB|s?0BrPxaQ}A4HIppzzTtOa>zwUWL6v{d!jO=?Le!e)1}C1 zS+{%mutbOJCDzbF-sD*zHZscRyj9Oj!3S<0s^lUvTM5c(@&+_Rk@di3pY|QVxx_-^ zTyEpFLpyw!ReSa(@y6}QGbjBLVb#jqcuwPmt88nL$Tat@HjWRngf-azxHk`hWm^sZY80G_@9%AUM&-ynng zZ@8HyIHMvW5>WMC!{HR5#^!ENPAgW_ zkmFPMs)QpRHxtyGlPTW`^i;mCjhpcs+&EFsc)(=ddgM{j2-e=3tPi_rHVM)7Wt1#@ z`B`shHK65zXDB{8@ui-6QtWelpcIYMwkUC?7E#Jyt3b@r@<~zP3|6!(n8Fd}*I1Ub z=JV?Y@N-4JbuQDAxEWAI2u%*BRKgjoE84+Rcy^0(Ig$0y@7RTW!Sd^8>@JGe~1P&VoVP71$o z`u2Ri{7tj35!9SQZdZ(NJ1!%=c`QG^d)E|*Q>s}Jt(YMQ*}u)O+7*C->U7fnb*VA= zo`>x|F~$B*@w0;v4WP8l)czIdw}HXqI*1&tQej9T69HX0Oo3|L-liL*wUa`UAmJ2a ztB7u?i7TM2oiI}9Q-ZDqc%@j}<|ee)yq{{F-*Q*su}$%;EXAf#Ww@cj*i>XdZ*_jU z>1^>e)VQHulz$|$6CRcM694pv{~~T63l7#S@q&~yf5E(>(OCC0om;j1)R-kqYu=V-hD6p zG2Jq53Tr_S9t7U0KiBo(ga2ZJj#z~n_2$`GmKETkL1Pw=W-F6)uy}+g!E7qqedy#0 z{@8(-xMIQ|q;%rKNzJygHorSe+1GoZG8~0*zh4M)vRO|kM50&<^GEdTRx%I{g`3C z^6Kk#r_G*QqV)|amQLeym@ZXR80g8;TKE5TtHA|K`~OzZCnEHEUbx8tu1s|!X4es# z>1vaZBiMEBtS8J?wOscpDj5dA2?&XVSsEwG*&~4YrQ2mOjI!rz(J!HP0<40n0YU2VkQ(0GLJdW#bARWiHRH{1mPc z>x6(yFeZGE0EpyIu&!u+ai6b4FQaDyi>Ua7F>At!5T}mLq?e>cPU`E&rcqE>U2dYeQ!SNTKFN)Rc!c`qE zEWLrr^Y~HZ8~xs$WcSl3@dVt9Z2V`K#l)D^Sd!oD__1iNkofUA>>`+t>56wE;>@7h>t|YI`o6=#+*h z-FL>A_=)t1*q!$*Dj1Jte98_x(0%;rqMNbHr$L#(EYmSVVgJ_He}*(nzUTgKK&R-^ zM0z(jCLU}W_Ik^tWl?JG`&!4=i~oEhfpodbE%crDqSvZ(sV+P4WH4A3*n-2p4e2G6 zXdotc<>KxAl;nYw7reH6?<*br#QipmCU?VuZeQF}Ah(P>N&z8fPOT>UNo?di-Pp#S zRLBYxaCak-(2{dM_<>ApOw0qIO;J*Z4-x`s|Er;W*R0EZ5iYLeZcn>|E@2R%8h!%d zl|Cs~45Ge+Xey#{G2e?9?N1(Efw^^#Qf;DcZNTxSxvzNSg_j<*50n)l*SPIc?)itn z-T9-+Zl%+r(=qiMy{8NHU?##E@0r;lLuX?8fmTEd?)5Mdx5tKka~1ljRO*k9u9w;U z(9o{<=Q%+R*VVC<|JN28)H^~%;?4g$>xD?>8+F<89^pWdA4E{U^OYg^&sh*#(fely zSUc~tBXQMrprhjE(Uw4`cEpR;)7Uv5BW);!1jQJ&esPkoBP0>N7FQpV4yt*OeFW)H zpIBqke#cWb*L@o#`^VhB4m8KeX)#KBvZ|(20oaxJu?;cIV&4y12N?Jhrg+uI`F zAT0Rw5k-kmGXgd>09gD>E-Rk(Yj#UnVvOP3qZ1FpKHu=gn^Q~K4o-(__{w^nT}9r) z*n&=CP@MxpcfxYZ_UHK8}}i1T#c?~?Mud?{S(SamBg^&J6-X2^GbZQ*m6!BmStgwODW`HWk)+{g`H>rr&^58sl~2#}E?;I2IR5Za{Y?4R(Xx z0L$$6pL0=;6RlgI^B0}?P0=`FeN!eHG-5|s`VnNI=M9&CA;sIt#bn!c< z$ojTrtSL;;4oFU*nW&7IzsDmvoF#oE5rcWWj<4yh@WS-+tya4{cG5r4E&Z48@!+G` zS`V-GjW_2?KOJqI)oowExLI|}lDFVC``>a@>)xnro=DPqn0=Gq65;dMOw_YWSVtbK zNl;M%+&AE5s3k`emL!?mQ>2i z`BtFW5H2nr8yBiNMuW6q*4XeDidrO3Sa`9duE1wqE62ZmF-AL;hJQo3nXFZ${%xT3*1kP9Q>BDChH?Yw{O+JD4 zFeF7Hvt+fG`Cg%RKLXTMbGNs;A7aH(y@l%BzT z)CI3v@SB-%G&lqb;qjEt(Sww;eEloc^9=o>7_NHZ-SMHFSTqi~)ufP1Yy zGj#l^!fN=ydLjKUpvT!virhH!9}G0yuJ=(yHN`#`GXqo3+48}+qha_ZPc!V5x4n`y`K$kdq#@;ZZ-mU{bQA0of7bvsroZJTdN%uS zJ6f(FKcH5y`S0+SONEPv7t8k|{IwQ}no6Sh_i;j<#Q#$a4C?!p{~NGO|H=W_L;}eR zzYp@DA@eacF4W#M7=Y)V4)^!lNB$G+QtA=@n=$(G56NvHHXJ_i6_1v%$pI8OZPKqJkw z`pxf9V1zmsNPTD-4H?xM*~}S)TS^4>ucSU1a2hHt#@_!l%Cl0f$-XqB;MF4*{?Ae{?M+SsAct-pJ=hx#^*FSVfABy`M z9XKJGjeDd0!I>ov=UT4PF- z2BPoSY(=3>HEOP4O)!z;gMBZ?7Bs{MsmON>qh}&MaB=>-eEh(LW?KEQZ9<=>h%z^+ z3D`x(UvZX{W)os5Fzo+4v!|8tkLTTlE5reetkk%hR{>P4#1xl?;tG7yNa*5Q;y?=e z__EKFRGknJgUfnoAVT^=YUDtc5wq+81EmW`;3aq!aZ$s^uPNYC(W=8Yl zBekHi_0R(g%H@d$>3Fd}utaByC1WvkK8-+7ia@fcuizZT-N(d6A5gT82?2@pKAAAO z-zu$04B3A55&(f{ya+>_1|-+67J<)2>no)dBc3nR-Zt7FZ+jP-=8KksE8qE>@D%7o~Y z+F06Ai`YDIZ4%E2o}dsKhHOWlGrCZvTf+S&wv<#;RFq~9F#3SDXjqNy2Cvc%_pxB# z3jJLVlO6}zhRnLP-^U1i5^O5{=XJa*Bb*U2}cDfTPq<6L4%m`eM^=OA|*vy!5+F?lr0`g#}HOTSV& zC%L)3sY>wxh_Om()bp73BEJ%@(In z$D<))-8*|wD4D={T1NT|`;Q4G={EWu9J0j#5t>310OLrprC5t5J8f%wN$P=7rDMm@EGdXJTfK8DHU|?bbS!r{l4P3Y%iET7xD`h z{A=x!%Z?NHctdlX7BV>2+1B>6ksujQ~;|0Kah@UrxB^c*wI?_b}FL;@OmCIy@e*QK?P=0sY_nK}fQ~b61E(?h_ zrhA1h;+iv!TSI(Ll_u=3N>0T+0(dm-DZ(DZa{L?5k)DxZY9sMo$3!vF7u*PWGG@0{n?d2>E)_6lfS~Nn1f1%dwrv@F zO(6WYQ!`MHpHu7Rw2;N8-;&JqU}qc1p>>h9HzD4X;$;RicaDnbG~$K_5-6bjT%~I_ z2jYklNo6k-gCpls5yDD#3E$s(TP)O+)$QGX=#;enWcIz6arkdc&g=gRll$=}CUtQCH9{M?*9HJesUrnRwzc~m5%rNKjmBw{Jg?^nJamUl@WmF$L(12ec8ZRD zG9a9*+G25(AX}?T8i&dxgEtno>zfXq#$=ODPhA?gYJGRBXOZmz3VAof+NMTe?M4>m zZr9ISYZ^XX&P2HgHJIp~IC@VF$S$}MzR`>FG?}5oci9n;ntWdGYK_$PTm7q=`dtHf zb-^#3C>l&lZRT@Bgs&1F(^QGH3#ld+!?gfE|Lt9(wYHBjn+_v_usRMl#moj_95pk! zIs;nH9F_76v#*0Mw4~4V6Q$+!l^{JlmvnA`4f)Af7&Uy76glMlXF#YuU7S4qWqGsK+6T&@let1EN=T3nxPbl%nhyTLPjZrFuep^#%?q6(gR`@5*eJv@5_g zo2O;je?V!3Ny>*5HV+K;dXf)R=%o}hFTy`o<@nl2E^Na4*~QHT$cv;_tl=$Pqb`zTAO^;>u^h7Kpyk_ zbWZz;bSk-utTv2WTGO3|5N4E!jUBI6?47XS&b5=t*M6W_(ABJeydV;}yEvP)c091?+G zFx9T5sJTOA0RUfJ7+PLBJ>Ji&w%5hJ-AOK<%5Cl6)$Ws09YhK%x#2u~zZEh)t-4Oa zT%G9IV6(hK^C4zaC5LCwm-8@;*J5<#G*r#AKc3g~jC9W^-G=pNa=4hbzGSJ%G}iQO zQPp`rxBMrUPC;LwAH!$iQ>kWlcPhA86THgylk}4?_To+(Leu5 zmE~KSAHi-0a(;Ixw6*yLVj)65gSbI!Ce$gWKg~Y8Q|pZda&ZWaNjTn-sT*7H*a?OR zUQQSD(dp(}U|3R~l!+GZ*@C=ng7!EZh&nu%FYH{|TbrS7w(e?<-Qj7Q8)X&Md9oi4p+|9S-4k}e>& z8R4FzY@fe#$s%|B@pIqj5v_W`TD1O}jInIw>xxudqcV_6bqk(3vzm6C!fN+1t(aF@8?JJS_ z5Wmp#BDLeWn~ufVQ=i%*mMJMw>*G*LOpfhUy_SpvXht$$zxgJ``Z?m6FX_(T2^=jF zVPPNp?>INJ2*WHry3ca>N4UbN0;t5Zd)4ZdFZTtycm|tOD{|2Tv3pf=5)I3-v8I$9 ziSNn%g1GWZ>5=nGwqG0#-OVjli8NrEb!|bP!t1Vuo_qRSB+>jdv(q(hUrksev$S_@ z$Fq7b`a``z0ZM1Vs7`bF=40FS?%lJ+tQ>k~zW(v@R|O=y-L|k*n@hd%Ob-dO3P3#T5-tkn3L#GCpK)5v07v zb*3zY@?w6bmY`UGwwTsN><&Zpm?HJMrgXKCZf7MC!&Tzs7 z*-7iyMXSSQ!t!Y?62W2X&7NFN<9u}`nL`f@PXgE5R}5*!2d)}lCMqRr1a`Gw3h8Qs z<5zQ%c0;g!4`kBL&jANu&C-D)jr@tp*3EUM(=n&usDFYq-1*+IGBfY>sDSQ7d=X;e z=)B+e56M+zH=L_p`28If)?>$>e^9R8R)uYKve=L^H0oB72`KgFM5MaO;lsoe*%44)&nC{RnQ@qAA6ZLis~bnii%AH+NI zJL78r=OT8me*0fHw- zB_4e_xZ>`sK9WEC{ycZsMyk=#K|}?c7TR)99dW)pir8R1uMN&F%A3cbU#eZ69VxFE zVtm3SmlV7Gx>oV?L+cNt6~5Me)#&}XsLjJK!zp|s$;tHk z%Ewc7e!AT&X)ps>pDya7`^#1xmZNNHn$O9`CO5L?HxMdQ;Qe0CGm?wT)SvF&&oes6 zlq0qD>d|T)W8^pi3F|Hyj6CIBZH=xOslFUs`g%*e|egGy}{7 z+f~#Kp~kUp?;idn^}adoyKGK9`B~oGxm#yk%Q~Uf2OAyzwFdmyZPD|F;{8w$ zwtg#d`~EvPgP-@F?Vg0@?PMk-LcSxiTy&04`kp6MDZRMV)C{iU$RpRc9R>$Cz5rKS z$jEukF{bhLbyBd=YErRD?GE3;YVrQfdtJIf^g$o(XrrMYN=F8~ zm3qOqJU}fc?sB`$CkE{r!#VA1gPDvL!|5>=Uf1%RNaG2)vx~zNp4TfZ#kvT=`faOj zzcjO6KcU;-CkVyL`mO&?>|P1kTMWlzJMI50PQ1AJrcLSd?S}`A887)6!4S$Fmq}yNDB@gT%|%fud+h#;Yos_2J@yPh2|!g#$1@INn)t7`JUI zvnJbYbF()ffPcH$?ep7`trB2{F7OML3J#=NVO1+EJMu0}q7uDmyl68H@@_oUEA~R} zz`>=J@}YMak0u2UyWbr+K3OUvpy5%t=>h*(>{Rd(@XKGLd2UXGNo1A*>UwVJTrUB< zs`VK-fn)B_-Pv}GgKcnvT2;MB;gEE(Tgp!@*uv;0Y#hlYoQz8+8u``n^ohi79)UXG@bC_Ue`>o@D;Avh!j7$sVid%%~wnfXd!=wR6GR zJt`2h84;-d=?FrIx2&3JCUUUi<$FBggZ94OsI5P-g{|6wsZSWa#ti zbwgi&L%F+DAwzQg5t0#p3i!=~sAmR}zwZqkEcZd8O50+(%`$F=2-rFp^($DGB0{Ak2t|d6562J0seA0~ zS~H+v9v~$Tmgw;gUQM`~a{+kR!PO>x<5z%>3O<>Zrw&p%{_%ZJ2xh%?u$n$yqCf7n zo&0@!3+P70a$|5M#~WXVa?D!sD2u{TmagZa?q{Yoj@n;m2c++kp;P`YwcHel>*Hl# z8!uMl5q3;|7d%Jjlj$ds$gRip{ri~dw`{F^&xkGfmDiqJ0-J`0o8?~HWg&Qc^U&K+ z_9Z`?OcYg2aKvtWl-RlQ9TJk2-T-b?*;3ujwzBj1V;dZ7jSA`3h_>kcxLP9A2sBD~ z#iV$TIpw(FBbBIR{W3QtpWG$Zt(EbCxRS`HR+I4(+?{O9s%op3CkqL9q--VrKqfZ_m5buJK)RW=Q$VM*F`gNNh197jz_roN0i>{~Bbus*Bdjj>u92@q zFN|{AF2JRu!WY-h_;;xWR|Y-;YKn8c2@?_MeXQvaT-nlP8bjDsX0pFzrkrB&H^Y_- zDYReud`G>l$u$2Hq}gfRbgt#;XuhmkbDpmcsebp7q2F#a3A196(L~Cag?iQ2SIW1l z0e74ag158jpMNa65mmW6V^^xDmHLz@2?)C==821>IIe>2 zU?}eu5T4AEg%=Zf#^@CM4=iXF?EeaUa2K~&S;EES_#{UPzQY%me|c%EL2jAleGvmz zW&>ivg{RhUPLR%w-JUc15#1e|o?a$DKocknz-gmSxq&ZO@B{Kt7Of<#4wku0Z%LOS zvLYYkvD|cxS;1>Ytr3n@a6*#PG0$yr9y~)eZ6yIJL3d?fw7ea|{jc7)>g3L+=zU?_ zd^qg)@&K?u%1xAvo@GT1xGiwU0rtOAs1mVHO)8c8aE)xTRod)X+x!5dgVv8X#z;SL|wN19dI!mfe2I7 z^aUKb-dH+ZK%!)v*wrb>Y_sipUI=d5xU1T#NIfy3oA<&E3`AW38TO?aP}|wl+Wh?d z{%sw@B8Ts}z4_9(TEqp?1F??#T@nZ`nzj%YX5fj|NK}fkuGB~oKpElNU$`+^RE_}_ z?v?%+hOJ8xO=DwY)plK%6akYKDnaL$u6y&0PMueBsn2Yg9y}mDLIrBXQ~q&Xc-a%V z<4{Q;-IeWZ*vETGjSD_XC@ZdomKCZQNC+(;)_jdpgGTu7fml`A-g(jvXU?@2Amfz! zo!Y%*SJ^aH4!D$xe0G}~3w-?kYBbU*&53_E(ru^y`O5qCthl#ioUy4-E2pfb0ZY`M z0ol-J?Oz`>DNuMI5K|LRww`P(U=$q8y~>yQqQ>?sJi1wng@D}_e^bw9yG$-flEzZQ1GK?Uu2uxXbD7F(oHd#VLaXll7Y|^z1d}YgF7jI-jueQ|$ zfW%bYM!##(Mi;TmI$f8nXFw7_Y-%h$_t9C>g~bnI0bq48GtUp?y@QWXEa=m4T0Tw1 zEYb2w<8Tj-sEzqozSF0*x^||GS3s)3YC!-uxG07p-#V#Jy^0mU(l$>%AEF3itBXF` z&Qe>INg&IGo|@KEJb};nf?oiLz??cnUDJQ7RPYQ9cCB9>A5K5SI4*Xf>D1Zh==$z2 zqJ>_JC>Lv%w@8m9v!dEeu0j$A%D6?7crAwefypZ$2&v&Y44a0pLHGKf0`V;ELc7sZ z*hDb^^NwPHS5~zQ;$HWDEQS+chSGS{#SLa2CbV5_S#O;J0WYL!Lrf@=wezY*CAjmk zYQh=N(+Jl75Q_MkDbiYCR{DR6JM(y``@i2OLLsF^c9N8}2-%6KNMy^dY-LRh#xg{x z?Abz=lCqQCFou+EFv>c{Sdu+63}Y~s^O>&e`u(o^+`s!i=f2N*oa3M7@d%Icotf|F z^Lf8t@8{EmxK%6{bgCSza zyY2pfg#MrX0j*M#L32XSACn+&!EX-rzCKfWJ>I9AW#(? zgDTm2nP;)JZixb|5e2q46I`Nhs8VW@Me4J%`7`Elz7r|6<1o`hdOMdP^DCek1Uy1O zlR)3OUtOm?$N<}N$c={WD;t~Kxbb{~boI0pH2%d2`M_sMVrF-#^qnK-h+TZc-BL?v zGDg~a#f7^4LX}!6I!uLbNzKog&ctq$^7P+cTTDZ7wF)ArSHnO({twL!tnujxP`>TiGZ+i2_4SkF> zngq38lzYfuhTMMHxJgL;S=zu^OQ;9Qw1o)|cj*;54i0}e@pWd6t%3{|* zb1ChVxVaHnkA;ARL|Icu=t&I8eeG${gtQuF@9hmH=pi4^LXI;V_tJ_N|( zbf|i*zLqd&UMVT*b)$_XM1eu&hk;TnZO7oPYB4kTnEVy^njTeZLsf%xr>`ZC8SEe3 zA_(&pG#k73f@e1G49H@Clp_GT<*7tBfR)$}vD@4LYA#nyqnSyGc>!EUL+d+rHOjg1 zdpUaX%3soeFe&f5QT*jA-TY)KVj%7PZk*|g2Y$GaBHQRGT<2Xr%8P_; zK&-*lGX0y7;mC99>7}TQHKlIk-V1Ph8HZACFMOXlT#p3yp1bd#|H2?F;Hq2Cl!hBp zf#l;lZ*5svIhT8UTMWU3@C!;QF%ZdlkkgQ=tpG`>c7eSDdsm=E1@Nvxg(OT78A3IW{HYry6};0*|(&FwMd@Udg;gCFr}wvAN=)`WqN+`kP_UT!+@YsI|WEe2}|y-2%P6 zN_*4&i3;cg?Ze+H*$4BKsDw=eUg`midJuaN6EmnY2H51Na)GcsjRuN6xM5ZVkR{SU zuS-5?yK0ny@-DjQD>&W>z0+pJG(s!W@e|1GFJHedRB!Puj^=8UEeAQ~6u-bEZFMD_ z&{@f~c%B$eOE%;lqDpAqP`&VcW}>Kcji;qa57R4QJ~7c( zo0-f!4Khp6tTB#<^fEXF(k*}M3eSB$-WL;i4)Uf}~$_(2NTW*K*U_X@v$Tuzhd{0nhs4CG$Ty~2M zhi|+QSbAsPP#si^q}I;oUwY3^szbd77#BACXsJ7%?kK)-l9ZHo(oOA5 z+$&1`St4KQbQ9cu12?}3e{X7~ePX*0Gb7?2+`L&|!M85>+-?u|kX}sGqNZ5$PPRl0 zr_6VY*_d!9_BtM>HIvt5OUIyQ58F|?x6E_`$KJG5^!4edsRTuE&S_s2rqk7TYJHPf z9n@{BjApv*`T3dHat0Ul_{yq})rkR8i);P~al+l)` z{Rp0s%;07HwPU@`DHCFT`jqe;3*Ki1QbOisaVdTIL%mXVj_tQ35figQ32ejt#ByEL z4l54Mi#_Y_)bb-=3tl(Znm?qsx3s_}XooFHN`YtMYFk@10$Q>c6@ocM1V^C(7k>SR z=!s*$C`yU;F?GFO=3khhqf4~*;-4+KJm&hx#y9>e?Y@oR=oII(=qvXmy?n89g%d`h zHOu+|v)%t|0>x%AbN<|>Qkna5-8#2-;P&Qgxl4N1iYWF43+BM=(n#JAK&BP zmbbjt<5V8*hhVj9(|*A`h!s1WcyW_?V86DI5AQUFBo+wjv@O-}HoDuXew<42;=88` zCTOdIJ!F?8`UjLYiiK%O+dVqwog)426((A`r(PH>RqU6>aCmHud%_4<)boC~mjrad zwqhIXc0`7YgQTK&;hruwwV`POpux%JVm)Ua16|Ap+XBhd&Jf= z>w<|nVVw+B!0pM(le*tyo}VxUX>I%FC|aui4f@{DNj_*XY5c5*y}f-$Z)R|(JW6A= zF)1NS;*_ZID-q+OTR`;nb3CQQzH8vo-Reb%f0XF3;T`3Y{pI;HM1^wN^9R;YlE@A? ziR(?fg4b*@R%6efgpUVDQ|&e`y!y;##P4jvO{Y$g>ub%arrNJgmlpjn+3wW3JSr?$ZL*TN=3Y`*QjIJwGdGU zmeF5eL{li?d#jRbF`qzddQW_^-&L-M9Q3?(qbSZ<(NG7~{im$;*ZfH4-s~8jCBGXl zq1khfknXJYy@t!|7a%I0Y%T>(DA{rR(=%zjr$kzR4ND=fdY!)=n|(DeQdd4V)n@f* zTW8AI*v`$cuR>J{DQ@vRQ-U+QzS_6?Rpl7R^^An7>b@-bZk*f~*Aqvj;lHEC;z$-c za_vc9in9c8S)PY7mLM-qzVHg%E_o$engscFyqA#wF;_gB^!(v4ZD7*!&fa5(va7Xd zB8T_jS0OEv(OSN5dckwmToOy`P9MiZ9wub5ymuR`+gS|0{pIkQU^0+bW5+hE>5w`3ngzgMH+36qMB6V{ey%q! zt^QHZJTbk2`n9uvg+Pud+unk+D-neDpI8Xz0ztszDxL2z%0&JhL7}4)UfK_YN`3Af zfOM1wf}Irn6}5a4J^!%2;ie&UY1!A<_Wdf(R|i-E^Ng2doikX^NB^!O0d{RXD0vuK zWdm07)dsC7u%C3;9dVT<#lyOO-u%AxEmlM@e}V~(0;G$ec7aJVSMZQBBM|?6~3>aQ@}})u+cZof@NBG?S&j5gfr{F!OFln-`{^93z1R zqqzm4hqHEg$hV$0MZK^>lQq)cnuuc&GBO0#aC^Goz=AFy(+cCj&Tm+RS9IZhV?g_u!{$6)35W)g8k~!yYmgO@K_t3fF70Ach0Y`poq=VT#eHiJI{YBtdMCD{x!XE;F9KNXYBq}f2B7h ziwLm#1iaMcI#xPY`LWCO1n(rRK09f$DtyjtR&AP*qXuhla5Z0yHvoIcni56W%sQC{ zKWEMQ(Z0wU_O*ytgaxg5zQ{;b(39a)@r$tv$9!gghx}q>{R^W{k}u;F1&u}WdwzB= zzjemseUK7Z_dQ9E?q>GwNYD7q1bIV$k_W@rJH6H8&unkuf#vsVSHV39-;OLB*5wYA zQfMLJ#{ zmHawJRA~KLljQGB#z}TA(a335R2Zwux$9A<2X!h(E1hbqTnBHdWXouaJbOk}Nd5~{ zu@IoWv7Pn_(@iH9=%yhBx zgrSAs015isP)trW8V)O%nTK^{-mR#aZJ zWF28>uO|&z7&jk2cC6Ss7cPA!Jmlq+T@ClI-aksNWBvS@fHb*wb@w+HyQ)t1&bbd{!_MqQ-TvvZxuu%e(Y4^+M_5 zB-6ngbv`2-m~n(dS5jx8MAppu(u9q}`6+XL{m7-KE-&2BZ&aqo@V$zJB#sS#>L=o% zT~+lXLrY(}Mv zXJ`R0@`J}Wt06Pk?FliFE>b)?J?IBL4O75Yio4Tq?n{N4e_K5a5o2>*@q^{DtKSnP zV%__GygOS#XC-k2?Qd@V715#DlSoyPh5y9*owAeMt!;vLr#BZoWrnC$5T9T!T`uj>W{Y50D)J$OODdiKMq zAq(qA?g{ix!$mnJ^I^9gP*p5XOs>s*i~G<)A?PKr?s14bc@n0J8#Pjx;vK88?j1s2 zUru8;ig>XQfjTfTupP?Ui?}~L)eMLg`Yf4iN(WT^ii2+&=grn7&ANCi)1;Q?~$K7 z7tXx~k@Oqa*_%<%{1qH!zh!SG#5jgU<~ro*n(_KCz#dX-(TCdJYA_6j-SPICMaRgE z=fkH&jPikfP~Lz2xzc7|D;p>$vvA=qg6i5`t55f%ZS}W^GkID)=})k3kU@-Oe6m|J-E(^^zq}a@!zs-2~w3pDmGm zL)D&<3U5U(B}EZeSGetLfB-0nw>HOdZE~t{Yu_Ht%nYVunx4$uf=;$D3^vN3=vmu^ zbzkS>58nY!>(Zvlx5!T7>gk>43TlriB=+zkC_@$$^U;|-&gL&-82+3g<$%gRaJWl* z_n4YmrZSoVPM&`oDq}1465l|8$_NJv-RV!OXGOUNaFGJ=F6UO;F!9^#;wmv z_p}(-w-u&9M~oHVW}PvY&TdraIo|BI{!P!BPc4W{z!D%lv2i)kl8pRm?lX^h9wYRR zmNukqFtjfaznpM~bjH@J)Z%9D?L@uRT<8~OYo zFnc((PG>5m;M;+MoTPeh<<&z1M#`4uYF&|B^Qt?ep`PA&WG?(1=L=umdoY<;h6?}h zhcTD@?;7CVTrbegJ^YmZvP8(RzxmZLS-qQVQNC#-1!Ct||D^65A|xhP&vP8xNkQFqjKwqa|YT-nIpgA zI7GhatBwzIs6Z?^SUxt-rVH7#s>kU~ig2I#;s5TaN)2S%j*EoLTl!|`eeATlfi~i} z=4Yq&`fLlU44sFTNfNA2h4(SCivenGQRKc&)`)2xE2$wYg1(3YuU`eLf_s<0V zUrID-Vt1N?+}5T^#fgAo^beh1GvFA#V50c{0#J@+VDY>1SoL&`+g0}lyYsN75*y%R z;oN%a#u;6cnj~$8RxDrhEXsZ$A6b&?#)4answwv1sx(GBH=&yAno8cLwpbt@AI)+I zAo^tCAM5fhM}lwv25%ge*`W-2-<0w4M^kPy^>ThPeeyLVkX zJ3DKDsKFvIuyJ{^C9DP!Kpyp39(BNi#a#US`L>!z{pYa}EL^UtyX%Q6Kk_2|A;HAM zSYf{4{NAq_FQ(fu5iC5#y{xjk+eOQr!o0Q16G)pLiy(QYnq`brR?YHQyTw(Np6&jjn0m!*td-p?MKsGM$v!yR$!bwR@Jc zZd}Lh^3?Kw4!Uw5h;HVd{2IAzfrJIQ0gr{*2L@J{RgBkzme4KhxM`+X(riZVn_*gA ztIM{WxbcLVh`_z%sLFJG$cYpEu)q;9o-DcP_7eUtP)!ZK>B$%Zy4)VJl z|1O-#;U`z?V1Tpi-cBVo>s4&|$IPW{k&;8;WTL&)vz5J5wEZ0;2e=ssb1j}M#qAA#x<0HG zq4DB|jdevCm%-Gy3@zg&k7YQ^+7Nl0t}Dp}?yo_4i&efe(rY^GHajwllQ+2+=_=xl zaU2q;6p?K%oe5kW2C&$NJ?X?i$waw2l{&tIL6S%Ds+L^AMsu&WPA zK>o(Unum8(E@ino7~Wwg<8ww88sb8MUhgDMX<;|uWn9g=sg~^kC0NX=K%QQE_$JKw zsMjEx8#_$uebL2}m%2+do7mO#Zds8i;)coouBb~0HKOSWLtA$S9^cfxl~g;AHuat5kT&Vh#IAjP|w!vFeiEq=MT z`Hmhm3oTwd_9IZ3HC7t-nJ!JvH_J;o)+y+P>bPp+tMtV{zGI6C>HgOcWemr@T$6Jc zVaL4?@Ov7#;t1>YdI0p6PWTrrzUow=}); z01EEU{tfk?|6b?mpTFS$>(5_^%LL^m*v_gp$7>f<(~cMQDN6!TS9f(`Ta$g^TW&zg)Kny|5m~aVXYg;KB+&s7FR@?! z;UNTidy<~1IR7q$2Xa^ICBvbcslxCsQyW+Ty{;X{kip(#f#Cx5n@s1rR|4}g9(bjN z@!ZIB!a|*QQPyWc$!kAxP__8(jALyU zQOn#sy~`)xAol~X`dR}?gSgvhjq&fxQO;6BssbQ8@6B^s%C532&0Dj_xp2HneDVqB z0m;r&LZkexK9X-hf0a}X=F8Dyak`4|Mche z!*5$`J=jQf_6uIWcM)`Ktf#3kUHiFSe9Qh7DVHxcm^yZ0bVh$;QZlnRJFh97kk z<|yk4H}`kTj1YK*i{NkxGLYIVVEayPQgMf!*4Yv^2d-=_%|9|j zQ0lCI-17l*)CE?b>ZCKiP-iBK=Pf40`-qln&b<(km z9qaiA_f|b*6TuAbEJZg#Ibfp$$#AqPd*5quEb7pqf)G7G^c_62b}yDRaujR0_jtSe z5fmsJ>|3{4q?~^;Qo&Nz8m1zDOX#Hi8BrZL1{4qe^W0oqqH(H2W=(ITEw&LWjZ__1 zG>^3T@0bu`Z&Z{TDAI^*#CPveIdI7w>vOR@u;C2dtP$k^BTNVX=gl}(m?_FL8e9`i z1(o#>rIELpU@NZYpb+2C8p*1&6;C9t3TJmD6&MPMiRsq3V$Mpka=!ol*1gZ=8WmIw zOe-R!!sNT^+;-}^?~V*meGsY7k8CDggq0+TncwU21t_?fsiTy=+Zw2Od0)mO0$1(3 zw9Bc}sm2j6z)D?=Q6Gvv;(@x{w4b|7#1U@ZUChgFbY!~ERhfNQcgk-_Oz2nS_G|v6 z+Mq_Wy2npB4<@h=AJ)(QHF{|76TmpUaJJFunci0UO|R-*fr#s;$Y>mCzw9tL%7L8ryh8~Boq?5m!kjYJ~9Oq)`QopMdG^-Yf=A*f9z6J2-J(Hl^31gJnREhv6ji?_ zWj}uj_=Z!4mzR_(gPjM8r+k&UmHgDS8jlP0q(`DsZ2+D>0|kP|sBgL24qFv@74FOC zP{QtIqS-n#>A=o4DXvm`Dykf|2MzO|MEDY{F->k6jk~>yR0G^wmm+{sDsn^A=iNGd zYJ^7VoK}3!owcQb5hXh9OJC@GF5zXB%gN7+afxRyI`tcuGt8{-?A+lPE{K(;o!^pI z9K763>zYV2fV>Wo@vwqDS>G@4w{6}gWFs|3Cr-ahnE)Q2>dgB!tqQ-GE-=v)%!;7Q=Npj2)S^i9BGQer+~qcBL9!_jIX=X1r5 zBw@H`cvX@_5+MG~$)r*V8W_F4#Cy_ilc1!O0#Zkvs(5EHfSETTjMi_Ax&YhU_p=}$ z*ZC^%4MtUK>hs<(Ew3xPxVbLAVP9pCr{5}ukkSv-K@*Wj3w+(d;05X;C2%YL7^pf$ z4rttb0+bpM=%YRqP}b=|dR`?a=8g0Cj$o1HoR?x89-={Vr&@etb>N+k87b!sYgjFh zQUQD${`P@q_0ct9wERKW`B9c*`Yp6ShxlCA(#1of854s-CXe&x2+}gL=Dpowi7n=H zNnt&B-0wgf!yx@)SZQ093oJ8To8zi1{M8zR!z7LTLG__-!4vb%8brV>5s5lD_fo17 z+s;MjFYAF3p$gj=6spK+rxHwuJ6DD!@?Od>syLwxWMt=NIwz{tpp4d<9?_{(K*WAk zQC=wT-o`3@HpU=#JZbgB`HqmiU5AeN7WWBpEzsIDvXHF_Zr>pd+laW7J^c3W?(JF{ z@Dda2K-0))gqH$^e|m7(>GTOO?RkbI?G~{nHOxK-T*>COrAK1a@QC~5;k)V@YG(IO zy(~gA)$lx-AoWhap3JWeU?xAv$QYwdnj~z#Zb}-C>^Sj{IGpBIG$~Vw$};s&s4>{& zY;V0W-KS1SW04P!#8AitYL?fuC69f3M+dSHVYB4xH>rNgh*Q?PTxl@3fttu7TsN8j z?y^oH+*}@o49JLr`1cpriPF(y)WwvwL!M5yNnM1EK)b~m?ct^x2NK0f}4i0Egm2C)&YXVL`jni~s= za;SC}?x!{830#3bd2>tV2TCR3bFCpu4>qyw?Dnf9zDsIU&KQ+%B?(dI3ZyL8R;;GR z+@(Zt8LiOMNUm9hU7r1=EOliCS5SN z24R&0`X>NERQ!p|4tx*yJnQS%5j1^U?q>go+cVU`8xSqSV2hf-bVbo0y33lDnsMIf zX&Mp$JrS4pU;Uh`GfKwLp0R`V@10mwm#SHN7TGgj*yT-j42OJhxzb7(QXB@o5yQ+N zt@^NO8W=}np9fc_VK=BKCG$B}-VcHu_BgctNr8u9V$bOZbrc)E9SjDxnrS3J&m)i89I@ zNtM!`wc_$<0f+&DVbFCC?oI zAJqnJ-AM-4%GJ+M7oVuw194CB`74(=S>JubVW}i3<)n=^Z(KyTfW7uT+RJ-6mi9C> zp(cRF0V(=;8Pa+`ndWkhp&JPh6uWQdpoUelRvvSwDcYbjg}?QGbb`($8CzQms~r>W z^HI;p5&ss>-pjO{h^ub)dB{MA>pOMk;OTp(=Sj5oSKd-2LH`9DW1L61=#sfWNYw*L zN>SQ1dZwFo<>nz2*k+aiEDd-|b1!}3sX^bo#OY>IW`41DDGJ|HOl~mdcZ+tt=v_o# z_fglZ1J>Gf{^~;&zSn?gUL~Akq1>p=SUgO9bN{;~0fbf;MrSV1h2V25!pLh?b#vBf z(g7)rS01aS=w|#Hij0Wp%1O0JX5kvrAqzL$nqc3~PYs?9QXRH5yl2g^?y)eoa2(U< zP`M6$Tb6Wj8i6V(;*jFXS{T$(+1|8U*ewh0oI>uKNN!A2yQET=0bndG2a5nb>vNA% z%WKNdWLZC6ZVQ`jC}s6gVQjBZbV>2?IUG(C=y26GKq(pzj3db{mnaL^fhx?fcTWVv zpd%*A%eO$Hy`1pdA$8I*lfp7! zh+mx)^=dZ+uScs*!#ylpzs*Kt5A-(6n}#x%r(z;iwD?2RIwAPXND%@KUy=S90kWf) z?b=7t`zIjyx!$Z~P`2zy5w{rlYezhH5^u0XBDr!k?mK=V2h4yC%3Lr;B1yr<3^RX9_3ZYhu6JB#SM2NbG75T zzzoY^KrHChUicdNva`N&?&n*u{&VzyL`_@4Z{*!d-8XZ~23x3xBEa(I%yIb)WUa5V z&`PhAP9&poun#=_#pfTR55U|>_oVnYBo9pG%{+6*1HUxC z3(Q=c8mAVgfLi{!oqh8giRW({k)hsOs|s6@gg)fH%DJ`K-o(E0OOGa+5P@WzFB|A# z$NBghl{S=)3PGLj`INTtqvKo3P}SF8&I^t6sQT!h&5e-mNMya#VfT;2_)Ortj9}&{j`e!0&zA%d zAYD_|r(Xnt+|<9rmY_KXxmqAfbaeLaL8GBN1rn0 zqv6NGVqSaX&emKu5u7pN4w?u_I`@@vDx%%|! z2hjb!U89EknNIYHq@8l)BgKK9%AiXjWkH~3^SATibBU+GDvR1Ye8PSpUoH=*x%?lQ zFlt8gC~BRDt-O^!F;C@Ig7Vura;=MS;`uuU4s?eO$%iS7xZ}22h#)GKZ_9X)n}8sf zu7eFgNvo$*_v^PcB!}557Y<^Y!xik=L#3V?d=Luo%%(C!b{q$G&RcWJPskGrIAY+R()BJ8~ zPS-KIZ?3r##@RSI3qNGYx}0Ct{sFQ{Am`BgDEM(SHS6=pF!fil^=|G!fmJ(njLW@F zJ*MZ==U;2$=3}`ZN|exLV7u;o6=*mWWJ8TnDdNc(5Ej+^Vp!x{DM=++O zeeAv8){LqB=gn2?hKrTAKx!gWQMs_Db){`(sv>v-R$Y2)Mx?NK>;l;OC5af{x-A$+ zPs8PnO0i;h?b!Y_By=o0NVcc`PEiWEYr_qD@JQq9(jVn~Z8pKAWa�IR*u<@&;^s z4iIaB?NI%nXN=?UEqBFfAd<1nwGxdRtdbv65=~tY|&tH+d|+(J1CzS(41)m7(cfHB5mi;V4!AjOI@{)unmnnLNM$_O-h$vTw8mC-;=LKm9(jCf;Si$)4d}3$Kz-a%pA<65C zNc-9NEr>r{{Nm{brw6q+=~Rw`4{Ej>>ciJy@3Y=7ymB+S`I4K@;U~t%O-MZuvurDC zlm3OOvHjrX6x%4aCkD49vhwz8Z!6i+3HPTu#qwY5jUq3i5X&bNeH<%`Oois~1Ux)< ze**~kNE7FLIInM>nh-OOwsV`1Ibg=J2zSr;u<*fVB71^$uqCe5ou2w6+1;={xybEm zT$2YtN3AcB;L*7RtaG)9TfL<_CmXn#Kd#{h=k5BLTCxI_oku3h_o@QXMH wAUN6E{kQ*kI-84Uu@?pI$o=_L!VCTB*KCdPgG)ws)F*fIx}Ij~HQUht0VR=K0{{R3 literal 127121 zcmeFZXH-*L*ESprqHs`;QWOL{hl6xbY0^PO1f=&8ib!u#5_%Er(nOkcK{|w*goGv* zPd18OBFqN;mEc0KVP0Yax6b| zyY1A~EPKeO*@EXUlSV|d(>Y$AI)47;EF%*m&9(6S3nyP4SMof~HoA?6Gt_-*b9tIZ z9K~x9JPM17YJ3v?a|`(=Z(jh}|?9 z0)c2J7@VH^c`byml@>0`Ii`w|lYMebAsL+1J)*?%^E++w7y7x!;WFP}Ts{MV++{ir zlmHGz%)1X7#Sb6yj4+CH9fLq(=uWQu{36s-`4OAKW~+61W7<+h1~~U`LxFMR^Yvo> z9*X;LC^fx@S7f!W1m1J8;*kY{y+0Zz`*W4<|{yZP2Uj8U` z$+K3qkzE0txl406(vwU`6w7JyV;;^KFwVcuW2TQu$|s$-h?4xz;h!_~{Y5wQ7`<(? zd)vnq0=aB(b^=@h4yLd(^N**?Tfc*|5L@;`WmrEBm$vX_I|6hQqjvblbbOckPSN_D zT%*dUbSPuMx1*BZ6{CR$6u-Cajh|uL?s-V4w!T$nOE9kUkKfz;c2Mo7tay02`in5} z?+d|iKb(d@lqKEC=4{t?X(+SJoC`VE&&~`oS5#Dl7Bc;!Y2E(!5{RZOpZvIwm)S*pt?5 zPGmfsppRT1z|+4!J|t3-TkX=bZsCwHK2tW6LMkYF#oyB;M&ClRcb# zFaYD-@TUw5wW|R<3`@T9UA^lwHpQmvbB(yzcbVN`G^_NxlfSX&jic|BsUArq%SBa2 z%U>c*cF*VaI z0c(j13<+^=i0WP5F?ZBsakWv{%3$|$@sW&X&(8bna4vvQd^sNDO>pvdolDQ>&Nn|_ zx_Q<&2qE^Qd2H5m>vyw=ZoQsgCIc=HjeBF6X>WGIH;~2k`!#dHR0tS0);RbYts#Sb&>TQ>CsWq1hfXv0wZFE5!kHV8I9 zPWZ}l&UAZ7*T2_q`7R&;E(NAd^SS8b$q+Mq=U!Y|+QO8HiHVzumx8UG9hQ%ai%VKd zOUuVg1B&(bm<5jvdn@UVh@@=U$V?A=mE4I;Zp4*1Z?8;l{8;TA`tjwJYs~_xa)iZP zf9?o}R*0p3fiAbPdU0km6Qj`I{sBBuu|-c&DA90@F@#`Sg^5Y)t0VmiWi|L+PdxErZJ|JLL%+!CTgp@o0sx z5<5}5wle#SARMmP#0ESY)t)9JIdCjf@NnL=A3dKmUZq zqHJw#&C2oZsJaT4_h^o#meo|{hAC*EnIy@{POw>4O(4k|Lv{8 z4x{wTmqJ=%md2(&Jv)O2S2jnM0AftW)vf85GC_AY>gE2(_VrDEEdE=RPQmEH(F zcDjs0uIWq=G&y%EJ_X*JtKm97Q0}((j5GM5DEE$JKYNf>}7B z;+osZ&ybVjEWO$$x=^!NPrtz&VVWJd@{NaFDbF6?O<8PkfBW_=ISD=DFJNj1t$`zH z=$We*fPa85)@|M?UG7%lgxTtKt*G9yNgamaq1~QKjuD&+BMWB~j&a?Ic(_>vZbGE) zNqJksLV{Sa(Z^2wR;F;U+q=L5J(&3RrX=KGA6IUp;*;8frSoZQ$zN*-BLOmX6lSK{aesl z>LumCQqW`1w=Dc;xq-l_z0HOL22>J^JUp25E@&r^vavwKwuDgEgw6}53BTjoYJV#H z9fm+!YUk(Yg>s9F1tkytC6An(oIRK}DK-h0uO?t+bR>&Adx8xlzA|uoC6!w}VM5Tf zikE6rQeIPS-`-xcxzi!iup2AtI#iVkR)d87%EULRjGzsZhfS{I9Wsmh8l@>zZKV3I z&ne^g*4jinkE={qlcdHYL{T@Iw1D`Q9W0iC-=i4v*kv?QZ*<4c=Idm8vP!yL+DsBa zRR3weFoYBqVqZkNqls{jRll!)Je%0vr!11UEJODCC%HE+Xw=MCsCP(?298I)Id%TZ z#C&-(he!0f-X@vol^_gd4ZN@J&%D347}DIHm`gQK_H6r!!Xm^=w~&d~D&|tVYrR@h zU`-|xa5X;eo4+yT2A)%eyHc&7`SD^egXHj8A#|&7P1~fA?O=gk-psY{s|Yi#Ot1ldjnedvI@?JB&1h98@c$8uXa~qf^jOZH z9}m)ev+-oKe<^^up65HosB8Ln#o0{iE&~q5i~X5O$0$H6LR?&*(gVmCt0GLoDQ8@< zM~P0~&5vhVsCH6=J14!rfF4Cb;e%h0XMMN6KO-gy9HTv5m7|_$3baLB23KY5?T|_l zG)j4zX~V{XR2Sj=_90kUHIKI96HFzkP6;WftNzs3X*<))A@xjEH%nTeQN!|?c=mHY&qhTWA{z;Rl@_tx<> zIC*6uPWPsWi}3MCN$lzz7FN6Rp0q!e;_d>xIepadJWz(uW|tm`0hy%jd?x4J^**mm z8*c`FFJzWZa=d^MD*TN6z=9qr8LWaC4}KPg+EPDNc^1x)-Euj~e5Kp=)_649q|y#k zTMKMPxPhj>+QVk^Ew~dK_&7sAj3y5X1^3J4v@?s#_ZZS8H260sU~~FLQ&_vn?p{Bn z#-`fj_UH3j)%FJ42KDhF&}R)ClUki>veRikU|##?np19gWT{(H=(4YNa)tIB2IiR& z(wiWraV4M(kxmBqG~H*X*@xjYvSMdzu*`bO75S}KU@QiCn(RKcSYJIO^_50i&gz#7 zyMe$6gv&LhdcG1nZGJl#@R> zUXW!OKa%w!mcK8ahsNf#?2@9)RFchb{Z)gw5MT+ymzTbBMOV8u2BMw(<)ftMcv%$n zHjSUL!;=UI;YP*}UE%`TnTU}%EzYam>#vS7NDC{_)Va~b210cEG|W>ZT!+_ZP4t85 z)uwfpZavbJW1+jU6-Y8UJaP4vROxdppx_=i_S-8lAIBwCoSS zwpL9*AX?T^Nq&7Y7tDm`aQ8Z=rKVHIQ35xz$IrMePFbT3&+$|H3kSHJ`Op+E{btpiQ*g@U`?XTABH>a5KY6&*1nU zPERtK1xJ8$Bk{izcPx$;so(nOYFXv*T1MiY(mAB}vi@MnHHF*LI7v$Xkji*LzGtl| z(g~6Cl>bvu*C) zv8J4SCo>an6;|W+f5b&Q5ULz|!;r&ck@6`S^dhxgG^f2?+LOhhWgn+4ZB7(;T2k~S zoHV#uIhEt*__dHRx*xPUV_VE^N+K?bHnHbDQbBKfJ&EQHhCfE~rm@OYCD@0~SWY+7izkM9j(aMJ}xZ_bT?JM<;N@gwlTsS zbLf@_R7*VWn>}btlfg$We=iUZ!$Qx)I&;Z|aq0Qag?xIs)#N@m>};-sGnbZ-gzTgx z{=4Jwg$%dra}^yv^m#bNx$D9s$b2)2?h4bz+N~e2+@MEzw z29>Ta^M=;LdfO#O=U13hXd_8kp85|}8bgJl*y{4MK4@ywUoRPox%HArhU(Wt4!kqG z8)}zUlQ?0ElV-k-<{U^wchGZu8q}I;Q=VCQ%TFIOvv-mnU7`1?cDI8qcrjpoZW4Pd z!iV9>sVOD{r3@7)%fFn}W#xjKP@CoFCqj&rtND8kx_5A9?wBKU%JJjDf^4w72?1M! z@5QQ2?(U+XeU@H%&v}IC1#TN zl@GL!^#3R!7l{SGTA3DDm4iVio0+z+97cluc)^1;ygY|% zi>A$jA^+43Rl*mH_s7Shwjr^&AiS=9s>jpTh9;@k)NnbnmkVq-TAPiu7oPrh@&01% zY7~7apBAf`>Z8)#e8M&4*ViBv#&+^DbYs?kbC6|b_`Db%%Cn7zuY-YhR$lPxs65ntM(+?kke z55;RK>^%V4iB~hKNbK&X-gDU4XHe^z_@x{Wf`pE>dESo8Z5sa5Tx|q%$Y1;i^ zi|zsM)vRUp+wn-Jy==sQ*en|b?9VTkjMY?x=)6b$aR=fDRx3l^4LZKTdp6TU`K76Rx~b)` zSEpRJH*D1VOgxW4+%vQL+!aJP0pmv2=lCwx2TgC$9UpMGm$(#UsD1@nx#9=3?AA?_ z3IgnRm*0kPFa>t)^{qo;{RT8{7qb&o&hi`k%Vxqi{i?NdCdV<>lq|DySO zP|3Qr9(BYQRgjiuDV;?=)j6xo)bbq>tG`{SW=$h}zeZcv`7}*rUr8cADF||hsTx>X zF8x_ChprE<^m@v*9i?ja-R33E9KK^m@CNbxK}-%k@5RImVyOl&n#CqHxj0|h2^R_v zEIN^9$uz-gbLU9X)kzhmRyDnN0xf4?83D0csQgs^yf6!Nl{?Y=K8uC#yVgXkgPy>7 z9TNK}zmnHz@-%P)-X)BT$9dJZeX$ZWCGrQmUNyjTWHW8;uhJ~s(bzN;3em@q7vCYY zCUXMnJLM_27gxEWWq9;H|2>%Ubwv_oATnIMvCG!NGxAcNB<=VFIy(edj z6{rg+7_r<+c3z2Zy?YOM+On~VR$(t1`^jIAt^W1cy!m+- z$rLpQvcB#>I;lyZ!wAu_?}TJvpz`L13OKnEfk0r-tZsKOrITzq_ZF3$N~? zmWH*eCXR&0UR&GbZak-JFiK3JQRj94zYy;bc?iA!9X%Rcxv@Yn%TbFjR*B|70W`!) zYmREOHK#R1>egZjhUthi+*~7Gv3E5!qw2P&Qc%>49z=sKqrnu{GFnCDJHHUS%!rdl zTT_ygMt_*6-%A$b^C$9iW&Sx-?U5bHE`y_?Z`ht<3pm)@43~rOUqAFWyfH8mZZIz+ z*lCZli3XFXFko8$z|L-HZMJt|^k5$i_3l=#LMgq~DKZq2Ay<#PM9XcIg`bxG>c266 zasG(*>qGd3m+QpoOEcI9E4^txBNykdv0b}=J3R=5!4_rqq>G|<5$v!&9f=2D&*BR+ zWkH&nkOtD8jna_4*8SbpPAdUziB#_%)eTZPNQL%wlIpaI1@Q_)3ASQ*f$J*OOAMKuPBjGYIh7vKU_{t7U1Bixm&-)itXtqOk z^&ZG67Q^aj&IbtT5hKWxLo31X5`OKczIlDjOwO?NcV)^csnIUA6ka5`u zS76!|0gH8#{`D%HL1II(f(>G;*=|b!V_FtUmy}b$YFW&SM+3kl9VGiQYhAa9*eS3P zc~(W7JJlf4G7WM*Yj9_k89pFetf#kk0pK=KZurV2U<8s{LoJ(K?`|!Cuq4W&CjA{X zDX;S>_ZH$(iE3MIT!$?|p7=)|loA(v=w`|IC9`5guL~4K=UdTAu&7;5MYZ}Fp`9j6f z-1qwv_!lOl+r1#oQ!szx3)0`!_mn~V3{1-mFyA4Ah*FcvCX0XtaXd}hnKDM)=NIRp zwi{skneOR(zs3}yt6Y-{Ub5T3DP*aUmYjOswuR9sn9gB>3Rp`xbX~?ni2y#FMa{~# zP+st)J5a$wf}wHYXQP~kqqJ(Ri7!?Pt{GQ}Se&&PuJ(YhwoBG{MyW7um)5Slq#x$3 zo{a9Ts|NAs@SY*&QowvUE>DXSt@S7uSTixmkQm0mDL?GGNUTBEH0Z{Nz3CRsajx5$ zD_WIhF~zNV%@yPgf%rSD#IHd8(<_nsf%=^}0W<;==J(xuCEM+6yit6{Oq~uZfHF}s z=ut!5S=a4q4Wu|3Rds$zF@_-B0WCVh^5*Lm)&p-s-XDrNNVf_P3|q zh?Xg26{Xp9z6+EO$IevmZu_X?%O8Hf>2pshgC0`w=ohN3__F3;pYrO`rPm;k=|fJ% zfF(JCE45tY&otOBQ5q31;0`tY&99Kx$aYyzOU|~x$Oz4o?)%Z;3Z9BJocQ|n>%;iw z!Z!Ra*!6svnhTE`(VsT(CJp?I%N8qrm+!MU@blB$(JwEtdcJ}MehjnVw2G&LyUld!^4UsX^96pvG zH!bl+p_!;4kccB_B3o|Y!1&~JCic?Ml>A}FB)+?un$&#U2io!~EI3Q7{$M{qk{q{^ zExWVO63rQ2sF@~BHoVARp>o5gr zJayMb&F=au&<|nnY~FfwJ?9&vt`eqC9qmS-Gv|QFKmW1#kAT7t= z=0ADv9+ai#ZK*0!m}K}WIZOLtvn9GEQ~4FM+n^r(S%ctLrlSrKj0Px6uXb_2rUlhI zjaL;CUUlFB<|WDe(lq3`DgQPzCrwT#6?%0ud2|H%=ZdY**dy9It!gDg_Z?j_C0vK9 zZEV8zTb{KH=_!8BEBb(=;<_ji)2grRMGK(Z8cRyh=u1mHdc+BuGZwzVBGK*}OAJBA z>R8?Mj_xzPlF&lbyLu0AY5W}^0O_VVs#_-dU7u)gt{2a|#jQIvq>GNS-o+uHq$z$G zqShct=b%H|r>50y3lnUfuBXTh?N+8QR_J21bkinmOASuL zbmF%QWBg_PNR#W|4XKDy6@(F^lQwb5+qPebj;b!Fi zqD0b1wfJx4Z^Hfn0LdE}O=dyk82jSik;5Rm$jMO(KY?I+igngg|6Rf2#ffUXui&@* z8bKN##hKH3gV%YR~6>n(oz zbyWW^lz_Z79wpP!zAngnBR5mox;H`vKWDZ$WATi33t!=0?mb}rY%ofOJd@B$hwNB} z4#;f`*dSUPbh7VYuBG39QtH(b$LA(kSdsak`j5QN*CC$h@yT4aLpoYuPLZ01~&#mG{RwrkC|8_Gkds6C>t?@JP=!j*fE;?HZ|Xr%F8GeM%L ziS2NGWruX@#z=rWnp$acz&|LA!QbGjFXD&U)_@~g61PGr3j_O#6mEHH=;Rc<+^M$!-s7mMUziWc^!w@Ck?_^ zUYQc|1;zHi0qosup1dNKbN~Q=?+F>fJC67;``QOe0W1#%)jxI~xT1+uN4*KI=(If$=DV30Z%He+ z`fqq!GMTrPP8vJ%ljV+UqYeo#ywCJs12DhS6zxVF-l?aMNu~i?4@?eB!& zEQ~Nzu4$UZEY?%9O3eFqlpp=R@QR@+zqNu|@+8-7T1Xnc@Bs!eG}ahS+!D`%ylT3p zGbHaWUD|Zeog}Gz@ovLq{fni`-n+iCEe)oo`SC4f)}MxxXfpjY*!12gS0W zs?co+-4Cw)i9f_+A%f1ktBb9l8}#VLKA&Gq1B%5MT`mVTIX42%FlPGChJcfq^Z9Yv z5@8@O0*9@6E&p!~Lb980>R%u*O_|*lQ^C5M+R1&y*o?fqyc*1vNX${lSMh&xSFdA( zydnRQyB>bfz4>dX^Hh?AqMwTT-xMtHlu*Xozj96R;WAA()a(*s7H;R}wcsLTZ*QX6 z^;yQ;98gzU()f)~{P9J`ll%t7PW^?3IZon5=S--SH3)>8$AanUD04dH1$pS__%S>& zuj~1?Y=nt4@R#aGGQbUH>vR1jrt7SYhCgr7)<4X^scTNr&*)u^b1x^1gfBtHwPR7k8oL&w{KBy?M`OM`)^%`%SM7y^2GRp z(p08<{b0fWT=^qkTZu!w8|=3R0*QoN4Yu$Sv&4>~RRPYHfAKwZ^ph@YVZ#KJTGJ{% zpyze!4{wLi73pfyIA~V5EwD<;Ynm8j+X)rvp)JZ#FowM#)w1LIf7d?@2>48zI;y9Wb6WI<6;t^r+8w-au79rzE8Wg^e~gx~e+J+AF@@d!RRzfN$x z`y}V#{g>Z*vP|fxCn1ZBlqo+n#9PoSTCe_@@0fcSx)q0eDM)8s$q(ZgMXd?x3)z2@ z-@pKW=_0~pNw{K7jPTI8ZU7!04hs3fC#jSUbH*Fn*=^7LxQEXs{Uh*m13sR9io~nC zqgCCwgmFU=7^xpUC+>8@ncI10Q9X=1^Zsm2K&90wFqq=E0f%0Tl>5g*T7JWQDkK;f zao%qhV=#Qh`^$n<>mE2D$X&={OvZIlQDWTd*T1LzwDw#oEDnfpkd}%#_ixz>I9#b2 zTXDP=RvyapQ%c+3J1HA0k~o=?bcTBWkbvc#rM{lirf(gKF2I=q67)GIFvkAV4s6oy zQu=N0Agt!kyIRsOe-K5#uJd1)#~~b{&f1o}Cnz(sd^pPTlMR!Je1^A^lu6idf%*NWjj%{)fV9{GR24*L=Ub1#*>5tgI=L&8(8P;nc>r&5aBqys~a% zs1@XK_L5OT4(eP$h>Aae5GfLFClmM+Ui$wOAhaUu>XCF8vvuNiHnWmK@h*>msw#_q z!$Bi2&&{d4b*Y1@V;$^v-!%z+FPk-Iol3%C)2&)~d}2*E!&dGU{qC57@g8 zeu;i7SM3xpWGRnx!z|tin5ePB$BDFAq*zmH(i)T*`N|^)_MF0}H^5?i9~#H7^4_S- zP}V}Z&W)-G#lf<4H6iC7Wxx$?I=AJQaG-t#EYMd1kB5ko1JD4)AVV$m=%~8cC0(D{c z@_8ayp<_=W55X%&vcuaw=6iM?Td5`t$m|9BxI!0j(c$gjh57#E4ws#soo&=rHMMQf zN_EIcY!b6Eco-F{BaQ#*`V^1oyIDQ693F8iDen^A)2da}%7SQpPJOa5hy6P3Lyx1s z-|V%JK}om&R1e;_gAmecC`-4LiVV+zvU%eZu60_p^~UnN=H9@?(+<|Y3L_8YMxtx7 ze)8~iZ{?&ux013gHZO0hsH_M>#;%me_09X%$QTRgNY>f6A{4F~^VPQ)6dHfJqY;Mu zadC$dYjrB$c!xY9XiQyL+J6le%~x9MEg&?67G?$DXsEd$k7}s>r=tP8kATX!PFGOQ zl(M8O1TzeAFoU#zq&7d6vFQJmylWDcZ1YP!F51^gt`5^@A?vmv)JdcJr5HG4+Y zfplCU1I(y)LXLTiN=QtJX}O@WfU5jguPSI@ zfIWeGz*NwSXUMfP$oz*Ahhta%3y^1X8w*H>$>!((%|+zCtd*HpBA%KB>Et(a=`X=w zlOfEqvzgo?ScL>OeBki)dEzSj&?jJdp1s&^Y5DX0Fj>^sJL!Hold@abw3=+fS-O>p zq#(a&gITewKFzZ}Lz$_ICH;HbG=8jRQnhcYj zO_3NH5~tyKSAI4yX4;No^-UbEU4}HS5Bi+ER*TjTll|L~uN+j~P&n?Vt@AfjtM>fN znqYwws@BtuKHbU7WoxEkeqBM7_(zS)=vU48!KSD|49ZNT@US)z>0E>flQG2&Yt0P_ zp##tnGv>r>XT;xBZ5lqwE7AK)M<=O^6vE3DcFo_-!2;&R;;KO~E^U<_G7HC6JASpL zFv2AqsQD?lN|JghFCBkIQ2CM{(N-7Mvue+Y?5%fDuCm@jg0shJN11I;34299fZEaR1 z$J+xw?Oa+q6Ci0Uq{AcUIC@5=AAZVE{bqcjL5b3*rbg55|0cu$?!+xUK7KMmd{Ym& z%9QKZuV<~Ut$9o0`*PG-5`iuhO%gnn(y1}P{>%_#aeR#5qRBz8aK-PAgu!cxme$Z@ zT7voqOUwP{^b0iuaH(mN0I#ph+{`lt7IjbiOGYpMhmjWi6W~#^dfr7{;jfj!L{q>z z4=OV}dhDvi^CtRT`lGMk5dl_~43_t%*P)l*{ z#V>~L&#FmFO&r^sJP;u^>Yg&*FDDuU(slv1GHpM>p z^P$+Hin**6U)Ud(^Mf*8$Kz_8Jb3Ds8sCR;nn&p>S}#*q-|{S^eU*Au^jGWQq(k1P z$B_^kh6rQ3K@$_8;Gk72FOtV-J$y$z&!pzZ8TU7(@eL8EXBKvv9GQ$P)+G8jvi=-~>DFODP9;ldkK{av;o%B;Q(^)=$3?j9Vrp9? zaiY~ssr>{)@trbr{q;G?GN=AmDb$t`uz0x-qwQalas4ZoK%xjNB-22QN~(GqnR3GU z=au@G4r9_^LAF#leiw!O@u!@%h64~+pI!3`r ztbKc~OMt_V>jB%(3=-HeQGoD^Ar)MDn^9+ZtOntAzQ~BnwxI!pGHQw~C;T1|llxJQ zy@r>x?b(WSvUB?jj1-LjUbgoSO+an(a_5}JApF}54SevA$c20fSg~i0mC9}Sgs#Hd zx{f=VP}^IYF4nNZ^Pux0GfQo@;V3XFc0q&Rm=^qhPHld^#DfQfT7!$Iz@P+MzQXfa zFxQNF-|P~NQr~f=W025xUFolSIZpj_=eI!C_4iGRU%GNVU?~_uqO`0$!E|qQ5jA~F zlxR)@jR*x-goN5PZ|vWYbo6sJ0a)ic$p==Dp*MZ;>KL;mEyT+C?)FA4(g|PQ65r}m z`2d=MIR9pWtQJ2{776cv0D`Jsej@w!@t<>0pek1dg+JsN0!amdcSPP|Fu3({l!4$D}V-#Nd{G@tpN`k)2k=Ds~>fjEsy5aQ2{ z<&AbNsWqpCT*kyjM>%vg4#DP5I8VMoXyHwgrvkU$rSvpKMG8~acQ>5L(W)o~DVm2r zj@vR8OL@H)@)TfqRn&}PxY1YgzW7_XR^{u}@c0MymoVGaB8$St4}V6W+HP&8>250W za?NfWl*Gul^-Uw&wvj2$Py$kcX`y;tv+*2o00__SB~~SY-LTmmHNrDu zP0j3hx?FZ^uw27lGQ}o#K_nWNSBh4*sQZknv5}EN^} z{4?cH_12(C$@h9~gD69^fNdNkQuldb)A70c74L(;DX z8A8kCWL%Oc#qLV)Wt-GR1UG7TTy8}BoMw%iPW{&N+ahHn#XYQKdA4%jI7o9B_PA85 zd3*KoDr?7^4FQIb;87ZjEK=9|$)$2gXrGbWjuglS(+x^Yg^UF_z2&fo5~(T{9Vsh1Wh$L+KfR#;O_L4DJ5*@D!aG{1`e(*PruRRvc>;B$pVs9P zR3lMfw`ycNlx-=9rYM*>(Hq(uqfxM8leEH(k3Iqmt(b514~+fqL|kx7H1{kB+T3H5 z0nmi&)+-THKxkQLxb@65I$h3nrnhqd5I=3io!$0(3KNhEVf4ZgWTUG;q6qG2C7;u9 zM~$8P6+wXQ=Z6hQ5%b8B!P7TN-EU79Z%r0+{UJa4?$$F0tG{&oM~dHyE|fQCJZ$Du zxWy6FH`zSBjJjLDEA=Ml;z-^smCe7s`om}RUFS@t+O6i7@}m{D>VUYJ-u}}36)$IR zo)#Luu;KOSEui-CCgX$mD1^Pu0|Gl2-NYqa!5c!J+fusUlp|VhLt1}-Csn@Grq$EO z4-)#3&nSGbufV8bIHEI~)V1y+M0ffz6I{+PnDRGh|!E7R4Ax|*6sY@^FKs|=qa z_6;5U@ZPFLg`RsrrWNr$(?>$@=;;KBSLpVXR686@r80^Ig{sotbbdo?>9`TokZ=UI z+;t>DbelWC(IP5RK2Q0f{)E@-hK44JbCSYHF|7IP&G&-oq5&U+B(Af+G5mq2X1tIA zEUHMa|Mc*?1mg1Y{hH;a+>K@Kl48|`LfmGg0#wpfh-84=Gi9!yK0`wjsD4hN0I6cl zn>2RpINepj9cLY}8SM+_uLRD8-KOh!e)RXebpPa_YmTvIiDY8HUkrDuK;>EH$8#=X z#nC@O??UByP1)`efjTO1HPx9hjr$ZOKb7Qwt+~@P;F0%L0XKd(!ERoDw!g+_xJqB% zz4qD=G^6KiJaJfI%I$UM6M7abCQN}pn>a*H;3@slYWC=oWiTCGiAm)Za$T2{shIok zXhEmT^hR^bZ=~VECnWpV1WB~Uc#t`e6C(lb6Sc&Nbds4?C9&vZUeTnS0%l-cOr3bFp9c>s2I z!(8q&NYhejl~>G#M4B!-Y!iJ(%59<-I2cYmIp)4sv-tzUXqaeu-iG98Qa<7`;*g)Q5U9;3+V>K0&S!@eFiMu+pVZwOVA}a7|;o z$``|o^B=V;Kb}^#soL0Mw~YFhrE_M$ZyM!ot6QMk`qk4V(UqpV+mzsI#<=Ys_<--E z^`K)nvj*n;_$Ji|6#-6mt@V0kdvgCb3QgB(nZAnt*Fhp$X10l!`o6N_NBk|%3Ne%) zNt$d;G$TsGvX4Z4)D=kf7+3gq{xcS9IpWsOG=^C~J%Tr9D!Da8Y4ydb#O4$vh<*=! zm4FoDp!sCMxpybsI}i~reH_2$|6=D_yF|2>4T^VxV&zD>=-F~s#&xu}*fidW>Lp!) zW6bbN7K(^_*78~7O?y*~FhSas^wx;E`jt4|mXN<}2bDnURy-pM-~8}1bk{cQFR>V` z;5vYtqvQn!Vo5bLY{hDmYH;ZE75IQKGQ5Oar9`O@nzVS`Wq#nyaP^HGr4pmK`ZE&w zOs}wFdXjd^@0Pv#xZgINRBNKO4Wz#m`Q%MLw^oH1QVUv8Fd3O=i`;#Y18D_i`-P@9 z)xNakjgYPH#sp+LqI>z7{vA-iMpadbp)JmN3uE1mg|1`+=`_wHIbv2|m z2g!hST0LDiU>YLULsKYydN(g;fzcZcw8W2Bts6Ym%!yVGy*=G8UPuyU&;FoW%^lq|;O9T1jZaH4-TO;j6g~>d^6_N` zUEg>zeuN2NHA4cc#UqbO)8#MV>x0U;B}?}xmT&TEs+*sFrg+XKe8evU{skuBNAKB5 zT1dJN_A&niS?TGGYp2~=|kT;q`Z)2<(@rL z1)&>P2KOhZuw0WFKJ`eq@YmFBu7xU6Te|PMx%2lZzYnIJY-uvVksHd*^O)B9Bp3LA z3RFmCe5pFfaide){|&8C#d333{6*^0dViSd{!er?cQcCr$O%frDfNZToRs;sAhrSV zG*&{90s^&Mi5m=WMwTs*j2NQ8&d#Lsvjz;Oua8s6}Kl_qGS4x9glQ-HN3FpT^ z%pF#w9dgQ{_8caaI&Wc6uo`T;m=;p>A@p!!rg|c!cdQV z2>(4F*X4XaRMVV}kz3ASWD3?+?-hGwogN^@Sqc2Sh&SSp$+t2LWdm=aKO<2`SDmk{ z@u^9p#A5G+@JT()@U_k`2T+?sr!or=|E%tN#mrWHo3)WEYH2 z-B~BqNd2qD_J93C@t$Hw|M;ma#fvPz)c8NO0W*DBNrTfTfL+P2+jk_ws$l7VC4~NL zbd`xW{_m1gi|i=3S<)zT+BBki-NDB-833YxuDal%DOlIms))9Gt-9c3Pe07;shRv< zM5VdEvJ$lsKTg3GStHT(tJ9tDkHb{@8np_gI>@S&4)~h{(DM1-N=WJ#2j_AQ=x|;l zeDqR?&$+DS!T%Hj`G7O%X=tTCHvziM1@2}x)B0U_^A8ea#deC;_b<5I#X}Ac&<{Z| zD^yeInB2c0Aqc8s_ox)jskN(D{w_uRiB1KTxVuP|XTO!Nb}llxs0xdUwkC@c zI^e?|Dn(TK7ZW6Aj&bdPRI1#_8hhB)qJ09Ok>BR}i|iv=#VfF{{U*Qqr%A(z*rT$o z2||@A?)Bd`wh1F}P;Vaqgdl4vDJgQLfDxjKmecoxw2yQf3@YI{q3%{AXol(ogkbn4 z#<_IXol4Ck*mtJ8Hm}cHQz?jeHb(o_p`@kB*|X#d?x(4d_11 zg1!#|dv3KFt<1Fu=-~ zUi?Ea7zZ@p$)n=!DUxWBDfJ$53m_`UZ*Dj2@3b0>75pippqF>g z<476HpWBOrt2YAnG4`&@Kfb`1zp&J-0h--|j9}?T|FxO#9bQI%W$4`X2m~dxXW_du`wq3#so?t6CYr!?M&WiQ59dGjbpsjmR?-KN=H2s++Cooy zIQ9sauVX_2eT^=lHGTv1nGV442fb8!3IRx79I#1lItEE@h}ExgC|;zWnPa zJhYqk0C9-Akg?>JK8Ckg9z980);Ckp3RA}8S2T)kTbUcX{rVA59^)3|gXME9zRQ4C zdQNcCw9HDWtZHx=!YSYjTk%BWp%ZWVL8ujlTzkzqHy(l`x}GP=Y?E5IJ;-5)J)K+gZ*%?miY#Ej`Auqq7}u!<{8fIbSf@B4PAts z|0*$h^X`#E7|GLYwh#Ouz+}jW67vwt^5J5WeOgOqYGV6oo$ z6|->FCut7mOEeH(^%Z)myyyOWr^H!}gD}D+EkSV-H0Qm6-xu7?IrT%-Pg_n@S&PH7ua4wFZZ5x%w zMPiq}bYWhc+T}36Yf(4fp%iXz00`2b z$yf@9b3YdL@Hl87(b-G}k)DI)ZR-YjuHjxBauP1IC*HKf{ty|tEnqB?mrxgkg!y`#mKk~!zukGcH@#pfBxfwb z*ULd1l{S}aN^s1#?w3R zV&cBo_w8LO3{}9Rb5_<@o!&-bun!LQ2bn{hXXIu!;aM{0_A$AW?f8`4y@Cr0XI|}y zJ{~1dm4@ODleK+KUvYc?^~E%l=ZBnaK8XoR^L*S?qkkcNOXY2WE4lLecMh(V(iJXM zo=^7_z$ET3y=35Aj}-d4r#L$xMz|ukR~4CoxiSzF<{f=&GO_w&@r1b4>@^CxT(9_r zS!-S1aaPpP&B{M7{pMtk4_5esaOEsc;86~)&l`N@lf)1hqDB_QD!+9#Ti8)q>2H9R zq2l8QN9mPW7-pX2CDAR_DwJw(aPMOhruXxF4V4ZE7{x1+@m45`7DHazZbjQt?(=HOVg8nUJON0-8se^e!+Q1R8S&5*{TPvx>) z!GutuqsW;GT#*0Z^HY8Txh;8D;KOnmgL&gzz4)}QDy_PNt#?E88c1K*v+@5*+a+dfN_=o07Ir(Z%#@&-D6oSpS7>W_y8!m#7x zV^ZJJ(ktct_`f{5UaDuW&c-YPDau^`Y$e6So8Q~qv!;3Hm`<8kIGMZ`*l0THp@MOL zL5+p2)Va@1IC^gJq4x4a&duW<1?St_ATiBJjIQ%OjQtYfHzEQ2gFS*J*fP}#{^$Ts#FGlPi| z*~UH?W3mo0CI*8s<~enLyT9Mx?^#~Y^LqT@57M}j@Joqy*45Bbz zgwB5VFE31e?%X$`g`N5;liACc(A z3bCvV^{;vOd%6b8`ohwK!{;@Hyz1t9Cs5qh;Trl;!$fxGU}Yq10$}kP#Br zvR->O-L1+MCGIA%LWF~b>V|;N0c8f~djOmKCUCC&oPq&P0efu9tAam#!ufvgJHa&v z_bf-9VE5f&EFG$>Q96;?{(QKt>Cs$D!yE)Rh^W||_CRSg>$>0CtFCA#*^GrqR_lbD zL=1c5>ku<|61otSqP0HU`0k3y1?tF>HI}64z*LTgrd_69jl!bTr=JmLP)FYqZUxyD zQ#HKmYWsP7hi7)8Oq`YuKZtRyf*vrGuTnlo!Z$dke(%rAT-c3dt6E~+`FVqCuh`F^ zS*3exUx^bOBhH(wy2>$z{PC;9&yeoV7_gPZq4RP*UZQW=149*_3AwPK+N^Y$Nk->I zR=MY$8lkPO7|vXmaWsbAP)z0kfYYmNJ|4Ek*wJ@O|XmMLCH#cKj>lGOIqJ zEq*QDt-{aJI6rIt>$Fr~(h~SgBc|A-`HO9+R25aw9iXsxf#P0mEyF>BU2|2G zc7Z-gqF2Iq>`O$T?{G)}!>ejGc#QAX&2Djx!LJg`(%mYjZ~JG875e19j7OifF!YSx zTux%;CA*;zx(0o;(fw41iM5FqdT%PuGT|}xwHvY`RZEY133eYEHT^Evw7IPKYm!)Z zLvoe=3rz>&cIuRu?2~#Sf&DO#!A>{oYo@;y>E>sc^~dvb%;;8}_&&Bk<5lngJB$$) zxPPUkvJJms>u@MZBgs*veQmmGGs5|?gT~_$^&`S}h{@2z+X3=&)(xxIWNd7x-B=-AjxgJk1U2zGg#6H}o$n7W3yQ_pPE>v-BNC zrIqfxO7>F6w?l*cGozs^eS6^S0^5P{PG#~Qcc=q5;QbTE`UhotSfBC$FkR0M5&~fY zRAx@L6TA75()V}T=nUE|_F@Zhme43yQYWJRpzbtgca8fS7fM;zjkoGD`5$*yzFzqm zr8KvHmA@v%H%-hZ8rT*k~p9-VJ#N%4JA=F22(%VuPuwnKo-XJ&Tx#_6f5Som4F@;fle_cG% zD;jEUc#a_QHa=SZ7(Zu9pEkDcRije(`tR|&cM*N5bOE=l5urHpT# zN;kKR21u=Za6CTD$dO_xEW>B$K^rH6BsO=OSS?BAlLAlE-gcr5gZZ`vs>vhrz8$3$ zcDD{_H|R=TR9NB_JW>|Y-DzGMDydigt-a{I z&{=Gp7^QW6ZRmm;_XUh2z;4p=2-_V!c|0ilj$B}hf{}f4!S!^pAD^TiN#Z`9Ipb$! zOiZGs+WTK{zwduo%opt%Bj(+n-RG3+hyFYQrGIQ%3vM_BaZHZ%S87v*{xyIJ^eGsw zPFYevS?1GK5e#K%*U;BLBTD?*Sg!(5Q6Gb4mqn|-rNuezKSm^%r^x(FdFQRaMTYsA;SeNPvMbO;`Of@7qg=JM zt1KZ+MxC1AAS!&rVC~tqFC$)3?huqNviKIzozlS{Q)M85&ATF*8*(|+Hp zgZrh4aE?&o&*c8o9OdYgjC6k9{U7{Y9=3)q2fE%(a}U#O7~)^ zuBbo@sqY^#=HvP9#OtA2YGTOitcP21#JW)j!$L#yAK{5$5UJUXopF_&TYK>XJE!>_XKa0PRVF5MmL}{ksr208^+;n8E$F& z%+KW4*YB_&s#44hk5b>4eK22Yb^U!`AN|BcOL0o2TM~O7cI|0_UQJ;NH*8T@sO;P^ z?u+)CYldr+$g2DD67=G7f#`z?kej^g&wZ1OWfON;F%GNmGB}pR~pE9O!)*eHJpuYT%?mS z&Z`f_=?^*DC$*&w_!g+M@(Y)R8bVQj%6SiChH9_Ocr@6Zmi|dBA8IaaTR5n2ttdVK z$Gft9$)R-mNA*kO*Zg;$)0W}YXMT9fd$y~~s-Tm;5D~e3YJV7PF?ANc@IowqHdX0p z8&2Fa+-GKt6z0A$uul)>Wp0dx?mKDvE}dv|@$Bu(1YKq7*b1L{Jl~q-;j_?KW;ngcdsb|}@{Si{dMoRKqmJ-0 z$DF47NH{>V@GiQsB(_86t2^_7~A|KS(j&TF{ukE4r`pKrp> zU~t!|bFG}PAHqV_Z;*ekA*WWIn3xxKS7pvDlQEU+wsz;q4j?(_xN3--O0XZc}VnL3(Y@5f8r0JwfR-5 zQMW7nr~losCV@Q|&2FuN{CApzU2@ATMT|lHgK##}*FbX7|AIuQYzy3x>gL4veX{$q zJDJbw)0f?HwB6!vdmf(TYnDXj23+!QL3MiK_qKSY?}Mk9CZ_xIUFVH}TwiF7O$@d% zzemk9UfFlKjCGY#;{-X1GaEXT{LVYCvUZF&#q9eLD0o8}YHAZN6hf{FK6Vw@Fdt@ta7};n;|VJuiw(0t>-55PQ=x^qU%h( zkIr6&4IN|c(1sQXh*ehehk!0`>XgKCMK&+htWQgh;`e4PPhL+Ob1Kta8K)Q68YZov zVV-u5GazD`kD$c&r}Y&P_b3HTT~TsaI}a)MjFe4O9nxGm*AKml;(w==UdnzR1mi#E zgj$tp(|l|GuAYPL(~|K^S0%rQP(qd?2FP|po>eYa%vBHxRx(0i z?Qsrc;*r((Ot+#1la*?BEG6)LkW0l`sYRlKQ5~(i&bso>;sjl~`*PfDexYpQ5eojY zkSmIuTED#l6G(!sYEV-bV*ShbI4hp%tXx?2M0~mbT*X}Nt|R%^1xzpE%@XQ755G(& zkA7=2e}s%aY4)M4CqdpJ$W_3osW`3<{Z`caz>w0=Zm2p|R>Tvs4qKhO5wRX%Y4#e? zOo@)BH#E86u`U%u@`>Y7#j%7hM5CWfSpOswkD>%mJRa3lm`mN`6Dqu#(pKpyTTyRq zzQO1?!K)BFVed}8{Vd&7PjFG=v=l5e)~KGdxQT*t zPh+2^oglsl%7t|XpCz(4C_|9QXO9I?vRCIHF~cK+4GO3p0{d`%eOa~w#3}^ z49RQ^a2cqqKj?NmE6$;-9Tmuh8}Q@eJxnyID_%mv^1Cp7JGrGP>V~XUz0Br>CM_F? z(V#wc!RTvcK)6X}rsvFsp|qEDbiEH@ugTmuX)9}zI~E%E@$HomNnNd6wrOjhti6ek z3!)cEp9^syBiF=Xx^RuJa)--4<-3c_%H>}lpmOTt`WD|K2lb!=nBzq3@K@MF=cQl@ z`EpE56uLroxbCiX@(E)2uq`QDzl75teMeDnub++TVUMtZhC>~=jO6jCu}s9-Ns58L zHszkssGiK_VLJ?BN`)*pZ+|SNajO`idc*yBmx|A zyfRbWABCo^{ekDp`%a4Es`X4qDJjWar-7naWP|bcF#~?*E$hUPm;>=q-x8;2o}Kl* z#|mYV>p?=kJh6g>&dx;0;-iZoN3CM7rN5aXX20}Jqqi}jqknI>t0t#U9kYs_koW;JAG&vX3|GO{!XkwmeP+ZKMQAzOa;t}?ZcuX&~a z9QMul`P(21=-?D}8JQMYm$}^5)*H&8V|kSZCKB9Gd7v99SCeH?+wBItERnRfKR2~N zOLL&8nHSs8CrxrENwSwW1~Ej=q!njviBj!twGeCk1c?0x(ASl)zstlx-v*9$H3v&k9~McN5N$Nc>K%O3s%AK)4!F$xk0{P{NrL#6lTomV&_fG z2}Ye+#^Uazv(zBVis3YM7uH>a>9s}~0@+5^8A3P?--UMdM;7T}j!UH8Cu~#>YgXOY znyED(yDRVnmU$mey2k%^H_6vXAC>xT7a=r<7+aLlbq~|q69=sUHv4`;^Z%!8(5X;8Wlj9xn zIX`JaC+5j<@Sxa9EYS!fAzZi{E%>Ud4~vff=@WV?E)11k%5Hgl*yBbs~hJ_q& z@tu|0s?Nig{UBKV55SY({Lp{3RfTVKmQ-64sN!4ZVm}UCU|)l{9Oahw<~``dB8%D~ zUcWLgebi@R!8B=_sb2B)Lc3c3`&`CkJQBO~my1m?jz9kb-ZzWhU-DcL1(jXtaeyWF zmFcj&!*enhf7~g)&wvig;S6KCHgprjtdsfvaI#{5A8|{@-ybvE{U!EfWku)G4_p)* zvY%A1Gb1e!XQ0QI!0bucQ})?P`NeQVQSYd3Q3Ov$iT;VE^4aop|NQDrpn2@Psigt> z5y_!7@g8V&kD=MZY6ZZb57{x~8Yqu#IvKE*2kAr0a33X6lsujQn{E5>0S+z|IX8e( zyp?W4Blny(u|8DhIic^rQnzC^Hs)r@{%D5N`)jp=v){7gueuWyzXFZwaEhWAkmedH zse622-)d6n&jOSGfG9yKR4Ipg3Y~piP6*gY-KucDk^>zo&4x%Q!1DMnOI^>@YpLaZ zJsApH8r^ogR>+`AvD0L~hy|DADELw6O+0t0?+l`l7=m84iy$95rIcR!w8*2@+xi|v zHgvi?ReWt28r@}*^hM^>ZR}J(jbJ56k&sL9h>%T}r<-G+wf|7u*sD)OidQe7y$SP*r%dxP_1=k>Ul7P z^7G!zb{$v2DZm?4p-a{;-) zoS~G8D(ssy_5A(9`dzsk^f?jKe?Zxg{+me zI7{6_f1GGqY(v?jx^g#VWtAp($pm0J02(39GF#s)_a?M}n(8R)1lVErY-U?>u{479yXnn^DQRa(Q^NTHW}-UD}KiPsIZ0g-8H z>t%|+H%43|njf82v1+E7UuAyxk~W`2#m}B(JF5rI1iSGdT`7-+#)U{go_L*mkDl*l zS@)tI4ujVnm9@6HO1mxMIWKiL^GTGu&WYR#7iYp5D@J?+;`FIxs^_enn`NVjmbIFMvxH`lj2cH5 zvtl%G#18Prl`Ne;n{gyGSoq$42UJD5s;kIun~x1)(%jF2f8H`k%QAM^OEt8JfSeqd z%@z&Tm|t2U3d~s;TJPxz5D zA|F|?P1U=^=xa2lurS!CPH{Ctezr4AqO6;Ev3rBPsL;nMYYEYC*bH8nXo)AkZHNew z^-c9zR_SvfLFv<(MpzW31omb73Bl@>^RP;>PV~JJNm71flCLzkvM^qKHIlwRdaFpT zCMTvQV1$|_8@{h{d@rv_&an4uwLYVlR(nooWSVJiT=X$CJ3JzMC2Pj*RzbcR!Zqnd z6x9x2{WLR6+Epd=G!n(eCCUMcjf=XiS&;P2nNvIyBHH2^@1{0-W5-Y3If;m4ywk41_qqakiJy^#}MOL5#1QLb-|y*;hy1GN$c!Q;4!O3NXo%LLZ24~3BF zT{N8NL}##14ssH3F8r9GTjsFZZ2iQj+a;HveokF}+ExJ{Do}c z_eX@K5AAUHxx;IylrKXnahyo+))P#u8mlss^T@WdqG%3OZk3jf3}w!n(&_6Wx%frz zpos=sOuVA_YeH0cI(uNa$~*m`GNK`yc}gbts^BZ*4#V`$6U{DXCQOQ+tuHxA-zeF0 zsloX4f`Mvwkb%4{uK$oSMZM{ld6MVf167;#qIKPVP%fUTyxIBR2fxGbuik{fuk=2) zng6=kd4w4KFN9JX;DS)j{ZHWEZ!RBrZ~p5D-~Uhe!$j-sKsmio!3e{s!2j<2pWcP@YK$*U6vVx8G)?VnJ6>)U_Xf!Tfof^QY>H|zVi+?Tv?2{8$D3%>qSrAFelGz;K?-z zsy*;XA;@uak|MSb!CZ}#W9p;i)Sw@ymq+>q&VXnHvqFn|piq+Xn*$X*$eH;w0UZ^1 z=B;j9pt(mg6Si%~RfxC~9v5zs@Tly;w|xm(6PZTEOxVJ>{E+YDhisibVmaW%y|V>Z zdhs9I%8Lj&Y!8@9uy7%8HQnmND`&UzzVyjnn&uI!p%?fsNPtzqHj1N6J59p5=YafjVlLyG-w z_$6U7_sJeJj7`nmVr;439@VM4c*ZcEJ`XmTbB*Gn;8*Rc$b)i;qR_kf3`r54g~yqk z4YIpg&9%tCAN)AaEEp`}KA1}LN~{d>dEx`kw@zi0K!;@L`VVa1v3}#jEeUeyuZ9@@ zzF${xN$0m4{g)N^hyD#fXw{Q_aN+;h12Cp;E~}F%ZWVy(_|50w4$%KM0X+f5xl~}w z`)!8#wZ_XojsN9T|MhD9ga4W8lQHT;Lc_}_gA?ka)Iy)Pj}S^0gKtsGT{MJcBd#vz ze#XDd-O@R~C)9B+z;3JaMxRnCq|sDvW=G#uUbDe`l{zThAK&y&dG@VLP-%oB-00jt z_T7((zq=fpFa0Fz<6qi<&~URHl3?RRo7?Z&L^L{1f0=_AnDVmvLp1#PzqSJ*lm9aI zE0`xZetIEMUAFykJ?hNEC%VhnuC$BqA8+})JFt0iSUgO8MFWWvcJea;aQje z!%+JP{X6Fg{M>)@`G)RUs0MRFX?aI%);1(v{B0pF7fRlwxQP9_ft#OnFs4=uLmMM> zv@7L2rV!h=SybbNc2r zyoENCt8i);>LNpLjwJLx9E0VVe7#{ zOR#a|-)(aRhF8ozV$I#n#kPc3$Z~A3*Y(G`;v>kKy5hVM1gCTy3_Zu1{Rc44~{GjKE>QKgQH(CA395&AH9!P4#MN^vPqEgAx$v} z%|3UT7tbpT21j6`gU^y=LS(VA!}+_D;5Wl2>*B4O3$()8X(3lsZCwpcKnsYvD_$e< zSFHMcrqQI_ zE$8DlhwRnnD&A|bX3s*(9U^6+xG!^u0&?x`?FYuVzFp#vr|uQl)Zn1r-?HJ0=Nhem z?-fI{J$#Sizqre|B`zk$j_c2W`osIrsu9fHMK`*x&kPnpPNdF$|1x9??kB}~-Xau#ORBbujJO~qA?97Nlj#p4-vl4mB*K>pG9@ji9uB=}l%F=~{!uG)jvg0aY_!J-Y!WdwiB|G0Kb_26{ z<=b~3vH&i^kRDH`fV4*vNY~udARIr>X6?Zn3ZS8CczTpJoTKILk*@RYA?Wf^ezgUj zZs&E}=R3h}=yMChp=}@R<286d&lx&GoNIF?TkdeB#ZLrZu^LxF8+KcP*~w&5v74H5 z{&f3k%}e`lQZW~eOY}%bRnr$P`fONX3|k`1Xxqap44tH#vWTZ&PlU+ueOWJiSObYi zdJohE+H}9cD-Pc0U>auL(~RQVCsGkF;-~k*L~$80^71@V#NV4j>?3C%X0N&JpdlAm z=hLgSNHF5{Zv`#E5s-}Y+T=h>f_ynB4nevhV-6R7W!fa89--XFT{>9Tx6*UIL4rIQ zueZD;QSe?n)`G8fMXud@b~YO;>&*9Kp`A=la4LYF)u|KbH4uET)8$rqe&xq>#AY8D zf8>?a)Om+Nj50ZlVRXMNVKj5k}xFF9W*uV6tLCh%B!OA!r+D8==~gRTTPzyFTzlTcv$e zJ7*Z3RtqUPrAcQsI$L?V(;m8{p5=XfGjQ#c|7tw}JJ!=?dCzL$MVBebwb;;d6n7P5 z7|ff&T8EA`eV7@r!w(7U?Fbl+lbw$>*Iu2JbqRQvRWUUG>pG(UeI1AF99a}N21!{l@*gcdif)m^+TpJk z^cB(LAv*?xSDEy;5ppG5JZpH$LRDA1x3_0MIgVS^`ZefhEqQVind`^Ge)3yZZwFHb zTks`D?rgwEF0wMkVWm+X<}S%S;k2kRtAUtwnwz^1`vK{E!%Ve{o4G$&XIpuZJ!RKq zeFv#5!wZqf>IJ;o$@nOZg3oYNiV_l453X%ufW((8Z8fTRD zmaVk78m@SQYG+E?03>l8x#gDt45;mJ{3udWs15NaEFPJg`QiB*g9?8$TCv-~CA z;Ot{=|Jsgk)&3q50wWrDUo*3K2*C3=_h#wIn*L9QnYyEuO z67n~R>CDlG)Y_Vq0v%Mx=B&}*AOEfL_`U0aZ~oh(3`(Z|iXHrY3I_k`|1gyF|27u{ z{;&VrSGn~IRwa4n@79Ezg$%bgS^e}c3>8nteK0k+7jHOIY66GDy_=i6)Md^SQ$Zj0 zJ@eJ88!fHjH{MLN$PtcRFZ~(MsDPAISdRHB1ZS7YYiLk50K1|OjzObAUc+_>KMm~7 zl{!e-GBCPt0T$YjqU+6c`Wf5^@r=rxB<$8$lj%<^LQ z6<9}xS`jETB(3DKeRub->8~MH!JrT&;73oMo6TX6+K6EOYxb|X>WV6yFaFotc*z$7 z-067Ocb=I6&H-gHYB?SXpO##%V>9sITlzAX0UN7-urr?s-8P6nQ~DIMr{uIrtpGX^ z06~qEMq=jY{G@?Cz?!Czhy7e`lt?Z~RmJ3Q5$A2+zN^ZF*23UD0uC6ab`wD())WCJ5UW?xHErt#{#xCqxd@*IEIHd?qAFS)N|NNh464k?-0S5UU z?=%B(5Ho|PV0H#K@wnO9Ani`h`M|NrP9=};Fd*ujSk<3>`|#WCw?&tmtqjCD??lyC zZmKQybZ6C-bh+}ruMn8&af$*FK?=?V$GriF-LN-XkuW~WPX`^Lm$O80;elC@$;sCkwSh^Zf6LhE$uK684GM~m|E{MokPfez|Pjrtw;ZOn^7AD;A znj-ATARk2^P{~&Xju2Bl)*rd0YvtGy3g`oX;Hnv@*;&eW^%b5;f;FkCF$u zh=#H9V(fWc2_05gv9is8GdDG4JN8?GcJs^|N zT=`X&cK!6TVi~in#kUjG?sFT1pJ|=TEo;j@tZOW(04?Q0>i0gMfZ3%`hN)}P3Qc-B z`Lq2raS8DCan)hb{QS0FD>yzYhi|B()+d8(tHEi{*E7v)YG`n-MQ=va{bjSxz6ncm z4d&u4m;RE>$OEfo z6fY{*aza1O6{zdWO`in@LDOgw{kKy0;iZ8AXhk_e@jm4V*J|zqDuzLcPkAVE!^sJ# z(XYWge*tRFv6!%&9LVW4M>E^i$WI_UaPIr50WCcK-|NCC*w3+~Q{w)ueoJ%oF0ILa zaX6RDN#`t%Mc3`cPN$fLf8a{6BH3VB8hk4m;f2UKBGKanBBH?qKa9dl83|Rgs9g6M z5`i$&H`96a$}yH_6**V<)Mh|{OYfLr%5sRomHKr5+4)nmAXPQoEV2Dx9GYbg-5uHD zRfx+oHsDQ##C62fCeES@TuMjeYo|2jM=sol2ukrRfKW(XEt&kp-qkpP30<=7iw`2~ zU5{f<-mCz596i}bLCAqy+EOWK+IVFTfHXsEzmY)v9Ijv!gJM;ydecrz?9rDuZWI#_ zL%Y$%se$gmVOxXQrOlcw*JZ>*M? z$`q2_2oyuj9Uk7u9hvnnRoWyDNo&JPC2;xi-8gAvi%4n8Zc|w zpPq>LOYE-{Z;`LLx+-FOEjJCGPcGJr%|T57j1SKL{drR5TD;luYr7D{kSNk)n~j=I z#pmgz{neWf<^X>}ww5^<5Dl(@EIi$wdWBTvY3wUh(Rw0acgWmfSH#u1%moQHK<%F@ zohSu^RoF5X3qH_g?}oZ?;q;Rs6eUQnMN)}4T5Kff-AS~fo0!9i>P+tn^_qTlwj(s% zWN>4}@(s%wgT`a!Pd;P5XLnZnGOK`@vuyd~jl}OkN^1xsJ7_4$$2IFeAK)r58EDaF zRe456p&JnFAHwjy$*-Z5!GA7!4L0g&Z!l;>L0}UDwPOT`o zr85iK1tz(uUiXe8Mu#+u^99xOU6fshs!GL>^*hnsH`N9}45AoF(FIUCJf5!(#4C+lw z1USXY{Au1d^Qo^vDEpRpH{+JmPUSPG&bwjlq)*NF1M1Vle#pT8NPoq?dKRp z!7OS2A{han<616D16L=?0QBz}qaZgULLle|&7gXw+i^@|rgWk>qoRv6&%0{*y0B1# z_s^w5HbNd=bCz*`Gt^#c>(Yp!*6^j(FYMiST-SH;G%F83`f#4tb+K*rq+trqOa&=t zahFlcM2nHeEJ(bACPo{Lk%}MO^K3VwWuTISpA7)c6mZn-&xE}nFn6ULa z-wBW9|`@DDA9Q?$J%l2nS8dr*m^!6BnB z26xbYjXEPhP`mhj-%DVngVO@1pKCG z&*zw>jqqp`+wO!V_KUymSR7$4at@(BpXS4B!@YL!%VTq-?hy^xRgkt3g?vq9Vrp;kP*#kG6Ws_KGQzXNN;|wzVS?BBmES; zm>@hLBOhG`j0=Mc_ARh)qgg&r<5Oeyi(S#J`w%IrWD%EdO7T12JhQAe`(1k5lFH5< zh0VvI1-NKF^Sk-S%&3Jdp~BL*q7nD3f~-45PkIa?u76#j)|z9kj-2kiMAz4)oM?cn zWe2Rtz3b7qqn%d|g(id&ixz#vP1o{8Px@pp*7FlZ{H=GH_T|@;(se27zO|BHKxj-B zcq1~Kop$4pfO#}`xY@r-(&+qrvr=09Q1QCdrG27*-8#5Q!~-YibM@K+8n(`Rg+&kS z14f6P2!>F>+3AM;>{l|f8ds$8Sse<0$u)LOB^$7)h%nkIsv<B46c8S!z?`yAId{L|8R&Nu52w!N(>4t+CaX)be^H+GSEbBhFL*X!VoGuO@fLT`5< zN~`}pJL{@%gow)mTE(o@w7LhE3+y|rGBln(DP5`ReX&Dx-J>vYW8m4;BM@_*J(EM5 zxP6>b4df~_JX|cnW=08SEdsj|rfFa92$Jml7mF5xyAo9-qQqQ)QLhv+97G1PhJC6U z;t{*Y@8h+lAHaRm4V8I+mOj&y7r}29a6af=!G|CQ1pymaut!B;*Z))K0Q~YiV{>gm zUZeWBg#6Y!*;p%@lvJkh@mlstUeODE`ias$ruXvr?n`{>7y`+i2mEaA>@2wS7EJW< zQ;(h0Qnh)S`*;lgY`QAgn-nX-D<9BuFxAL@Wcu)6F6~y4Sipqmy;Yv)?nPP6KOV^X zj_yo=6=n?=KlT=fx;$<@VwzUa0Aj4p-*PGa$?0Tfe|qhHP&j()j(Oa)w6k9t@+;?n z!M?frl9ENuSK=DDJ3D$wiZeFP8$X7hx}D_fm%!2JT4JA;eat8{5r^`PY-1I zu!k;!*2RR?E-2^~i`?Z?%Xcvchn@)fDlM&&*{;%Z(r|sq?Vv}2sC#bp?d(G7CxMcM zG?_Nj&LaCtaV!V@6crb}U628!X^#hTwwVQUrQX$Ff^K#{*@F2}^rcsc&TM>{CK3tF z5*8kzgLImLeZ2_fY(1gA{ElU4np1l4UL9D`=u-HH+-A@0JmK3TZuqNlWNH9AGUe1L zWL?T=Ub?TB?*rIxP!Tezx^>v#igCTa7rW8h4XfQ(!mi5>${aSQT?=^bHBEpuC+Y^Xoor}IKRU$Tw5zEQ|H+yA59Qx)5r`d7vpKJu3a z$G)61zyd+C@H!8|tCi)WK;|IcchfEV?jLQ; z__@_prz3t_)jy##`!4>tHV+b^cA@V={&7WQv@$6UdXMnWw%xk$W8Y26_WTI!RZ8Ez znXG?_WUu%A7P@{JV+DCBmH!As8F&8g+BUyfGC8j&3`8JfIlvTlY0H@;H)^}}JA zsi-A6WEp+ZY7eZq>mfqT!^p-h<4zS7?^0+p6-Z(XU2rieWT89=7=D)WmM6h2Y&`Tb zAtd4zVax>jFVzk-fY2$9_V(ESO|*l#prnR{f^iGPJ+iczurauOPjwsc@f~#4xu>r5 z;6;ipr8qrBgoL05I@;byzH@(Cax)MO91Bu*AM(xxzy{TRtNCZt5CCBu{4AjL05Po6 ze@Myoz~MKCytP_9ha=XQ4nPZ=!vO>3yDDNHiv6Pi<=q14Yga=9;tl@yot<0lvZd6? zj|;gmVqNDD&QAQZxhi#Y$CA}xPc2)Hw4s+=+ulv1&rDi(GOupbC8BfEDkC+x@AA+c z$GEpzW41rZ@(_~U2wY(Fv=+}|BnCy(IUtx|RD zY&}8<;q)-OojT8hehy+28#a$ZTh$vf?zZ;**%Z6o^f_T=^k*ze(EOI`rza5WBS#L> zNsq+#^lPcE66eKT#j;J?LD3fl9mEvZu!p(Q-X-Tv{~Fg;A+#nNxYvq^ZAEm_jgEu8mV~yYBu^r8PZ*? z1Butly1A6^R_i);vcN>^`UlJMrc>P^?t)vT-l?GdOpd#VZp2p) z#u|no_eeV>E@=k+QOdcDb~MwSODc8778ev5C>M}U^bhA}_6}5NE?~{jMpNW3hR%IW zP>Zr*r9P(vuI>(oGnQ%T+C2Iek&}I@haN=k-OylA5wM7jc5|7U#3vp{k?tZt+_&;H zbUW{GdFbMr=byT`v7Nyh|LI>CuNve(m!Md`q9zW)QcN*!Q2)S1(PawDWa#SM-1UB7 zpa_NA4hbm+BLa66VDCRI zB9})h7Fso0J(qS{FmC8%#CM+2PB@!%E>0!?f{ii7>eQ5Ycr!G^Tk&OeHw2yB%~&<; zG~?;)gY)&EAW4vUHOHq#g`Mj6lnp}JHPEWf2PU-kQye}Pvjp>MNlX&$xNVRc8R?0^ zz$(58H}dnSt&0g{EPiC4pi&ZX>OV*fXZFhb=qy>W3a!0?a%i2a>ZP($0m+;6Bh4Cr zT?{+m1+k_4^K)$Asl&*3fD3*(jJZE0-YV$&MQ(Fg*WUDD&?C}e%_t<- z&!ly|L>QL(zQRE3*%xd}1AI$P)q2!^rbWtbvrXGr^Ldp^bmC($omOU+om}RKA}NT} zD~)WnsGM%#9Pop^oa?q`*UyYNUSp5Oy&>9F(~Oz52{!j7s=2j3s)crGY~us^jS1#w zQmF|}D{Ci)YyOOoH8K2_mi-gEuF2i_A}-=@^m$Wtd3dOllpSz#P{iyVODUkZo^98n zVrf&){#w22P@*WG-UxJ~c8wiY8!nw$$21z(R=*b;%#6&uYJ*tZYxzuT?4EzQ9A^%m zgQHR%F>HZPx6bMceMYwnZ?BVBsubfiTK8@ZV4HE^MmA1MYA5GH@cK)tb;fQ8<3q=f zJW5|zEHn%D<~fn+K7xx^JlB^U_H}eY)@1=*`_d>*v;272^V(_A0-(ORV_YOFaG7Fn z&)$7tR(?`m`4%pDK)lEkf1}w%R&*^8)d$BCXb{VmYbmZv@0u8sy)#NkQLSs4LGB_8 z;2GDc{G#OA47ExSUnK`NFzQ6G7rsUbRNRR~*S3)_D?cNQZE*#~Yg?IZ&}u`a=dFma z&iA^syj@FoN;kVVLyvxSfg;7&PgBD3_Q8LCSEGLq5r8*FiE>{m!n%53z=(z<=jEmz zf|(v2(Z4y7y@}OH$K6-e@GM+e0wI@!*~bgaP-RA%oD+lk?*YGOd9fqYE&W;dW?GyY zF^eFKt#*MBHaO6r`e|7ZQcK_L*`u~vj*YJX*q0_whZj#cnVmfrK)PK@R&;prRiu+< z$I?)J@B(Crs$YL(P#fS~xPY2B446Px?Yh$r@H<6h(m!bA*r!wPHUT@EXyloDBQs_s ztF?7eZNE}q)^D^k8402Q2Y-s#0t1|3^2JU%@W8FoQd1l$S_6E3^yY8CAuIcBb7wWorH2w}pN9Vl%qcoMm{nnT2ztPaPnJE_8WDHlefB z8~2~Q;lW5pBGyg-;O7=v-tV? zQxNf7`Bd6o#9bZf|_AJ=?2e#+uU@!fBH7yc{=mLkf;6ck12aEPl<8qjzEx zK)b0+R^~`1F_c6qwA`HSa$D>gpZfJr0rqsJFW`Cc!YO=C1A@J18wFI`sGq-sjk4sllN z?K8XuJvwXq$JQ041xo8lMP-{(hMbmWVn#-<8w?S#{ngbi%36Dx@1?3@^#hT%-pEQK z?I=8OP6Eq4WN3EHxPx|H%Y}sUsk=<|JZ8xcCZk475H%ZX-V7a5?p$3xDf#-nwCwlM zDkq6p_>hw>rjQm$$5qZ*C-38(K4EPpO#`8`ZM*`D>r+9_P_hoIg&I;aT8o))mykOp zd#c%>I#4ye-S(D_Z{$+&;vPc8gv4RPY2ws@>pk!w1-7goy1H#Dg* z$ZpcyJ$z_TgpMk5-rbTIgEtJxpX4YZ$0hs?j&VI(t?wyt9HCm=I?M~luK_o?2ih(` zFlR3+oyTs0Kq?U-7#vK2WKr`6REMW2-D*aMdWw6qa<{a9a5!~{wS<6}6dT^!`5`{Q zH{_F-2&$y;7QYrX0qJIbs}2*|+x9+K)gXsF+7un!Mm@Hyb){YlQcv4zwCihE zbD)SzfAe?NLaXAE5+d*8xeH1~<&lx_{xW;p-z#2d?7_e=ir}hREv&;+iO6tJp4ey~ z#!~jYv8}ID;;N~IZ?1X%`QCRrj_nQPrhUW@78e z=eRnZ?1~;g$-VUMb7>2i0m70Vf8{(0ldiDC+bmFCI^iclGv8{_x^&|8D=VpIA%fDZ z$8n2gOt}=U-!~76CkQbwEo@`FPB#@rQ!Wo5EN1v5W^q`}55y z?)2>GA3>a8jhA^cXKjZmIB|Qe8>v5n&pRuA(D$8CM9*Nej2j4yH3M3*mU}IEZks1x z?Fs&_hW-A4C*5Ql9Y4mKufI@ZxP0RTc+Y95i=){Ivnq1n6?A9IA&D%k`q8G41*2^_ z&ml9<@OQ%3x51bgZauZ5z)e>bSGO);KCY%zl9QkwOr@w@21ZQAhQkK@0%Z$L46atTa;_zp6LarCJ z_c7!Cu$+)x6u(RlgMRscF!$b3O?~UyC^l>q6%|1N6=_nXNN>_R0)li4y>|!@f})@z zNbe9j(xru76qOQs?*S!V@lTq&4u|2d68d=Q~(lfWK zdpG~3otv}b_+}xCEM8OP?GIfJjPEkxYfMO$71x|C z{Iu@Fs0CM}B=~bVC|sNF4;72#$#v~hxsGh<=hRQ}|9HqFU3hVSggviyXoR+8T#i%q zoHm3m+wm)AD}CRpE=ATlm%!vcc$vOm;WOo4a=TPEpT3 z-vz%ls*P^*hg0LSXiAkBYT`t0ut1~665C`tYbUzu=6txK^AuVKIHry~U>|4ct~~j> zrB#mo9;eCkz?dwz_7>Dtoc@uS&AJP$pe8j>KY!@zxB#0~l-2s)z7<(07>`xE4M1b= zYD8vbIU+IFP~vfSqfS%QaiZRhn(5psoPOCz|B&9T&?ecLV1FWm;Ctb=2b|OgfGDv9 zJF#U7_0K2aT>yHBbtL(s-Sptf4w!W?*tNkoi%XQ;P;L#PU^=u`=lTihsidqckKdU6 zxo8rzow{RF(%(oFaBkT+>#6sVL3e_Vi8Kras!8kQIAsP4sxrSob9UsG#qH+|m3 zVOZ0Vl~(RX^bKa6>|S>*W;2OrJ4kP+Z0ll(;ovSI+%G_Be!K^H7Cq!@6t=0DErfNw zn;%7Wkt65TKh63tHb83nn?KIU?Ok0STLlGx{`24G^Bu`FYEP*o3Zw`!K0e+q0Tnf! zH2Q_hIF$QuDjs95c*k~ra^zbE$v4p9>fC)Hb?4t?zrQFY3@2m$i&v};>$y~`309QL zS;c=?l)xkVC6;s@G{EIR;hFQ;_{%Z#V}HO2|9=@eA6fpUvi=eE{yLYezuFA&oz%I1 zkdXhiKBT?8C6KJ7a*CF!AgxL#Cd#r17`kIXUjazi=AW`w*gDasOCBJOb7t861!+m5?isRw+yD_9)$Nl&)kA8C5TBQWXiX^_T0dH+in?n&U+r7D zuvLuq0|S`dy+y&5wOVY+QEV$1+U6`64|e}TN~%f!NKu= zDSQv^qv@g9tk{osafY8qYq-_tz&-Mg>d+c@@w?v1Z#S=MR26K;1AkQZwS!>J zekb;jbv!>2^k$n$e7iShY|p58gsw}>YnU%pwjj*3gnyPQx;YSq#XS#=-iGdU`%6|f z!b@-qhXf*>c=6&^$>eLiE*HL@p&c+yFLf!Dx{&2Wu1v8gccTgO4>Kkj)&(FU^6?YL&3BZ)QB&m||;YYdx_~kI<3v6w^`GHyPdd z(rvf;0qD5yCjkx--02pUaq7U%< ze5pS7eSfY`lNqMSv@Cf+xpdQAzhkn*aQqQ5L`@xY7Gh1;FMoeM-| z^y1}kj=iSA>D`LyF7Kf+MWJ;H8*{N!dC~cHKp*b_Ps!(@%XnV7vsLUux6!BQ$wk~} z`LVSE?{~sq&FqLUE-S)<2Jc7>Hm)>*0mV9F??%aXwcyk>dl0r_Q2s>^4kxr2RdVEsJvvpye9G|I@Rn$h z;L|TTYhI_MWI^C;^Oa92yUEZlVaVp?>~~)9(3hmPLj}&mo51O~);{m!uDZ~MEVa?P z`Q;DCFZ716c#n}(I@lbkQL&IN8SxxT2?jn3M>|!&eE)S@;#x+{XDv@XV)s;i)2L1n{WMaGOS&uQc#r6_b(8jah>*=tmv|BO;qRjJ$Mjye2%dMzDfs0_@Bfmj=scraasx%O zi;K&?wg;lCEV}tA#8xmZn96sSt!hbq+i4tSN>beZ{3Aha zS^{IrB@~%CBdf{6m?#&#i@l%{B$AO2V2ih zDb}N~O~V~N##~OHR(=Eey(O{>ZzCm*p(%6-e>F5pNa=ZQm1z4tSOTW7v{CMAghJDs z26gm{V0=!Kc|9N{_vU@(Bqt{t=#lM%?1Apk+Fp(KQ6E!J=+rK>5vVS+)hpu~E0Ott zp0_{0`iZi>NW?6$fx^??4PGa~a(6qyN`Ft4Ufi@$!|K2dM$TJ>dxL8jUI}+XUs}D9 z5uJlhJtkN$*gPm%?8C8ba&EGy+~Jfn(MK{i4KVh%dJ3*%p|nbw_k-tMv#^6`59?{5 zWnL4&dZMV;s%kh5L>Y=+9vY^^$6GJ3v9VeB30J;PR>gw2G5S3Hj8|w71Am7g0?I3;iI3WNfU$_DL=}|aQKnv5OIXgt71Wv_ zJ?3}DkcOu##c(5OEoZM39g47tr_>f~-*7X<8Mzgq7a9c1{k&C;u?W3IVJkYgx6Q{! zPWM{F73L zlZHVh^RwAOWs2Q1pJNWieRkJl8FD%6FcrS_Ah;(vNR-;R*xjwzUMOufe;c~C0Y0K@ z?n7;c4LGAZbpAXBp?EtwXWk0ZJB6{QPM)~$T)pFj9DEMJ^_HIhaX9R~cy9u+iI7`_ zEKbyG)Vl{)bZ&}Ra;hN73LP_N1BZ%JuWX}S4m{tegGs-{N*gCq?oajv>!mO5PpdF> zuAc2}ZTDO|2YStuYa=Z%KTADJ_qPrRxWsC8B_*ZoIvHtZ%G}WlD4V^6(op3O8M=)(u`f7&A1+)WB6NRO`qwr z)F^jwuZDb=Un~=Mde)yR?-I+^m+8#NH#v}2zr6+}UW9yCeAGkFx3rejGyhiIYo7dP!v@;amwzwBl5@xZo-m1m8sOiZaU+pBcB@r8&hAjD zMrsiK<)~pCiNnqa~wB zK~~tzD+2|uZ3mBenv6$vbL`R_RD-pXLV2z4TVpXj_k=f=$I2k3QnfP^vbU7eu`!u8 zH|2vfCYIEjTSM!cJH8ocOfIaUIh*a_l#)NC42;GmOkvzup9*>h`KZKOJM-^p4p)1Z zQwg=JbT!2(K`CV>rzfv^r-YB)EZ*IuS3rBZW0~O^i3^f?#_0O{y~~Sh7zD(M?pPDJ z3Ub|3DD#1y%MgkBy6x*u@pcT()pjsMwHQiF;kyK%hRI{ypDhB$JXLXSUY?QAQ@<`? z=xMbC{%}ebjqt0Sh6yvRZeCm!t}W{LWteHaeT{@YG=amkVZzQ;beEc2|L)cTcbH@2 z!F{`RnSitPK06Tra!rI*6li5B$3N+G?G|TW6)hLUxNA-MOY<940(+kXoU!}hU^WNt z8r*N!R7p{hhX5AASP(cFt`Yh^_VW7vp$3mI{4Js zPZu_BB4SNYkJOXvhQAg@I`}|49#_}ckAFhbs?Y(LpR>AL?tEE2!Pv8Hq~!U_mjNWH zXEtv*UZseB_U+v%H5t%TC!P#?515OFT1@d-JC}zPRkjLdH459x-O_z zuQ|f_2ur)brX#^VjXy3G>l$#1)>jx?x3&NIHhE7~c^%wuk1gBZf2h-Ee|azuE#g;)YGi zEQ#D73(MRhiN|5b{2%B?_K8Maqwn4d9$=(kR##2OP0z+n=8vV{$)d_4vOT5|wDkhF*!M zS+;LCBRbiOOpK^W=7$odZhp%u zHS7B>^*z{#_ENzjOQd=E=&l>Ft&0%!W@10o&dr3{?P@RF$5r-Si_W;a{^TxdhKiRUH4AZ z*-H@H*mi%XEBI5rrm)VYxif|Cl1*=RSA!o`OD?8&Lwj$Hc8Op(w%#*LF6?bf67R`W zTYr)YV5cqU^?#+lXGBf@bxsb2p_sgCE50Kx@_xMaBIADdr(W+v#HOHjcim#iwva-=&FxM_hy=uXm)2r zo3#C~kqBh0ZG0g+iQyX8ubaz1y$edJhS7~ZP40R1EyaiIc%iim=EKH5AxmE=v*sK4 zZOX~K(i=yMEk6)4b#k?sN%)@4DN>a?A$y)SZGR@VLlN&On6jG-jSq*BYB3r@v{p_* z^!-ZJ^IyRutg+tphB$1}aoYdb=3HdJLHFWYc{ux=`1hlmQQWf=v0*W5z64K7saxLcObrg;QrYq&*7yIyFNO32nOH$S5)!T<6_IopYlI__PN_`n7EB92z zQ7SO67Cp;;`Gb`h|6AwnEVLFqprjG~5+X*1A<>kl#_qOPv<@zeg+gWJ8Q$JMDwO1q@CMygn-=n_?*nlIQ)#Fsw)3hRh1AQOCo-QQ<$upg-fQo89-^BL*6lFF}A?N~&e?*>$_9%}W08F86ahU$@qv z;8Q}WggT^b3u8&4^zI=>sXP7*a_1u`owm-BPO&I7Ydu}r4o$IK=kUVlhF>?Ni+mpm zMaHyt!r`|WSYjg`P2nuDWP9>~s;c3)7#CWZps*OnZb`kVM&ZDYoYykuA1M^jeQARd zpOD^N8b-8rlVedevU4v_605o6!bN9Wxb?<4!<3}Ed4Kh`;J~MQF3t%rsK<;Ak4SYR zmr8fLSMN8ug1rKJ;e?oU_Z%BD9sj3KP9Fyr2OcjZrZp$1pnh$SFVH*X@Ti+*D~A@6 z#7|GV8cw5CX4M7u=U-E-#so|BD>y{cb~Vf#X9`k2AvWB|!dnh|j#sI7HD6D?6Mvw2 zV#(L}%95`FRs4Z!1lghOm0C~wBoSt^^W_gq5+bvj_u6)8gu8@`VG1$)I6ETYPGtD3 zPtn6vsHIZ5YDy2HR!58K+IvurADzPE<SPzDsg#4_+5u2vHpAKwFM#@%L-gQ|MtrN*?WaQ+_I~^ ztm%B<=y8_irK#Vce#4OfER5_Z1 z2}V>ch$7mg1x`oSgX%;ZhwnAEC)_|+u3=3ZZ0xd1%8?# z#uYOh`z`ot{LYoTI#Iki(c!0)cR)ZHZ;KXeWs388OK3Pqw&I5$q||#O2knbX3_pax z^$NnyQhjfm{eW{__DwKOgq`XwQtGM~wUUD6sA=3^bsd((hR1M5ZrbSyz^23?JJG$o z+e^eq7iZ^97!l`Iv@}XW2 zK^C1}u4YNP*v>XzsXJ0vp9hw*?No$HDsGI?FKdVjVu0|kKz;bH3{-R=0q57eH8NnX zA*DW3Jz2zKHLV{*02yg`Y~ssoT=tZsAhCY->7Zw?C#rq%A$L4Mr?K{&mNb#GyQ71D zD=O+TpX80VZ{J$bqkW4m|83x1S90fR9>Tw1l6-=rs3jy-HJYkSr&jr9hz3iFQZjtl43S;=hJ_k>NmV?^A$T&8d_Y=Z7PHvJp>bCEK0^LnPSVDzA5U;z5O!;G`M z^)q#iKz|ca>Xr+Ev5F&xW{P3;69edP7rEPj%hA)yg%6||L&c_!FDY#Lv(+}oiyISm zOvZABw{tDcno?QjBP=@21{U>HKPg*_Px<;JEiHoE-TH91Z^uBR5H5Hj?by_?sm~*u zfsePaFd;dK#QO(vr@R{C4y%3l;2IsJq&eF+&fjL$ys+wR5 zByoU6^KK-2X6Y7=StKf}7;@k7HVg`Dx5wauSPe} zpQ4{;v-tl`qIHbP zZE_Rc0M)9OCucKlsO#hy=dQCy2Vn zo-A_M?8a*w1e2E!BwIvjtX0(qk7ggcT6~E~Me*4)M*X@)(XG7}hM4&2mqp#h9m(;` zR%z(Vo!CZO-8QaBrgZxseeYR1FZb3=xq5m=8fV3yCgM7@Hz&%v!x_*?+8QyOgsE~3U*EbYHtp{P!yO^nYTV)HxmC94Gwugiv`{pc_ zn32A3W^6W}9$|{jZIa84>%KslclHl)jl~__#uDNGAZq9QDe|+Oldeb>hh-wUB8R`f z7iflAH^~oUb~OQQlKTb#9jD9!=Q_=vvQBXC?hLcj?HXmhO ztr|@G^7+eUI=C*!HgYY24j$Xx@x`hYOU`L8!=1!!&?-CA0IMOz3EGBqOq$>0uO{~&0;-qym9$O~}nTd|ck_JLIW zGhOnH`+3%IreNyCo2jJCZkrYs)+9E|18fUkj&(Z-HklxzR!)-dJF&gTrq#FxdS1(} zVGH9sLE}Xtbtouqf|Kg|he-9xsRhb6ayEK9`L0R8dk|TT9*Twf;1bA6_DAL?@+A+p zBkd+@9v${>T!lckSzU{5cjHO@zv!2my|pge>au+@d@>2}5I09=p`8bwz2B$_l7ci{ zmeX%v1k5FQ@2E;y_e|dc&nxf@=Wg7#q^zER+9vtcoPA8@anRkhH<5*WhdLlRFKZz;k*7-_+{JYb3@}IiK|6UaHURNx9)C2 zweZD%-IG#a&yt-zH+HtLv1XWJT~Gc4@8|2r#pCtc!#l-wyklm|NzUJCT*j=;=enV= zF|rhnvI5M5B_2Hy4$$jrB<`B_e=ce?!+BH@4++=>J^UCXkFJi{N+&&&CQ!}VUqMuD zhkBO*Siuw+;S=v*`cq{+GKdKkojUsKFkdMn|C!pviV0OM3t6ZMUgaFjQ- zy&8;2i^=7ek>m5>k9@Wj)44$VD&rUhlp>P!tN@8#zi>+8qpY1i^#cHys(8G@)lyU% z3v8iB(I#Qq>f&R{gXZ@1GB;jm24ix}hi;d?yaV&|Hyek$+ zzT*%>{+SjD+t8JJTN9~09`3lwa_0=1cWW=E>gRwsO<)*{D@S#@_jz#X6(uG4eP7x& zmY_Xj?XvMr-DiS@c(Br+nnt~I7`%<|A$f0tmJzlPa)8W?HT$4!MPs{;eO>T+Jp=^2{P4ZEp+Y4B(AvFAR4-JlN{u8x8Sv z$J|A67+LK)zb2?I3pW9m-`{P3CQ12;(zQ`^9K{j~DH$)_G_ejR(chMfnVj|qCLH~4 zyN8(GmiZ38Zhp*m>;~=o-qbMlEaljUswx+YL>1BE$y9%j%eEKff|y+4_UUwM-Z$tR zmf*Mvc0dWbM*!o4iIWlh8BzfhqRF6QWHiy;-;QisUmPSHgE333j#;+XxMMm>-28Th z(Q!LL%9zK6-U3^`w+l1W9V}kN4n4#WfNHG$6#4apVSHBefH9ygjvPkf@nS}#8qlPGA<8-I1I*QDCzihiR*;b_q@a5?k# z_)Mcb5@5SaIoX_hVn07cab3Yz-=lriU%)CJnt}x0F&!0c#V@V&==!kVcj;8u6!_@paO#mt@dbcZs3?(V-z={*pMPF zx^m$qZPT7YODM0;t{x~AQ6m)+-f-KSvv}%2m92%?v5I3??nViA@Ajh6R>|%~-51a0 zJoxsm@6*g{Uf-{ZM9U(Z3Y${<@%vPZ{g|w7>CL_;tvkc0C!vzSLp?QZkY6fh7(J^Q zN~2b_+hcjF8dpEnTq7P+^LndoAlId{VmQ7ax&6_X({ELxgdWwnDcz^h*%R)6zEtK; z58Zc;7qGSHIk>dOx8!H~*JF)D^9lcxjAP(_BG?u;*e&dhk?|B9FZOJPGR1we$Y+YLf9rzYD~s zH7s={Wk|0)yxMi4b#k({T^OChe)jCyQtzF+d;=rmz_oXGaOF01y58dfYHI$zc8Wy5 z9ACipC^a66c-NPzP1qF#&movuptg@oj}+D1xg22inn?D-bvfB~cnTZ=QbK8KK4{JvGP zfMR;FDQxG8a9cIHUf*jE5Bd37Vu9BBey|0qYS;)HTPML#azmSs_+U^N!-3wy`Y?ac ztJ<~dEzP1qs9^=_5qBlw#>Ihe-!ACOipcrgk0EWW*w-_q;RMR*d-lZrG9n9@Xx)Qf z(JO$rQ9UXNnBsB27*=8*tW&V!!}@!+C*=GJ^TlZxf?mt)M)p)&h%T0PO)9~z6h~5s z&URI78K6a&n3&=>Ddhgr85+7QQa|=l?5@(#xC{>3uO?6>N-&sz-iIvEi2BD`3@l!7 z{jiUDNYx?TtJ4ERPOcRGTdPM+ZMk6f$Lo^hO`dhX%9(YNi&h@N65R@X!6`R{q(t1R z-jYy;((*!n?Rrw-7yiOCM=j#CX4s!}1MpLS#($?%Ui`^^|Hs%qz(NA z>`=D~E`Ga9wmKIodUT&a4l49kW1gcwOxBvWPD?NBA0zqvua;_h|2$XNJ;ypWI>#lm zqvHz711NN(3VwS2^$d6WYibj#g}oZtx0kePRIO=v z7L_1ds~ZbxsN8(LL|oEv>WlZZ2g*fzOU~J~|2a0d-FP_bj>aT24y=05(6D`>c0>p{JDJ6)w`c!lk7Yl^s!8R!JE zFm!Fqj0&bfBE)Ijeef*E$CFU)KGJgreiguYg-@Cm(eF=aX8pI9;G-0~o78h5i>c^9YTQ71aY&D?Q z)|ew(J0Ez1jikd583T13lSk5nK4BB=Gp%v=ijiL&ueO&FapeW3mAWa5sNs{oyu7>} zKIL@^^nRKM`*EB0{^yNCzHw|a$U#?9f2w1DN8;0GMCYTl=kQOP=ijl9DYo}z@xrEz za&-%9-b1(Sb06g+IP~jU*Jv~W+4gO*zBXum6ASbsmsd<3n5!>IM!VCbQ6irvWNFI+HbUs?uSu4`=z8u5yy!N;Ar-Wl6a6De zUAiP{Q^J{_?d>V!6#Ao#&yVC=$K`n-h#P;&$$0OsETZU$3`|-;eR5)-t z){C1I)$fV`tnEYRUcmw32%J!*@xiS`hg^s5obaFhhkFke1yfMtvf0Lhw9ZMkFd^1G zd+oco#Nwh?S;T9*pbAh$xIRN3WJ|>yc%w6GXM+#%%Gk)Flf4GnHC8iIeDRyifY0IRq}!Vva=jA)xHJiSu_5g2pm4i4PRlQ33hw%6F*{zC zUt3f*etetX?$;2MW)$ys?Jnd#!l_h%243w(~0TVkZi6S+F??T;gRMOM{rqM61uLCgnIsSgJ%=~vvL__YL0gU*h)O$03M2RJSB@K+qANdh>^lI@$MhHC89rV9U9-X{9&&m_RmwD>4O zH>DPo2=t$IkfE?)7VVsNfngI%-j{dv-X`T{b~EG|RllQYP_rLduLYaHpcw27iMr0e zj(25Kx6mATd%K|N+BO#%DUT|k)tDz)DzPy~t&VEKfeS0YSATZrBi_|UxRS^2F)$h3 zd!Nhz?AX?rn9pac#F~u)OLw=b4N^Qv!I=jL1y6GwXp2<6aVxi=YgkUTWb@8}vyT8I zHb478BBHj|Q{ZzJXya}w!KypNv=_U^Yg?~7z7MAmoU{up+Omm@W6h8c<>^=IB1DnC zJc4Zj@*wMhZRf}EW6+=|n?us@b?`y>PvlL8tac)tB;fbeog&JP}eJIh@igb5%-A9UevUKwID8b2pbWH~JW1^y>%-TgS(+G4U zRE}L4CR)V$&-Nby&tP|&TWIu*0=C8@6(pMcfOE9jp=$aGJjK3sP%1oomLA{o4WFVX z|A%`7-cagaPmZRiZ2F~{`=E?&`*F-a<8N@vfBq*x>i?gRdw|2b^xrE7Uf|uohd#(% z_`3yxr`YW`e=Gd|IF|ntZ=+cfKv8RS=lAmJRTTeP-ln&=ji`ZFkEmx(Qqm2+Kg*kQ z;xt7Z8%Q~jL^Z-17AX-C&lZ9h@7?R|nEmmiBT4li`||&%b;XDCs;(_c8kqQfQ}5o5 zYJg{shx}R}5)!9vAl{cYLVeFzU*XfH?(IaZlevYpmdVcNQ7xdK>^&USDUO=ep;+(Wj zWqq~IRqhQn#^PeLVR~b7ABNiJCrUm}?6Too_q-n7R2n3-T)@V6Odp z*KR6tv9q3Y64L0%ARbs|2cxm_yJGE^m17>WA!#laMqy-<(%bq7%|2Ex#DQqqg3ta3a1`+}tMIIu_lIugxXy z4#H-qgryhA>%PDrQvIwf?Q1M{7)>EFiag*G_|yqEo|}{mY-~|K@THLmKWxBw9&+@8}CTvbcm|646n)$~ZSiB_j>!#Nx&Uzul zv-#Xr=vrZ)(xg_qCzxtIs`}v`s~hcjvP$>H)8$(k5qBV>`S-iS_1%kk8lyt?#V`Dv zAeG36K!Hg<>sU;udbDn=&N)1;jL|%9qC|^$xP5%I~TXfljTJBTdeq+sMBFBm4rFb)#m&~0dnJ~P}n$BvAjx`gsJ#(iswX?S?X zPTx=6$JClHxWi|eB0~C*;l*pwqfu$970^$9tZS}_f0~e25$WJ=*?!~T0|yLUL?Jh` zbjCqcaiP%2o+yLJ+QwQDW%3Oo%JVRWVs6P=(k3EYWTbivd?JSa%fCSlYoqB%P7-f9P&NA9>>Jk^< ztrS+&i5K04xUzF3O&dsjZB=Q-ouv=gwoy&bhzA9R78+;vuMgpgnfEz6Bk+|KWMN!u zJsf5L9Vg2&_w~7?VYSaMHluKHn7LV)abf74awinE zk*U3*ARlWC41Kz?Qn5Mogsj#inq|}RGFXVq(36lbM{;fzp2i;ESJaBe^`idLK$Ea>d)t5H$7Trb!DvWU)C@2 zvQ)UI&Sr-}0Y>ChkO|}cE@`G8`CYGd8sh3oKB~)V6{BL~NvQNOx_HLL%A)6*(kDr& z-j$=?Z(0_J5b?2IukUnRW0}>){Pas^wN!i%e3lmxCPv8CDm)o4=#&Jzc4qob-hjd3 zPTv;qc5cqfc0^sm%7NPQM%zgr)OD8Jvr6~Fw5uAx6&CVvQ+&Q*_GRxl>)BmYPC|%; zGlIbVXmXfhID3?R>o|?%o+{j^xkBzaZy;%#7cO2fF{gdR`K%U8d)UV%j8>N17n%lY zytoMmMVfl=0axzU1kPuS>s?^1d(2ylRx7wUmi&@)_fd3{5XI4Fbjot`B)wN&;}7`s z(!@?keR3+Le+6N;y(~iy`DVLm$7=jp*oZ>IwYa;URXe+qB=k~;5O~`x-p=-ur%~P= zqaO>)m$!dy(NQ$%9TbBL=>1NWl$(4zG_k{!QHSi4X|GQ!+ZYR8&q@Y9Vt`S|)fw6!MqaWb)S zi{VpoYR1HY~a&2?L^mhld}0=j#U5OS9|}lY`=?2|BPq-1@Nrqg5=#RM(3G1bBuqj9AG{k z{duP8@>QgsQprC}eg{rhy>!!Nv z9HUiBTNr94D#yl|rD-&0LNhQgOI3$sU<67q}ioU zk*m@pEaW%B-lt!g%+$G>_k>_pI>3Wn9dAOs)!B^RajSDvR4Q{P7gqne`6Yj9*(k?> zNiOf_m?*Aq!#zg)@vg>6k(-QC*#MQcQ7LPe=Ivl@y;rs$kRSCpDh za+X$vra8Q$^w?E$A@`4K4O8s7UAwwn8?J+L0WyY@Pr{mOISV2-!z8Pojc0}!Cc5<9 zEvYKZA7U}os{Dz#{Azhn-I)S!dGqEk+B^O49!1vq-JO%Cq}r7pxNF>$2~u?pV(Cx& zE;gpeZ63SHo#yQ%^%3>8Da?F9h?aPQOw65_Sas@{?Z!2|dfA&oJ2KwW2OqLj zB-(z17Tn{(tYZC~&nXk# zlfsuRt_kL-QmveY=z`=f5`U`ezk9KZi=V7VT`(s#NZU5;UGhcA#uhj%W2F!sFR>@$ z#b|x4iOr!>Vb3uJki*lpN!$sAjGx`t^Ryn&I!>~8=e*&b{iqCCy1BP^*?O?4GWhJt z&XLDAk5QW@dcnmnzqMSvZ>WH};3?ueArHcdm%sGbAD#MxEC06bmmb<(I9d+r-qZV- zPtQ$c9Ja*wVV^VSU2?Cd=DH-oh-F2m%u@G$@2o53ln+AGb4yq3r1SXkmaTIAvxpeanwp} zZXF91%h#cbzNaI{Ad5?7nbpQuyr&ve84GJuf+$X*Ge%_`4(eCO8`PMV!b)W_%dox` zhuwOfIP$1M^oV;IuEvTqypq1@EzAG7ryLt9)VGg4I?;T03%Xi2H**V%1cPJ{&!*{@}K$if4vj&lGKSP3E$KC{s|gp%qCXzqB_;>-T@6NB(bi&0nwlZ?M4s z@@=GKgRgQ%fC04*#SNh+!?KlbOImmW$}z@v%!CsF!U)@ABu(MKIQaLmhK*D@!neUZ zM@gs*0RvJQxg*H|j@65{2?Ef~&XQ)lHQps&*w*6fs);CoXdiNiM8$9#w2MYgMe}uw z^*ey)m%@Yp($t>=xH9kRrC)C$^zTxtjc#{fnXs#o5bYv`)&~zmWIT4*+_G<;y|`v9 z%Cp@1rullLhVtukS2ArY9V{l5Sd#AmAW>k8aRx|{%mJsVkNB1))2uB5aJzb+3>?(^ zAVXHiRcbv}R}4rI!{gCc`p_>< z&n;P|gzxQiM*^GnN`SqyTfipKG3v>xJ@NrUn4!W*5NxRMJ;cZG?xP|O0BS_YhtS5` zHwV@~naT)k6uPbF^!@tDu}@C}wyUrvN(~1Tc$*>Bcu~)y31@V&OSd>K0qQmmWXBzZ z!_8Ra+_#I2s)SI;fdC$ex-(Vdd0l2hR@F%I0ibCiNkUS$jom)Npc_#>U|cYY&IDHS z9xA==cLK!zYQ{8Mt(i3n59iMZ$FA(#qCjAVJ2hsD89|qw!4h+x ztW1vRLk+Sp>Ok^X9Pz+WztpQ_An%ci31mmWx;Oo`*ugd*?`BqPM*~=nFk|&($%B=~ z&E2Yv&3+B!{CsbQswOBxxdofboSR9}*j84E^G_c9?zrQs?yJACZmD6tE3~+HvAy^7 zo$I~RZQseS&*M=2W`KcN>ei-JJr`k-En~MfA-q|MaSY?5y42wYpzO9y23V9Nalb!m zn3qinm|e43COHSjI|63KC_+OymW`1~ISS1Cg}<2%eHAep4-uTQYVR}EgZnr@wWr!x z;C6nGjOu>2X_e}*v4KH+fqt31-@!b!lDhhR0>FRu9ICS-&uZFF)(pmwl1MrEqfI|Z zFjE^jy&$9Kjgr!!|6A5x=1njzGqZjdPY)*kRBv+i%VO>fDDfPN0CpPswGM?eE}Y`x z#vmq@m2v_#&Ty^oX1GU8b@Rv-$=oWMADz)Nb(Srm$-9pZljow)I|OXwc-9kOIu&g* zn6EOJ_aY64)cg44rH%v1ITHUK5{;$4tj@i%E|K8>I0V{(T+OtX@opdQllLrc+3~wt z;y)nGH`3)?JSNLJFId-TfL!xVP3v6Sp}ib1k-6e((G{*$>jB_s>&Uik=hcyhNi+N+ zo`mEAThr|A9;&~Xz5fIGG9$2+tii$PrNg^(0uP)(%-W;cBDP~2<8FphgnKBJsQ|ha zwiSoUi94VM;gW$$!E#HySxf@%6?P+^q<`&SSKkBJv{iU#xvk21Ru$0=QefsMJz3i3 zV=E)T-^c4gJ(gE@T#W0u_&@wBRx|kz^h`kax|aiT9Ht6BeE1N{*R2|M;&f@2bO5P^ zF#z+Kgz+BM6PYCwp4j?`fzsEiNkX5+s9CPkItedjMrOL_Bj>leb4Dvp$?$mqMB6f^ zxOSJeTD&^A+%Eo(aYUqA{V||6IWTlutr!NCK^1=w-~P9YTE!;fwWN6?(wE0un(e}2QH~40=bGSuQ|SGtn!vSl?$JLp z%Ky!FNM|LrnTz@?%{W5wTl=HcUkAl%9*^~|2rl&sNDUVqyHQ6bK4Ppoy7mRtbdMEuWj1!N${Nz{qN%H*T1gMB!GXK z_WJK+stUcK`ZDvYS9ax0bl*qbD)Shj4q}65*V!ZcL?(pHvgf$))R0dlqeb(TjJ%oVXj?(C$we~Hp8!WEa zay;Kz4w;~Svr#;L%ap=-$S8q1L*ea&V0Q7qenEhk$Y7mz!nT*pUWLoyqx5(&lwkOH z@;qJH_qKG}jneg6uchIv6h{ROVe6DVYbf^G|HasQM>VxYZNDgrjiRC=y(x$^rFTR` zdRLJemEMsOqy!WMtbp_uLPrpY(rXY<=?OjbfRq3s2@oKLK)4&nf{sDYWN7({M;y5dkpNZr(QgoHMmt7AhA*f*s{vtyd# zjMGTNwG@MbiN;jN>MOVk7FSqYwVmmRQdO+&UDGT747U^2;&ie9H)XxV<*ffPyPPsD z=pD)aSfFc<8u2Tws(s>W(gmWuaRht%1C8tL5%;v$h+b$Hm3!UDtsNnq{9}xuTh6&Mfn;2~Q2xGVGDP6qlA1FF)R32;(;@+eiFoT& zQFwbL!SI(d*lW=eofGzwp9Wp~`}XQ2Y;Ocs*I{oj+v#SmGjp;n?H5U0 zY7jPwDN)L@(fRwy2n$50bZP3Zs(Y4***z;xoz&G>#=67|aEqSmVk_F0EIjO4ysDIw z(*0+IKvRO;zV(o>;lH0D<(M_2W^|FkZeG%FBIHY9CIs`_mHyg}kukP{>1Ch6RX*|c z(#L7vyUu@l)D4aTZ3i=mCC&p)DN%qnTxc7Eims_L$bwp&^3n{-3C#IY4mAA=e>RUIFC>dsJ@ft)&KvyB?vbcafR+UU-#AjXWE3%9;s-wpUsEvO#}YB&}C#>|*0qrUa5F~v+s zC@>W~x*b)8*_m0Y4U%?@t({m_1f~f(Y<1=mw=MVT()grhPhWIruSk088)N?HQ0Iae zcAs~{ze~2ctg5SLRLCTW)^G6X6@6qcFS$@%!F+Wu)nPM1ErHm^*heYoaWhu6t~nFP zB9^#G&sq>JrcsdZK%70Ov`6!Tdpfz4z4WKh4_rwE;FgK8D&o<6MfpEN7D=qY6K+rZ$s`H_wplrqMs=t6ky7 zMGQT%_&hZ3EW3(##Ps|O8dVbG*_z|GL;OM{*CryssO}KS*G;jXkm^2t8v(V=XvmLS z##2F24ZKjP7A$+0#JN^)xN*vo9Z@H6Qov_68|O$q(_=uIM$JlXJ!Dg#NfBekG9`#Y z@q4tn#uKkwSm>@Q{g^nl>HSCQ@vmu7!}UEI|IbqL!&<_JChm5vT~jl|i%v}_Y5e+{ z&zgMVA5&mGS(RR*KXbzDnJMuZ=%q_1*>$Lo!6%8ibr}xp7kg)EfIX@LkLUz3LXK%R zuHoO@E7h(key;ME{eD~EK)})co@st;_19NXX`VLXqy+fawoJ_R0K15hZ*8X^mOP43 ze|*7!j2A198;56To*0$pgV>f<>nL;}%$#*1I75fXBjpR-*`?P4*4`CVoKwsE?0B`; z;SW^6dnZgsYIofjK~g6y#-&p9>PB8YRsMS5F)+St0b|R5!=~y7lwcK$mBnXnJgiT!g@})b}%_A;%;=Omh#wk#7v%3C( zgWMX~U(*%pLEn877#Yf9=x>h%bSr#P=IrKUciA0u|BdSLt4M9Kn^Ktn_#N{)h~8q# zw+6pc1!osV`o2eQrBtZ}FYC_P&|@uh6DHsE?fn`vj$8_WU|M?b+srqx$qY+xE8SN* zeA0j`bBD@tNaUeHXp006X^{>s}RN+m@%I|8K z!p*@$71|l08$Ea5wkibP(W-J%+hr+UPTHO571-S6o#NojIQ(W{_&)Xhda7g1pI;hO ztbW=5yh?F=EL*oM80tJ14@b)nEylbJ;-?xJqP>R8;(|&LHXNhvi8~jPAQ$h^UooO& zGxvV(cpGJ}RBA?_uAFJ1U+OJ#hh7_e`#btriqb7bw^P=y&XgBBufQ^c8mg&z{zD2*obuEq0DT*Y;> zbF#*4m0jq`S}x#6^Ck=XHvt1{Qlh)udXg7>|5>r2R8aWyCg;JxdUmCt7Gz>S^8k^L z`<-dbODj3$Mdi;6bQcbohZt2i8D&=n)_FG>r_!u@b3U{K13AA_X07QWq+i#mt>=hW zu}pc<*zjMYP}T?p?}5ypCshx9@!0M@bJ}`LEi%v{`;`wibRDau-XuOvRP^K|hw#hj z4^Y%rQ`XN-yIB`adNev#nHP>;H|qWIz=DYe-VOIo^SGlAN2_2t(#UdSV$eJB;~@3n z-7`)i;8%V-*)S(gp}sWxNnN;YyJI5?7_Cc~s57njv#(6c@uP3AQ({hAV{Ot?ExJ6x zgQ7(0ZN4GIZ0k3nCh_g;)8+c7L13pjBCH$Pw}9v|ZV`M7=A{$Pi=$5RcW1eFm2o>= zt(Ix>dSDgGm)Pkr>7UFQ<1$x}JzatNy4g&|`y9IjqfL1vuiGq> z2;MV*n(QR@OZ$X62E=PGiL7FIuT*5qz<1sj{FL8h!9GGf#N-@6c48lXz+#tNd4V-( z?j9hO3_2Yo6zBZsw)A3raff7R?T0M}t_az6Jax3$+9)hL#$HJ^W(7_Jo%N4?^hL0t z@w6=GF9{9~A6J!u{j+;6Dw2F2s;c`MoUQ(rEkktV zZ)3frx4u9vtP5#zM!!{Ax3*K^UJ_yz?DNZxh>je7X*M&*Ol&VMohF;8vWFNy$p{T; zeo$xqzOkc!pc@yEt%6$I3_BHt4Iy;>?nTIu(^lhwy}#TU2MJtBrx#~vv}8nxOgihS zlkI1mZ4BRUwJfX3L))P+2HOJ^nS)Kv$0SGQaiy7hc&|gz3$>7MBeG``+ZMya{}4MO zhE1%{qx_=7jz(^{H*K+B1)$*?-Kc}dcgS9^Zsas_%~0uXG|Qa7copeUDd}QXQnT#` z3e*J)$$u#V9tw^+f&KkrcX$=dnkFJ?v8@l@W&Di(IU{W8MSKQy&u2rLm}xHh%nTinv1GT=iKUb1-+D*me!K_E=`ic zTD@Lv-cb$gwEGe(Q0415_v1#8O-|Mud|vBUT;aZ+2WX#bFH<^AGX<{jVDgp?thEI{|SBgHWpziiASVhgo(VRb}yU$zu zM-h}!P9h?H#2DHPV+(>m)Kc*kb%OEjDm#aadO&xa{qv*O9~h?s@l}zUIowYKB4h3m zK5v4fqj?iVKlGbB#yh|H`o_PNz1;E6_(5m~@kI3AR={sc#EHG;*Xct&>SDteu9RmZ zYwdPZ2M}e+-=$qbQLt~VJm_3PGj~A7=x^pWR&(}j=b$uQnBP40dQJDUt)$$E<4Ttv z&9bXc#ztOilYTJvX%6?=AQnH{cERs!kl$g_aGB)*uDKTH{t&Q1i`X{$k5l;d*X^?@ z7nMF_60>*9-F=JGh^&c*Sd65N(|vti9c~x$U@lX~iC3Cc6I)#lw=}~hJUTT>&d>~a zTHyV`(pgy~iVUj#c`xH3U$FFc8s}#yJ~Rx!*I}+ZxkKV=Dkse-h{v}$uPGX-pv2yn zSA24b9}j8C*zWt1k708e+*MngZ@UPOfBn29VeZVh?0PwB{(0o=g^C(MGNrTKRglD} z6cT%(;^8>ev=ui~HpVYdo>i(fjULP+xUnySyom>V{Al^@u<|h@h8G0q#D}X4WRhj- ze%B%7?<1hwGFyLw=p;Tu1$LLo7UVR7Y9Egd_<>ei8oZ(fzGxVn> zK(}!nRe~xk!0E~Rv%H{#`b<$rbd*!_i5B7SstEWj;=|?3k6R6*<&BUBy>9(tn>?Dz zZ>K6!ys{hX*(C;#^C3tyseuXL`N`gmou9FYxwqw1pSD+zy17+t>Y|#TJdbtH9I4o~ zQE|-L)HQDKeX?TWlku$(tzM5m?#W@Ge60Vg*{A5|@B9rvPLr)&n%pTF>;W>-6Yt${ zR_uG4L90`xS+>XM`18Ur+ziFjcDRJN12W&s&wu+BCTagi$!`vHfzq9woihR0*)TA# z?n_EeUV;%Zt(d+5Jv}|C|7O)q4}5+fN!$2X&Whs)ctNz4jlrF#-+es)nJUsL-2PX|`B$BPiQ(U-IPem@Fnn^#v86OY9K72N(8ib>D1qVsy9W#R!QH@tu#G&XDtXwMtILAnUZ=x zwi+HQ;pt2spLOI@|F6$`k-Cdd6y75z*ILwU8V3e6ng26lIkL8@98Om)k1N#1b~10< z>namvb)E~%P6Z=_36l(zLNcZ=U3#gb+uUJgpm=fG50$*RAgpuuZp4gWcr`P}t+UXC zCV!FmkOLp2Y|qC*wTe^E~1>cGcmgbtnW1&tgYO+pY^^1?Osa7$<1h^8#;YKP1}&YusR;X z&cIF}CLmQY(375A-!t`yu(LI^<=s@17z7XDZQMB<7(1)GY0$u;&65> zWVJK>Pk=AI+6%Z?Vh<`{#Mi%d08;Z|fOxGgl*{tpSNE*q!NY^7w{I(fa96|c+Ccis zV>fi^b!X^93!xTi(`6*Z%8pABC^fPD$;K+s40ZTperKU;T`LxLiB>i4id5tHqrnbg zeQd^o>AIZTHSajs4GY_uF$8_g0$@W+(6_F>HF0)^*r@+2mfK$GQ9v-E!MP9;vrFq^ za8xqPl)2quU*j@ib_4?Ss?UXnAN~c=fjDHXqFH#CiR&{B_Qjz)fNPrSAF|^%`WHaz z35*&_ANKDBk=W7#hKs|!mV;H6#-2v`g%^|?OXHgJxLW~;+SXJL#^4kYz_#_%ENla6 zCW@#lh&>(%JY^m%7UHUkIM}r|SDztowc2^rz3IzVwZ8v>%QgDkF!}yX>7gJuYKxjv znaxaXxg{LWS?-lP)u;&j_?A^T4N&RRIOu$FkfRaN>&*rH*z_}1wwmD4nVVKs~!QNO-u^ zV!VB|!UcU#9j2!a-)k5}!NX!ne%v)o#R?etVDHycXezXTDrQxE1Faez0Z8WlZeRav z9EN`l&xPTB~ zirZi5HHQmX? z->%87tD{*|yDosn=Ax97EUKjhq0S0}J!fW${Fq8#=K~b(UU6EZ+a1Y_$0)7Q=XN0Q z1gO7qR+(d)gisp^5!r5R@=Q*too!aT6f^_-wpD8^W97{B!ueizv*{pGwi+31!{l`@ zpZqGMW!uVovbnqZd1$ENp|1?3LEDznVBDN%3nb5k&2E!QVb%xxZZpqXVuRO302|D% zFFbY37}wx7dXqGH^n6@Q)_n-Ke?+- z-WTn6@QwST83utRT&(SQjNx=w%}ZuqRq1&9DAuXrr(PB7w6Fh*iv2f*kY}GTz}qe+ zBi*H1TRYlVgIgcdOoUNMKC2CC`x}B%zCTX;HM_729No8>t$d&-2bjl;(;b->-M-&P zDZ}~4xBTK7nRnFQf(^I*g00er`xg7@-t8!@HMn!WSj7sN@d>NLM7Wgx+g?5Z)7(jZ z_%Wcn+>_P^y(}7*@bf*JE?(MQA8^m~sV)8fy+}K?*HyhLy+5278N=hNEfkwI0HV1U zmxHtJH$KX^T+ks9BbKNvIeB&+Uy4M}C7G(&$jmf_mpfcDg#CndGh|0H-d;G52L8fD>?-3|E)# zsB?Apva!jMahv|JzhxEUGYpJN(X$ONM02H=;FQ^e?GgP~) z7Pl~bxZml}{u-BtKFC)czFT#9`#?{*d?!fU%W`sajrPv2ZdF=037ml2&?8WjB-}0a zlwZxntZOSHywFBq?u;XMIBm;c=UaE8u=aXrAOP2e-Ok^Bg`Y(R{`ct(dSb-)kgbN; zPuZDy8ppil{^BfEu6(OCw%ZDkbPaKb=Bp~-Xx(a5XNh7cm-m`>5h}#WdlPJ`)(f#$ zT~}&duxquMoH--Z$FSRe^?6J)DX@@{WEk~c?}&jw3-e&bTS76c4gh7Qd zd7S@^S_#{Pr6Ysmu>)$iCse7Y6$7yVOhS&e*d=&s-9_$hJR*dUvI;YpuX^M;#ZTs{r7-9{7=l|p;*s4F$gj? zgp0ejhx?h{s`UM8%}Md9u!Fs)fa!Jh&t%&d7J#iAJ7x(xm%ro+-3cJhl20)u?;_z!aZBRU>l(iuBbaY#vD7Iqe?-95N9{$evh zsra4k@t5OV-OgL*7e)B2j@%|dLB9CUzaOESO0U7g^e2rjP8tOWg#5FY&h4%^M5r`o zT}RsmwurDO0Lp_iK0#OfZpCN#3n<=%VAmRLk4*Vu%oTdK8v;+-kGmm{pwDT zDlRy5-iPjGd-?yDXi(Jbl)$3NsYOhK=rlcKV+H9$J=Q<+M~Dv)kk)JjuBAcwoX2>_G6lG&lV25sw& zK2FJhmH73OMLr$fMu6@;jR&{ktrC(SImBh%M&jEdVM#=Dvj{tR&&dZz=g2elp)?A1 z=$pMZ>-47A@b`WIA?om>>yy*f+8{ryUL*;XIsq8WjhQ*F!Q8;Uk#)|L7Tj|LfU-hZeS;5jQzh26GHoZ~^Y<^aGg}`Nw#cy!`rM z^2WhC1kYVlajV*GNx-McO~Vq7tg*nUN%RJN*B5|ooNoUGI7Y_&!3QfpDHFh%u3HNE-r9Xw0-!%NG+Xn{fY(Z%KgqU zSD>`qPgkXTnfD*Y!H3c1r8X=wUncTCtUP}@cWOIbMX5St$a$;2H%7l#9l#+wtdHMz zAOJ$ye~+JZ3Jgkts{-ai#8D~}3IPGyrtUkQrlJYSH)M6Fj z`rOs;Fy0fWnrp3((P?S@pYlPLayGh4Rv)d#PsSCJ)&Ume4ISl5qfeg5B)_j|w)9+$ ziSM|RdWs#=9SNeJ0FeqU09*m@KlINAoCt~&ibhk4Kn{X~GSJVcm2nR&oWS4`EoKt{ z{m8!wq8pE@wXsMS3D8P(VAHHLg6rzP!;MDK3 ztfvBcG0k0q@)L{W-}#SVh{Dw@(x>I>y-Hs!9+I4wvWHH*0Q$NE`StLlXZJF1^{*ln ze^sf(AuH+21Jj-)6|HxU#6(CFxC`lNeGRZhPqaA09N2(tfb2)6Hy^x7O!$ewpz1%;DuN-i0R^8c))#gmkcAo91xf~zL zga*4=idfVZ>^Jx|UHdq7Q(sPtaLv=^z=3_N=$*_L3k{=WNM#6BV)NrKMmma*PDc$s z1r)BI+D|2Sp;wicn%0LG+eoNS1viWLWf(* zPOu4-!-hQ7dy+U0MWpdcymee4cB0s3#e1=U>5j_HM(pB{9$4#Ax-@T!q;a@}NnJ<0 zqF>T}+PL6Ky%o(q|H`<Ze92J?Cf0%BJu8bONN@CP;6lOP_y+lX9S?#!B6j~Vv4y99 zY3#Hk!wC$Di9mf!c)pgUNV*UdN&_vHgrW5&a^@$)lH$A?jhUGHm~Ka^6zip*U0O;yXe#Kga!sg| z?5v0@yW5?(m~XvM_|wv{a2%%WfF&G&&%Lx4urF5GvaB7cSO=$ZCn=sXN+#3584%mk z+-C94EsRttTV#n}v`o3FMrn%DL|yRk&Gh=>jOj<6*+f`~1Ae)D3sBgIpmR#5A57G7 z09)_*#WOb;HF#jWjy-d-zFHMVLN$(X0rL`K(8Kxg; z$errN_}INCQ6gOnskD;j{nd0|@1$Vt^}u-H96pp_^DQ*lrEAnnF5c`*ezjd-QL)YlrvlvEC+3t^udFn za4y@!$}UgS$=>qbk64EA=pD5Th4Augv!pVaI+!=>qUCL?;GJ*~ZSBlf=tIx1HrDdi zm34-R@|dnq7Oi2(b>a>|IYe3G?d4u4i49zDr#tQ zES{;;Q7%c6DL21GzbDD^qHz2;}BWYe!6=dgmmfR@KmUMoy7gO;bCn4u3Zdb?dN5 zX?}#rpRXQlRPm+`ZlA(WQorQtE_GXKv9r2&@hoTa8+WK!c`?n{4C;t4X!W-70GT*p zIIZ`Ds5~Iy!{h0c7f+yP3?>fjvR#P|_^-U=l0M$`GT!|Xhc)-QGEVLE#>GsmLayV9 z(T8!)=uWX}gwV=75AJC?%!@pHXR^x->x0U2S>`jueO1Rj z+-K^?1WFN&B~$h!JkMq_yyAlq?F+=S{12?l(Cf}pXhU9%j@~;vb?0!-In(6dnN!zW zQnURCD4wA%1aoqF<^7BBDq=an(DNi`iv=K6hk{GI=~YUH(#>WhGTfm!C8w@m0pQyo zeq>4{CZU?i;ApWl0pDKL{&n2>sj+U9^GLO1M6yU=ZkD*dV?Z0Z16YK)E}RI8tpq|? zEsZ9tEC>g3MC{`SaI?D?J&H@1S9ifZcHL^L4vIUUwSwCH?YLjXs)J4?L7%OE_EVk@ zH7CSg^G?@*3f7W(XRcJR65^G9+*KO2`B&Q(q$HRhFn(XWqmp`WEtIkGN-la5ET<)b z8IzurWxS~=Or(rc#eb_Vi?$Ac!4K6(S+_;RM{AvXVPMv??LwAhsO>!isW6atYOHe% z80268yT+?$zAEk7*tZh)wwimbueDwuSv6&E(S`_Y{7`QR3XH#itVAG`2h_oDYI`ST z!JBFGet`zi@YIIXXuF4P72n^A`E^)Ki-BbOZ zBg2i#$@@Fp&zF5DF`QoqYgemg|BCI}xInkuV@HB-MW-}Pw8+gPi%UqY^IIBeA>Yv= z?*&i?j=`8abR(Sg=g!LPMZV>jYr+H`sMlk7Pcw4f`}io#gl{BWh5VIV-=h9iwBvN3 z0l8&4-uWl3&)wwOqj{Vt#61xyB{eTV_Oh$f12OmO4Z(o|6{#ULq9gR~KiA zXC-7mM^Ct)-)?w6BB2pMJ`+mon0Y^s6y+s*B%$;Mf=UcJY0mz?0n$ZwjxUA{h3&oRc?zF8lazRQF zca^;NYkTEE@3(`#GjTnPudVZsXJNay2N$$}G&F_GVI3}KR>v1%R^fF?;-ve5A&>@2 zTMo#?_k^GC4v zc$^86g27X2HiG(<-;`OpE5%D)L9qsXHTI$K0)JTGVYA!U75JRwH@LkM(zyjlf2mpm zwa?ItE=IDs>A@aH=xBG(LMAFnabn8cNiE=m&B6#9lYJJ7BMibm`iSCad`40D7j`o= zq=?}TMw+}(CmH&LaQ(n&kgnHI=yS=G(A1MclI7lStp;7pXN|i|a>`_qx}A?2PH5xv zR2D=Pqlws(<(n802~Q&`cZL0$*_nLqspPm*HP2PI8p*M^Jt|Umx>E(-1oz@aP#X-S zUyU$JwV(K5(d7<}R)%qdHXcZ;s;#q5QcAh&$h|RaO>KlZ#`7R3gEFi|$MK|;u8hyj z$e6Br;xdTVw)><9R?o;tgQFv<0l-Y(rjFg?BJR<(cHMzcxa1MHW}t?L{4@0w6(oEuTg z&wB+U!6cnE7_x*UBG>UW+uK7c#2ePpWa zRvA}Qmm%F#{^R+iM4QleE>-O-hUw1gB?7zrxol9ry{6_*CN7)=5d7rH!%DoKp*ux82mBz_%4ugYYT-O`Ix0t5}>ER7O{5&MZ)fE)XpJYsnLBLTo<^L1#?waozw(D<)82ajWV zS+ol~7i||R)*}1Ii+li{f%D@lV4hIzCsiV$opF7KkR)f$KL|Jk-K`3;J~do>G6b|} zTp&ln7~I|jb=)XLZ=GapwzOz)82|z7*)P9J;xa#06P%l752$(J+5tRT1Qe{P49l?^ z!+tCX1sOjSs`q&Uf72r`CHqge}gm@9fBDhjh@U z_))vPxa^wt&_{CR!;M;h0y}@!WSJdbx_`;3HKK)RdZ{36@53ACF4@GT-`vYRl=o(u z*`Fjm%Zy{%GA0OcAx_OmaT<2{Ug4|UNwW_B1m~_e5>0B!~k6HLiEI4oF)-$i= zSo|#}V08A2{AD)4%X$6N6)WRJ)4AT8TLF77PAbi|tD1M9*;n3tVsA$ehP?8i|o==T8ixEi@)OgR`^D7KFWKAkgq;0PD4{lv^)&M~7Uopg zI3cnZsJ@_E_Ozl5g?#HNJ(M4AEJKd>Z)*k*Sc3V2->>fh<=>qRsUwU?`MWoWt zmSdMJ?rwb%*kxB+4w4OW(iMvjY&;oz+c8S*O?WxC-MZ_ zc43^X)$?qSf21!Y3nElBiVPPrF2pU$p`J$|yGtU~Vz9TH#H%69QOu_-AR{{nKVO;& zHo1F&ce0;L{l&OEj8u3qeus1A(sP%(e66VmF*NBNN^zIDoVzgOqleW+7h~z49DqHI zAN&X5Rds!kdriDOxFzral_53U!LRu>$Q7LK-O7VcEYK#ym)b*)cWgKOwhDMoGbFLO za?d|kra5n2Q@^$~4h4I@SSlSq>f7CogL0iFlF3#X}C3{Jg|@f5l`RWQ}vEY-{(wcarH;@v%Z_ zddJqf$dRaYwCsp@gS5=PC6C_%M>wfA^q$hTI!Ogs-$5 zdjPWZ;tP)I+jJ_~UkMS4cCxsqR^-&9*xB&s*y;lJul4oPNxG5zxq(_voJ;Nt{!r5%hDIwa-|Bj@)TjL2^AYbwuK(GkfLeh-ZCvN{;c&C== zK+(`MURn*#`ko~-k%JaJMmsL7R$W{UyUBMl1hcTB1e(l@*~b>4 zkekdQMeG8fqA5e34KX@?Jzz4KOK?a!D557&NL+G*i?3LsJ9}?Dw|hGH1&mE*vY$2p zY2NY2EEtf5$Q$18-Dd>1e4g+-p5PWPm=UNkj_@nfnYf|h$z=udrYbuAfty2$3E8`T zINk^H;fnld^e}@GCDztd0?+II%ix1A^t~wgV7WZ70*8a%?a}uk#C#7Ju05NjIcIf( zW#@_)WCeo7ELZ!j+=h5AO?i(bDI&MaTDiCp`1|1|#jmEv$ySF!DV{sk)m2l!B{*+N z8u-GxN$EE3;kb*st3u?->%eQ>{*ezgSnD0cCESZZn^B zQ1+YQN6CC=y*_6)kcXD$d+~?&KbbJrw0=JPuS%FQroR4>Y7)RS5JgR{Wq7eH6Ih{@ z1}e3XLCt(auigLD&>-dWZ1JEb;0JinS)@EQum~RSN(`3D@$ndO<6CeeB!>4}^0&I( zH^wt;IYe#=C^k7D_b;VCF3N5OYb;_je&`XuU65~@hzy2B zCOCIz2{J169TN zkw1~*Nq(d0)6m9;*~C0Y4BNBnbKbMaA#15=xm9V}<2Z_#41H#*<7V}dlyu?~3=qFV zZ9;)6QP#JqO60nRIOq<`iOF&0OHbFg)oKF$_E)QS z-2UTB0{nk{%?%p|YIeBGRpz}tNU7_NpdKYfV#n3&0RG}`?YNNy&fmM;1boxt%Ez%H zs9MHmf-+xT+j||$tCN;XAtp6&d)Y~Zh78@XD|C9TpYKd3)5yIWC@ybXVb0G3pi{;P zR*BnO0x;wF$G8i3QBDbJ(nC!u_h(LGBq|~xh^W7d& zO0J_jgK-+2@z;1M6#-uKyWkJ;IQz9_oQFS=TO1VWq%BA$T zZzaiC*ZPL#M5ymK?n*U&s@B=l|D#CeeC-2cXMGHR6@ROB2;Fy)csn9OSS{EnWBww? z$VSiQ#kY@8Yy6!X1l$?7t6pC_nm7KDA+srVncLFKG=v?iV7CrFh@6rbC~7+^)3tEg zGcZCWCKrHO-ydU6uiCa?Z)wd^37VhqHJZ4aa^6k-)RDZU^P&dNT-OD4@5eoay)CyJ6#$#LC?snrc(5?@R3XF!KQm z@+z0?S6_dZjd}VK)e+X0$KPc{oIRS+sQ@nY*sOnNhwpvkoiPZ=*2qBH)=b?i-uclo zOLH2rfvw$ z8gs~d3DnJwO%P6^fwZxu3c}2~C=A{CA^B)vZ_%&>z(%O#_2)2;>3Y+nn5Cm>_Zei( zTPGk6<|vVo0>oAI;ea%Scup@D=al3+1E$%JR~3gqsi|2@K<;a=7zmIrZW9mh4Yd45 z)B&U9lga69;(X?5l!kXC!*{qyd$w!E2})iTg3+17e{{4#UcdRkK(L5 z2PTTw6MUPb9F~g?%zkfg4ILIuRxYkG_--I3w~&{Y3LPg75?X{cr2?TZj`1*+g^~gc zNiVnUjd%w_oh}|b!l3?GEO@517U+ND_;&Vhgwm$X;Idx&_AJ#Ym=-m!UF|0qFnY7Q zZ`u{KRI4i3aU$5)gAZQ~z`)s}TXbFupT)lhH9M4qzq>NmEy)zY$aU)ugR0_qQaS0H zeP`N}J2LMPR3ipv4u@H3zcGuV1rYrSz1|VNL(gC$in9!WPs{9MqvfYbP?^UOTC59eC-m%}s|KI7dcbK@~Q!SS~XfWjGSB`)}SPJOx7K=Q17(iVDHy8xZ~h5;hZSr>hj_iZ`m20WEq zH?Czp{PL(9h*n!<;gWS3_7IW40~X1JIO60H6mz zkeXD2+is~iQYULL$mis+UkCDeuNNmP_BY2yrBGI#50mvXWUJhd=Z%_A-HYT5UI((A zbt|Y-n7-f{V|sHEmU6#rAczWtc8q;AYAn;>g@DQ&Z_Hp@$g{~)c_(C)!Rsq5?QV~f zon{?@5NG#t{K!PZtRC5Qrm;rMdbj0pr+#w*Y7f2zw_nOe9SJ5mZfhu94rb}gK2XP6 z*$HjRF5o%nItBkn@M!X~2bOR>K%e-@uV=sQhyQrutbVZZbI_716c5$IRd-tM8U{cE zfZxumi_L1i6IYDzW+8=-x*=x6>1=WU7Ag50E34xK8I$=k&Z^Sk+epPj{Ud~rL9laP zACy$ntl*oJ4#YQ!!d`@}9+H5J?$0%Y@MfVJH?;3Aj4ynDGiG|Cys4W*4~S=*k~pydhd;=DGG?6J=#obnz%wAQq4CB4t)+6*ilF0qR3CGQzd z&W0aigzEF#@^XRYq~~F2SJNTwPUAJzt4k)Z zI_JuZd&>gVPR;T&E-bib$PMp~kROy?ePQ-Z!hJvwgMIfXx(VjAkrg-_CPFt%0E*j4+mlW`5lTiF6q~f zP(m`^VI>Y87_Zu73ERmNo=1^#04K<%A~wVpbYEKL-Q~ne#|4AVR*9I>=Xp)nv=Tb_>HpO|rjeOi>)7i=nc9(0`);}*#Fj3W1PVX+nc^Qh z;M`o#uITj(d8CDx>u)yA*vTCRW36s*SN8Vr`BceHud_-rJr1o~Q4YTnkIZKRIvC7? zMX!#@+Y8BT@k5F})~3&z+f7OYOCGFNTe#eR&*0nF zf_qcQxWr5Wk3O`>L$b0S2JlLMGGzbK^x0KfiwlpyP1kRK`*aj-mecx zVyd%&%spEm`cM)G?ge#>hQPY>I}#c+&O%;f3!cIt?GMZmq$Uz=i)mxrRG zr<&&VheT0zkxrxxXNx^X|7MygZRSg>)RCLHp{kHD4IcJa;tx$VCNuLe^KcC?X)4Lc z9<2*i=>e1$$-b$`Dx4Me>KE3VXNxY2ag4l0k4U|&!Mo)VM<^%S2M#W${ALvj!Axkw z9bW^H;linc)L;(@juK9|=|L(V0M|qaxA{NoozuYoTfK9BEr!Q*fgNrP-VgBx=p6tb zi*Q5bB++EH@=6BSP!yIDVaC`{tdD?PBx&TnD@(i|T44*5O(k!?ziYOfuTyiID zG>>LSF8RCSeB_iDIQF<{&ul zJUJek5H|u?c+N6+szurwq@LT@vw%%(VQOC<>bymAyvy3&S4jPSMkriw?vaS?C^^C5 zTb~$`AIi&Z5pYD4xe@66_^r5oEo8N^6G_d{$16iC2%~lr13Pa%-TRu}r=ll!m#ZU_ zfc^mPXdhATBqQIpDDpbdIKZ)em*qrv*!oD=K#KN)Pke0Kx%9h-cV!I=FRIsD zc$nQT4&hnxpgV6zy7HT0F==Z_FjBqL%+FB2*|Xts87Ge%7maL|N0hsTi$s~QZQGhf z?&PJ|2>mPh`0s}&xv;t zBCdt0-w|@RjJ7>SAg2F&&-$+UVo0lf1eqM{&BdYIBX)fFOHu^({XZNG|AQ>`=RhA0 z(UsCHb#*m0FxCxKr@4i5hyW%098keQCKG6lPrIQJ)IMI@WAQBS--NAy z$`xb&qa0F1`nTf`Sfl&@yLj{g6DAmw?|b-&`@sHYSRC^BUJd!3#UkQg6?RT|{%t6BlJ551XMH~3z)!Uo{c zi}Qk?CqW(xVZr&g>T2bhR=Tfpri#@E0YMq11?uZdX5E&LK*@Bh1wg~>MzRWz2e5|( zBHsQhSJXC`k?t4EH*7%@^|i68_se+ zXVatf9}DrJe4kuPk0=0Ef_=ZKWriK$`!0PzU2fur-CFOT=1g7Sq7nc7)PY0g?Ke#M zY0k-xdo$922bo8s**I+RceULbGIaUE?!lIl3-nj^@7;S*KL}6$M;9ge&_m46q+8S1 zq7d+o-*X;_%E=*ht?vPWn6me^S>tS-7u>nAcs>nueg=`9ZMr>@yr(80ATVxDh=-KJ z45Awy@)umdi{tIfYoN=1vE#S*ZFfvR_UAeNNOrHcCT`9~`Gt-T1M)0|g0$+4S)ksU ztU~$vtb#5o9D3o%LS)0+V?*h?Wvw)(bX-=|ZSo!sNg@y3wAR=fwf4EQdXQaVYxs^Z zYZ$Rv-YCeaOuV(xYFnsoq&=0rt3?6Y23VqF+qKhnEo^QV48BaGBiQc!z1!*Da$=pd zm$yaJ$gxD95OPLVgN3z}l;Y<~DFF{|90d@K0`l+&>E7{8#j5>IVg5kcV$&d=Raq=x zUtQln!rdq;o}Y8MG$l8Bu)bz)0H8*eH5%F2FZ@pH_vzm6$H%AVTOIo<-$i@&l7LJP zu{3JkK;2cZ)U2^XuCMwgT@nN2oS zx|MP^*g_WXW3gGoKwIqI3-g56G}sjdiw^19^dd;4!)RNvOVEDG9jdYtE3GxooTzC6@(k?jAp&G>0o3fsF3o zqHj@(==gY=_WN|2;bc8?f1X!7RtyeXLs2@-&Pn_9G6@3*I?cI|TTCgyy7+#v$wcNv zMoS8SO6Gp4zNgPmrQ8^Zi;1R|NxszqhSlTY&L{T!PChX`a>-H~1FGwJDfia?B0#69 z{sm6saZ#~c63|5LH(9I>M$&d9V-=D}0_A^w!AN5?*u$r+!3W=Sc+hoKxlg?ZEL!yR zH25n0$V@6*>xRm8^6se_@%N@dd4Sw2oYQ4QJve{D9eT_vQqBf`!B5)YmxPQ?nCKQp z$TgHRt4zdW&8eZK&bOcC__6*avsUtk{l=g)5Tp&)PM*Eear~etDj)o1g5tMISJ10u zkJp@ixbBwBl8C~UqvVqh&DTxsx5F*d?xt)5S||t|m488nnOF}F=La!30e|VkAk)3t zl?o|*kP=qw1lxQEni?PTT}7p*vk=VJ4{A8=&T)NyEIwy<571O+xF~7UUM%RurnkvG z*yiC3RSc@0Ka&6{9WL>u{w&CB?i7a}==@t0&$*QLGrHg11PevU#*f7shND z*s3$d+V1c}G)|Mr$Z(LZ-aMYozmIyb6r23^y!;7QD${o3D;Kk6qj~v2hZVWlk5S1V zu|^OJ)@OuGx*Z3TB|3~6xZiHAMaZR{U20;MMi?VNPlDSnKQ|3sxz`bN%7UROHZSK~ z@VrdYoZ=sPclW9-9aD6xp%WrJ?3)46=+!Tb0?)&=baZfzvx2Pac34geh!uk;pF095U# zIw*VVh{dRA`u0Tw&>5GZy>N7a-vK{SG>L1Uv3@0KbPSqqxAG2BZ|&3=%cMHcc5)a<+U!!UJKpGE(mYk) z`p}z5F$=V|?fTF}?s!9VXmI;VF92Qu70|=v%!sh^kaQc9D$X6ua}!FXPa4kALwSLtd=#moPJ#E3z@ay$^8e+S4Y0TRgnG+P8S zWN*$o(`Wv^Ufvr&+7Gz6X9jv&q90ti;+2JegNg{j;{wjcZOUql-f-g=KzmSxJ_Lar z^U2wTAP0w!cu7y^a6B~-g4#+oVPw#Aw4=(hI?_`Y;x@f+ClJ_sNSh+aza}J}(4P^$ zb1kZ|UhE-T0U|ZYho(o-NA#=^;j5sU>u;jKTbi-GL@t#jU46ZEqi$XTP_ge_SspmH z-bzC=m?(HCc7ghy(xx7U<#8Kc>u*Vh5WHWjt{YE_f*xs6)~Lo}Gc`~KyuFqLvh@i6 z8%5QXGKCf30+5TpDvRVPYmtz+H&rL2evneF(w}!@SN{=GLC;k`*wgLfUI{@#wfW(_ zi^_Q{84Rt2m=2mfm2O37_pf`Vr3p64CIr}K?J?q%jmtkqz_uFm&ZhbpIi@zG>%HXNry3r$ks+kI-#3+M&&OpRZ*T6QdwJTXt5c zoF9Gzzr`ddDvdN9&v`0d`>4atA0U)006pZshP@y(1So;U>WG-a@Ss)!RUqm6`Jde(MmlGPJVbvDfEu$Olj6T=jN9~o9wfLg? zm+%NYfq#Oxv9ufEs*{QA4Ij{=CzU}jKIaliG|VaQJ?6yN(;wy~64jmE7-%OA%t)frkmrkecd$D)({|3TAwtnR z>9l0u3g{|s7oFNeU3Rzz`N(_-{7z6u2%kB4&vCDr@NeN)3Fkb}YkYCB#Yo?--YLy< zkof6USODNv@6h(lX}tuLoj5pTbO{vjSpJ&P>K;xQcpKORYrVP&tYzlmY=~1Ay7k|| zYgz^o94t>y+%q0(|A^P0^`g8@7TMPPqPv@^w;0U$r!;-&Y|!h!O4E_C)&|}Eh2wH1 zt~08@)^EJ8swnfWMMQpHc#UoiEU`8n4EQ-1{Z1Rl>w2j-gnhZ>#wtMesIOKNW%Ph|;m~b0E3(@M3$WdAhjDxr>)piTp0nXcE z#UVUZb~=9E;NU+*pHvGKU-woh+-l98|6g9>)>Z}k>Vhe=qO2$9w6itQiF z_LeyOvX@IccJ~5t9eUr}iGyYI^e6(hLb?w)Hqgzu?+x@u>7 z%%Mq|tSJWZ?G;IVH{ETYzMtHG-|Uq+xo*3aOme>rClQ%NE;0NXDsN#t-R=Z^)0o{V z6v2M+e$LRQf}!(DPKVB3ArnKHi|xg@FmNw)d<8@+$D>Nu3KM$j^Uz%9-#0u4eq-UK z0zl2i%AL}6xokMTFX~5{HRWdb?rC?2N@LfAozXz7oim(Q8s9areaHw_8gG5>^*tXw za#BDjt+!6u+PD+JOkcgb(=h}C+bqsf{qkM8Ne75v$vLm4YM;0z!C;NJFpGwLq)73fzP0OQ%MK zUlw_ORbi{o$Pz5VsLj;nAR}=<3)>vr$=U7sR!68d&+X=T4$}k`anwe*jF1bb@3p^quK8o-Kjw@wi3qYQonOJ=~x}aeJn3b=CQ5y zYQOV3t~I)*MHGTafZL;MJo;ysepI(?lyEprbA#s7pmI@_>ExO$@+p}1FsCivr#47! zxVOC!i_LGg`-JDy?JjGn7yMfnL48`ALQ!)7>1YGoHntbbc@j+b@%pny!#b|p}>DC63po$W2i z0S#`8(iuzJQvJik>L+vsh?)b8O8-FupYB%Q#=@%H+{0Z}q8M+Y(jvU3Jn zXaLrxLa=(SjHb+Yx8gJ^1}$Sr7Y}hLs3Nz0D5zD4Bzh`3NA-JSbkmsE{%)+t3J#oK z0^Ng^i{zWr-mWj**`z%G1!R$4Z{XMZK^-n+7IuALKi`rBlAN~$piYp|``*l1aGJegxlV-txJFasg~4w; z`xG1L_~CT&dM9+G6e4G0^5`A-sRvX@z(%|3USKEOE*4G38y&26@o&@Jk5_&;9$>bHjSwyi#`ozLc*Lz}vkxjMX_MTrQ3F4i%m z8uRz^p;1L>qk8hpStDl~Btz98kEN|cxy+(c~KK1;IGoF`MC?$?Z&k3bsSR9_C|B@N|dtWxLfi zRY;|^@p?^5wYXeRTzk6prkdeZld~jXUn9m&nTVJ2MAvH@3WvQK_+0(shf>Qg)=KfX zcQNTSW?^gH7f#3DnG(%kQWnteyXW+ylrzO%es@4o;k4K^xVJTzH_K>c!m(*D;1uP& zH%Ll;$@*%R^~(GxEZ`iR@Dcn_&f`laMhdj<%2=k!_Jm_R!9BLP9^^;41}xK z8LTj?i{d|&*0j1mlvV*16(v+ z?5ycgrvPNp2sBD z*J%`DkK{A7FG><Vtu`n6?PA+H~aWvN4@xhJG z`awRS&T=PW)x68^G066&Ve4Ns+h7VYZU*t4999R7`BY;aQFn=y$E{WYS2CO)L&zDF zwU2z?tgf{=OMy%XK^DOT$jrlKL~$?4`qtT#xOFyqCFdL=cEZM)2iGWo}dxyX^^acaC?7!6&zShJ8a=aX?7%c)72Pf zGsR=-qt|MHw|3>`HusRm=EVlwtfX&%ZsMya6>h%uCa8&rv!DSYTh!@_df4A$QUVt1 zkUj)hd3vq*Aj`EGcc>2M5SvMx$-B@YE@Gvh&$SdVeMWm&b=1mFnUk1uuo@Bh#|CXP z$gp?IPlvI@H{CGPGZjCREjzd_>@#BQC$vP(Y%OS;!6*P6 zC!B9uzeefILmH7a>!O5bjZ(ufPsip!?4&hMT%ZY#89Ui@VDdh=W8Cts)`;a(j+z8y zLQnAhG0C7Xf?lwcHk9b4Y;c?m7YPje9DUWJ?HiyFpy;QJ!-Wcdw#ax7!94Y(MQIoD z`78i#;oERTuW7%q`QpP{({p`8NmQZG(&-`_GrOiOaI(kc(k{V0`f`vfY)C)_O7h#A z$INyPlJ1VSe0ILiLB~b0v&=~_z=P7n@tY<@Zf(BiMD1w4=^cYhzmFx9(Mis$jc zS{IQ`YcSd_7`E`OufkWXma0x{}JASXn7iZ1_F6P8V4!!IjG?u+B) z!@4gxfugvD=lQiIL-_lfV1{SJG8a=@`j=$fWsed}yO5#6R_Zc5Hjz}wjbMSglcz-) zt9-#>T{-%+L|`Rf zWj@NOm=A#A>diYPsBt)Mi@=&%U=dW-|Anfw`#qabr?Popx7cQ{8hMgT+jss%#;{vm ze50M~`hC8Gh1A;ME(*VOI9IF7axoPZ)gpindEx71p*Bzbf~Iz4==O!&3!%TlM1Y}{ z=;rKPr!n0qK*DR=A*-RGad!ov35T`wb8@0-a=|!kH{l9`l-lkb^JfDaV&jos5gh^pl<~n%9_|J?gd4JFJ`rk8|_3UjTh;~ zA}EM`Q&ZSCJ-@fttyX&s&OAaVGx8xR6JPvlQb00nZbybss!RYxJg{o~cuzBs?dcUJ zjpA?mE<=)#Ex%K2GXacfB(SZQq(5wRv%hjtfOqG84^OmOLjAKOLg};Ujoh|sPqW+O z=us&M-VcO7)tLaXCY2%v<-=QW$5=^(K+o(ej0aX}N5U9L6bBijis1G2;XbMcd-80S zcq;)=6F6{<>aO7H;i=bJekj60Q=wa})oED!I^wx-5VG(aklW{e+y1zI+`nj2vgrNc zNcJ``|K#x5{~`%aczfxyJ{Sqt5>EIpPnT3XTOIrX{;dx$H{^4+w!d$hb#6!& zU4hhxw?&k4v4pHYV!to|6g6_uIqwq@0TUPJ>gL%m2v2W(z#Q@-4taaX;AU8og{oNJ zx_)HvF*D~jxJ+ou(hBJ6z*PKT3UvJy0U-9JSJmwj1| z$f+1hJ4Pd1x>qfZ<=grOCfwlC1JBofTdc+2(DX0S!(*~4bM@`D{oGnoIv@XtloHsE zWmY?HmP>AeF20mGZ-Fxs?!$>$$bjkz7Q2l$@B2HiD%({aK$!Ytb1{ozXSe)i-)dLz z5OqQi06_zau7vH6bKr2{=iJ;)%DTsAf=3$JEj=bhpMJMH(q}x2F1w<3$TL@O%Sj6X zwi~rF&nL)u$Jh(c7jS?0BNIq*n8+rClg#z+s4@=cx~&2KyXq#`C_2{h{V*#~yVP>O z)Xad7WHOQ(MV4?+{sAR1N$Ty}*yYM*?uTOsHU=y~F8ytz=}OXP_AXYHm6gXm+aHwj zWC`e%n?hTT=XRA^TJmG34|-{DnXW)QcqD)*%EZ! z`_?tiZ(WW@Jl1mG0Mi*hd^f9lQ$;O9ftb1dzG@(~dY5m-$!t2WI(ezyBi~ZH@hz#( zfhxT&rKl2XY67dUdv7JU{jNMsv)-zUFbV!s%RDJ>P>di(0?k%qQ*LN1plTPQmm_|$ zw21>7c}?4&Osyx?E19n3)QnGOv3sp*udsEni36{S=xt>}xwtc9sr1m_Ls5d&r8=GY zpImR*)^J*TmpA_MwmNef+gWfeJ|(+Lk9|5c?{cu?;MYQTf3Pc)qFm-FWRU`48axi& z-a@&+bV?O6DiOR{KT#?*CaGO=$1IuGEZ2btXGF5JUKg7ks)WbYl1_U-_xW@{TLv0e z`+{6)i>)p`#*Tcvo6AvJBxjJ*a~%(n{DE$V<5ePYYIYWhQWp`Pk4M9ng&*?EZfxd_ zox-QVM&HkMh|jv%DK7Ko*XO|^u}c9GmtM8LGUTNCw)1W^hH9Wq# zo3}YuOhB1zDkz|HJB>Q1vf5Rv74p~HZrdO8afulr5$Jm!fIN`lbD*}Xh&+(YzOPKc z=b5M}vRA84&CdRzRMOY1=hSTccD0Ow(QM@e+%Hz|&=@bsXBg|*U>aZ^DuKwIH&*do z!T`w^Yo&1Ie9ah%l4eA&w66Qk)UZc5vDeqhG_~zkk6D%KJY$}x*a-HPDTXA)M-6@U z$s@vFdfq0<{P`#u+q6{qBdQa8=!dQW_KKus&&ytwVTUI`9+6(IU7#~W+7=F61ba)^ zlGq8cmu8S5y~f%r_}G}-SWA-Lu8SC4XmvzPnHXYn;y5l{i-t%}_h@Ng>~N1dL)LcE zVCsk44#C-Z>Sxo*J>6QN_-x^sX(A*NyELao$H<(w{Yv)dj#X5y*(4%3Y1APzRks1= zdXpR4@4pRhJ(-}z{hcF`MzroZK(MB%tvLAMz)#4hpd<7p9IRicQX2HkQHX~Uh8X;| zjjd1o&sYOIZV}`K$0rIR(lInH1EuwgG-o?gF=+xWi5Bm|NrfnJXF@gosNguOhJ^Vut%9=LwR;%4@Q!r-cU-hzesr-w=Cu6P~1u+ zmfKb-&y-z_)qLIi8D)k3ZFYkV(aA>|M{D-A#2QKz6g+)31R4DRUNP*7GrNV4LF-%U z=wUeW<$*%`Czhk-tXm)HxLxyN2_w$W%X1A$445Zj$%|BDJ}@=(4YDw=+1y9-M3(TS z;@kDBV9kL(@5L$Mk3l`2h95%-W|WyH{OB!%_niy`L1f;#=e3&QpAbMCY++(10_$JS zcn^#|?tT+PA+zsnZKKmm2yQ~$@invjzH!}za6UF~pf^P2@I-^5fakn6zHm2$eL(#7 z%#P(1k~o%c5thoV_UHC^)bMS~)VvF474XZC96t_A%+d!c-*8WnxZGzXOEhwoVSWG? z)Nj3*pDgpJo@;aciWBZjTNc+APnf6B)0^y|!DZpmKA<#FA@o=V)z!@(0pl^B(c?6Y zzyjr%c&ku%6;&s()>X%GdOYGcpHMb_&ta z&ed+z&F>WNkvb+x&Wd+&G?^2PXP25EPCa@o$D>X49i=4ciSN+kQWYqO1$|~Ib4mqL90>)NLQY8}U^k@s57MJtOwU&66WBcyC$@|O? zg85-%gYC)GJX{URar(p89gRL54$)LGUCH#(xCdvo#?nt>nf6gPGqFV~-b89Hc^sn7 z9#7aiF{SeC1a8c{GTN49MmliJMB24Ow{3SMq4HVIEGzbSrLW$Zv>s!>s{M^Gcq`LC zma~nlMA61EAm~$&$nQHlWPdS~5Kp1}RZ0<6qk-Swl(}L;SpPt6P3`ppZ|5ifzcCI zB*Ot5AIk`hTxurB?#B;|g0o;uviRMyX8D2m+KXw*ce&b-Exx zk1DlbsYD6F0@(J`SHh84O2pR%?x}sfGc!cmV*RZpL`K+G=8svmK--liy71fpL zWfSJz2Ck7e{0R71AW|h9DV;@FFB2EFJ3NGmly2Q{bxs_Id2rUv?zGuG?lv)5i4eBm zL~1(9s$N-Dgc(mYv+fto}jlSC%sPmY%Rr;Zh) zBnMZCX3GUDVO-76zM;gbXz-$jAUx)9)e9F`)FDD%U?h>65~J`caQ%YQEF0uYt$QEULSc< z_hUCzjBwcgjN?8KussAsz($uLT8B~P47{QcZA-k5BitNix`SkUEg@1Xp zi|TfEn`BPJS+He-I_Y`8f!6C`78w;of<%UODVizclD{F}?(-DU9|u)_ou_X>%*BfE z@rORaM@R}-D^MZRx8XawS52Cmu_Wn?hi9q334b@9p9;DKpfMPx-L_a}$yA{KNR=Vi+qt8=?xqG>E%<@LB11o(s7R3>H3U(gPIsqEWh=BzHHN`WclM0kCrFp z+jE`&b>sS3rhWN^G_|h*PzNV{S;h&uEnnZmm&q8aH-U=0_{#>~tLx$?42dU;zE-xwGyt#>tZRgg$Ec}-LBdbh>~as*7Uv5LI!E-m%_3YAGim(TJo2W_&s#%yI$MU06TyHG zcHY4&U<#Dgm{SP!PIxFBw!OGqbAgoQEl?=>S`t}C7-Zk^`E|VXm%Zk_PPI)pb?g;T zapaDHpY@~fdT7|9W0N1E_@khLGAox!%BZW9T8ysOUo}XwOJed>>5r0-fK+Ye*cLA~ z*mt}QQMUN*Cyt6zt2P)4ydItOV!SKdnwobg3Sd9b5crs$a`7^&ZF|RNqmvKEUIx*j z(1qW$sN9c>?hEs3drJ~C8{)!A|I7YwFH;Wl2nwzrOX80TF_ zGDxwG3#^8CP=htXRZR^MSYxZRO2vN#2AJgY$g}(q)p8b~FM=y!Zqf6EIXW?tPN2>v zM$5WUHJyk}ak@-{`QB~QY>Il0xqivqntry-#Rc42nyW|=wFSSIRJ$>?iJTgpnm33L zq1d0RPvGedi>lBSqNdqwKqF#*(`rI1KqBB2|Kr{F{u8he<1(`jL#>6LO&NtxW+lO* zVpefE<}yA5rpQ%GcGe=H=-4P-SdgjX^B|Yd8jtO-mesFL1*F+B^)ELC4mjhPKb)9a zPA3UoH}riJQ#V`8@cvmzf~=sy#LL~3_{K|^^uj)zu(Ot1ht!3**InM!5dt&($$zmM zL&Q(#yS5@|=jA0v)pRh2-rK%*aL)nZr5HqlD7LFhw@Zn%|2%8Sci?d%EuhUja2*-# zPAwBb_6b1VHby@^8@uS8cld^oeK04F$$z+p0l|VO*#sYd@JS8EYnmx0&{ih_Z@p0>< zJ)4cJ*7AMb)BFD2NyPJirgI&Ezw06p2geltPh44p5){LdPf{{64x!j+Kk>y)O$!)U z>v1fmIPy~&NM}vt$ENlm;v+72*c*Y(<*ZinjlZkoFR&W4s@I>N31?bxx&GdFYgXHs zT0U7{H*{ctk%-xEc=YSv5AXl)_a8{t53MqI_)0H13F(l%zQ~a}Tpd6s89e8CRPQUR~P|`KMWwlzujlOv+?6~|5cL1Lb z`NL`Gey=*j_s{P)skxeWjt-U>2pJk17uiWj1SR);#Dqej=6}wFva<5j|8goG4q7Zy z-3J^K6Ej@cf{Tw|(1Uio9tG4wIeh!qxE;dsL_rSUJ;|vA#UfHNLg@;*gvt~VRMLp;A|Otyul9F?S}~~@LU5xX?bIC zcw`inr1YZu*=ut04sD04)h6b|``lCk7x{GP1zGK0eyxS!QcEMqc#pSG_m;mlG$f=T zlMYpkv@Pa8GZ7t7;2)a7)?bc*NiM3&!lr0GS>pB%QP6i~cB$28Fc5GvP*YyiSyOQs zk9_t8{%#vbpXP4>iHDk=%ytUe{fPO5J!WgYKjwI6kX3pMP8P|cLlzBGE%m!BGso3g z&G-MXc~#VO0S8x)mwBOF+3vj1sN3^!P>3>ti_l^^Lm2=AMbvDD4@+ew?RwL0SxnpQ z9hJ-SqUX*d2=|hcv z&>$XHN=-}M-@tAoH85K(;bqbX$E7J6%7_rTR@^VY#U`LHM<-$l(8H$`xvx>Hvza$9 zqsPZz$!hsx@)Z06JBkPG80+Do2eu7^sq$v|IhSp6V7iC{PNu3@G)F$TU@tzJ8c{`& zhOHuXU~;y>uJsvGR!Ysof?x{{O8~0I`eE$?9F|4+8=N*{+E(R@YVB<`rUVQR>riC$ zgGk_`%QTDfRv{91Zk7d&RJh6DgL!x;;Hi0uw3IeA40(P}vrtp{_J*^l09pNx0vQ6QG@2pDa|yc|~Nw@>3uLN40e@mfnh`vB^u= zu14@)Q6@qEB-v&krN|1%Z1E(_BsAK5udGGe<+tijji_cqj4jG3xk6%+zh}GTQ zH8=L8qrbqyA_rC}(YUno1tny~k&#%18rgY6X&hSNBmy)KV`|{CC-ZPhePm{4%hNX- zE(#a~)MPAkEmre}QHzuT1bV zJA`LmAx_u&Tt00C@;$??dt#w6MDc!8HJO7z%Vll z@D`DIy~mwrptu|@4l`dqYPY<7N!tKMSmp)Cu-_h~fSwrI%+^kDtx;5H^SPa!L8eZt zZ?6YNUj<7|G^a?zDriX-2X%_SC7>!k%KVc_sTA;jt!ZtwAY00c`%#{dt6B2L{gPE# ztw7B^YoWc4RV^u&;=?l7Z1nVgvITEihc|-~0%_G4regc@3Co}Fo;W;S;Ghns3}hM$ z?Yu(xy{!zihQyOPo+(wuwi1aTy^R!GlR48o-(s2C3kNIbjefH+9t01zsSRRnzYi72 z0);MATPRAlYL|EYNrE!Ar_mZ9pF0|&yYYv!HaNE;VxtxaensI zG%f{i^nC;p*?Ez}wki%d^1Lv}RD z>jla(%|j_TIaT5kw7%BvBq__|MeK3pZ=0X*Qf$E^TEsdsm1+rrBy7+ojsOxyq{hTi zRKCimUM~S8CLpz0C`&3jYJ8<$og@r%_>Cr9);qqypqcH&n#HVLs zq8tAtQVX1>9gdxey}S_MuPoFXgIsQGhhZG>Zd5O85iR6#fw_}I-X8lPl36SxVR75ejK)_5DaZxjxBJX;K z;)*cQ_vPm?h0xr<^qGYUIm%))S8ILt9P*W<1WJ8yYW8CXr4mr!J8Ls=Aml z-o-D|9Gq@zm|IXb@;>gvEFYhr%Lr5YZPdWI7y=@!>d|61Q9RX(9|HPgu0Ay}HLQ38 z{Mqv6;wE>X9Kl$nlA>{p8tijE+D@@nY0PpwLl@(h_6wed05Se#N{5D(T%@~=mgN>O^r ze?wT}zai|^oY^n4DADjwqsMmB z4s{=R#_NOXj~tg)>{%BMY9USnw7dyg$Ps>RO!J!HUQa+5WpKV5X@eNTHK+-cyym!f zKH;+|W0)xclLZlbb65F+L+ZE2Ufs?P91G%uXL7wIPEEw7h%)F!+Ur>e&KgIq7gxNk z96U-L7}R^mF64Y7HV$p%)(y#)!_+&CTrnsh7cZ8(6INh+59fJyia{?l>^RoskZBbN zf{q8&I$r-uW6R$j|6b2b$ktIu*OPiSQ6`OUg_!Uw#i6a6mEepE*r~cB!fZc*^aBtXKvS>Yq@mn}2`J@bSfB`M{gR23a&NLQfU9WK+E`uxr{TyslaN0JqSc~*b0WiNcb zWtEv=BAOQS!Nn(|REFU^(`qkSc@vGeJ}k{;AvH+3&g}$)P^KKYr+VY4ahRx~eAZ`k z@v0!^NLFXZ#1Qhj9)@m{5eTg7Z8MK%?e1lp^yU|Ic2ftZ?6eQGMl$#kJfg|8gSN0( zAVSoXlmiOD0=pUwXizhkQczGA*VIgA=Hi-iUhRA`-{`PqNl#B-H<7O}54=LP{QC84 zT|)z}maJ^({`OdQT>uK^-1+{z$$Yg*1TzRUUgxx{HorNXV%2_g{N3%>f=q!1&!8x9 z$32mG7}wjykKIR~t%?}8fXZl=1X? zq*VY>f%MIQmxS$?8eKdZ1Mbh#G6ana$^@hXz2)B_wN9}cuWpW;4Ps9h?|yI|D&`fL zoN|y3{Hn8}zJ`*3a&xm$vc ztCIMYLsJdL)ur;I4ICFKi5s=|L3eue4r0+Q_d5Cna96J0n^$_N(bExntnSi3jkMu@ zAI9f5bmw7`M7<`zs?ZPYGWg8RzT2Lh_-=W%Nm;DTDlb1}mMAolZ1D`{UFFpWK~i_G z2+|qhCLMQ+KN4p1r%sGWiF!YdT8GJ23bJ0Z;D=q!VS~19wFX^OSd)x|UU|t@r)y*! z`Qc1;-B=bnJddJ3aH^l~wzz7|$!9m`nCjvWSX&6KLMFjrPrn~KcVdA&gHQo4?v?s zy0iYRP1LX4lQ)xRlE`k(HFbmbQH1E+Lb;1K-hGo9;^}N<;IRhl{l%OGddpmYkROp! z%LI2Kr=)B;{_k`UFBO%zoIy!2;CAE6$<5{K`F}-0z&+>4Rp@G%!MD-=uWSzzGI9}n zvqkp8ET7n1xj7YMJuK3yhfStayD4uLUs%WRi`QZu*xyK2Ql#0nh?J7~Tv9r`DUy$r zny70o8C|jWwYx#Zmyd)!{^ls(U72v_&!f51{jn4LWrWgjFeGKZuMln$Pe!i1Bzk?_ z!2Z>1C+H&~f57XUGO1I2NcE9M5Dq;qJYnwD`3fWN=Rh^$*Vlnq1AvtvWaR z2p8ohN2YMXwjMotjC3>v3v3%(9f9Ll_8g_L6(5);S?v*>uBd1bEGcod2n4(&Buwgh zTY<5`Oh!HCbtr`MS|?vZN`W(+Xi&%hE4m(Mn~i&+1l&rw`TZhFM%0Sx?l9Qh-D=Q50Hf37L682zY+-2dHgOI9yAV|-lYNh% z*X3~=YgOP%;K#>7Jts>%OqxF&$vaumbL1Aes&t>=IkNp4xh4q=vc=Qx;U?PZQ@)0m zfr%4fTt2J(Asfxq+doZm@}F@^4kU-@j)3K-6wON8Q>*xvUxptaUZJWf`x-o{uPXoP zlxDFMvv=uIj>Y6W4LNJ8jg6u@T}GHJG>Tv0a1{uLa~*Fb9eV5hl<~3+GpebnN22#k zYd+y8aymW?ErzeJK3r@{NaO83XE;T;$oD z+@ir@vAk~j(G5H_Q;SQc)lqc%h#(|-+8bq1DB;~df$bG$fMBeQ^-r>lFi}+An%I?{ z&64NUk4BiX>r0LpagqFRrvf8;4Vv!e^o+W;S-@B;N7%Og7HzxG^<-vW>vbl`AhoM8 z<`NQQL^F8{v=`Pv)HR>%hX)sUIZ9`_ud6Ttn>d;@g<7OlIn?ebG0)SyZDFLEH_7um z#fXR}kfAaLhKWi&CF;kBRDjn?55d(*q6sEhMsVxRn5{Pt;(#<8J`ZstBCOXQaeapnw z%{D8#-|VUQ}H;lo&D9m>{!D@Bl#zpisByz1lbG=W)w=5G8J+vLYhynES4lKUs+-UaE>)d2? z<1DojH*Q0dqS&cWNXvQE*9nG$Z}uTm8^u+al?w4%kfj~{xLM*vQF+>al_9p>!vQ$Q z#^PK@ZQ{--tZuj(H^fPMf5YzNd>`g)x+s8 zWb%+U;D9FW=2lDH-`{Tqqz09Q6rd5H2W_D!FJGD{?l~468ELMlr1a&-j~}C^rlwYM zq4X7WqOQHb1aa|kz?RDD)2C0BfD^@-fbEpk2|5O#WNrf27A$%ya<3S#ko4TF)&2UL z?}xg%y15^O%kEeCLp*evh(kf0>fSlhdhBkE5}c zsx0}y(t^USaYb)(jdIw!?{*mfx2HpLP5EsO!4sI}d?LJ)iuYb)q7;f${Lv(l`?Krd z7A7-j-W!{(#_n^gnK9*<7l?X_srB6OJvgjsUHH+8gJb!k25_J}kb_fA)h5*VY;)b1 zHfx1FUb53IN=|QU$7acs6X>ax*gTScX(ABob)=RA#tseIhyW7Vx+_K$Ky0nu{SR|8 zxyx*|>$=L;6?uLc+pwqp#c|L%Sc6NZH-oFt#UHGIR_>(9byI zhMi>}RP2yl=~)Eng~{PnG~ng|=iVj##aseuuJVw*X2u)0Wd`M)SjGAcJ<27U) zc_`;gUxY2{e+s?I{>m|d;jTt~!^eQX_jnNDKYcG;cn+f}z^Rf0#hvZeOrq^u+7~Px zE`AwMul9u8v8cZR)4z9-4wv6W^ULqB`TRe=uEhyqkO0lKhD1#@xaVRG=*j{Vn$GWk z(7~zq)jy@qTbxT3RPd@u1 zma#Y|HeW2}KDZ4W<1WcU$Mq4ZuWoyhUGakNyIyKgNw(p{?Ju)#yN1f4{U1gQ?K{3s z5Odf5eqX)8%?b8CLjPrf#yC*C0N?vv5W5~0!Ag$)ma73cb;Wh~6;pIHw{Shn;?xL_ z2sfYjESRB=?$}2A6=%BWepX5pmEYeOw^)C;-BW7D>)EPA#r>+J<_&OZuJiu+lwZC$ zwzqYL0lE7_!|D<~YqzQiH;gr#0jt3N8_~@d6hIv%vi13TBrwys4e0H~yMOp%jZ#*i zK`!+J4hoUAa$8$l3pZK+&4P3+lHTeCs4oDdB??~~uWUC9JvX?o688W&=>mmkDIxfF zhUoN#L>^5Q!d>*PTnOza;G6-p_rh7IbgOBB35Fnm^o!C!1+Ua9Y!ii@F6lR3+jUw1q5J$DfoSizEs^K4*NcvdjeRHqG6n%bG;;QvTpM5^ zFvPvyRW(0uOF@ln`V>TD;S9uHH5;BkiOZdZ_Uz-ftY8`zkHKe0Hp@5ROS6IKQbckX z;F=*XDJg%noL#Zq)>PNdE^Qos0d)!mCI<%N0Ol85#GX%0Ll|PbJWrlYi>m;(*B8-0 zSrk6A44{2F^C8pTT$ea?>0GOPgvf^Gs2=5d^&ANtv*z+W`gH_DG^fTm5UasKPg)rw zuI{1k@rY})Y3G@C|Js}TD!yuv2N=Di!(ffxqGUF^3RLp2z^Nwxt(zYDARAyq*$5YU zVixg;!hC$Lz;f9|p#xc-Y~VWad;HL0zL>G+<1`k^WMKH2O@Wm%S>KOm%E|)S+azV~ zzW-`|10Py*#Qs`;0UTD0Mc-T(6UPrNsszd|wUmDp{m`F)k7KS;L#@yv7?@BzbXlaM z@CT^(zaMJ8GylZ8^)cX+@<5_Ga|7qV`K403^cfZ5UfAn=u7_luQ zhvdyUvrN-WwguW>FCWbQ&kMUmIsUV=d&S>p_vAm$?*Dr2e}(bujKA;s%WwRzU#C0~ zsP`?oBL7d_=~o8qSomjmWe%9)${$=x-#;)g6c!!5K$)GDmB$m%+pDT&WWzF?X94(5 z?y_`U?q_IVVAAe?^zyEkSOcb3WsvFopnGY4uR3be`@LI?VC((gO6@vN=f5v&)<9P8 zJmlMC)hlJ~GgOd?6#M<&w%_k8_8`6GNdA%;po}@WV}z}NZlkcvY6?)>FL6J(FrQR` z4tW5r{vcW&L+90zqTxRD+g3PVf8C8&^>WOO0gV19yin#Qdey1XL89eT`3$53(eN2r zNiXt@AUdTJA#tJMOebOn+Uh}*gy{Alg=gGmXt%?wFhR2p2|Ipkr4A|$*G=QyiXE#n z(`q8$J#hbh@1muf3Jh4~<>eO=a$Il=!R2Fpcum71tMc%JGlEMUgOKO(m(|IWD)X1- zanNOlCv&3I%RHjvWdTa-Mk>!YsQNVXqB)EF*rJT58TpYhVIML-#JUT;)nt3fV_Rt# z>AS5!!F3mzWIdxBfCV|YQJC5x!-)SacIzTL;2UetVjV}+1odEEmauVxPWHIpJYsQO zb*GxX8U$~5OLS@6=XyZzuw48Rr+Ov;12BjERlU)wp4ce+r5Pz9 zkHat^3YmjSPhNDGM~&_PB*OMFwD_5WdUz1!dF?J{Tn^a0bBCMw=C4r+ItPhP&5^zT z@S)7&l!zg#%z?cjaJ2z#%gvM zgS)swf^?+taUOEN(6_i^k}yy}LHDj-k7L*>O+|n z2jGv08W1ai6jD?oUk``h-nZs4sS{?1421q%7RD+ftUU8j3^HrjtJQr}>DW+0j~a5b z7PHPikUN^wrd7ujMf=c`q3M73v5z{P_$?LuMb^UrW?E4;pn=H)GdztR9$!(Mtlb-| zuhXx9wr`R#Yi0Fdz6Bsp=2#Vuw$Vei*m(Pj7y)bZsTjfxb=9ySnwL`C3~+2nbCt`CXdJ^VvWLJpgv+x(tvEZ}a# zHt-b)qVG|eo1}D9i(h9f#hrBx2ov(D1?zI>JsbgU#sS=M|B5Nai+3@}c!KIDX+iq8 z6>`=}#5yND41;0UeM9KWoskn$Rl*$uPFO(_M&6yD-uv&sZCZ>fjBVC}6+cm<*Y@NB zqOvg=NEIddh+>!T9W8xbnsi=MF6u)B2l+kqP3G!??g126z3@*xPnUvMYFD5iC6k>* z4vy1L)3ZT2PBH9Apb5xz`5AqH=;mTzoVee{;toTq&j* zwF#z+)1ASYOHKw{-?;%3sgF|9#FNT*>-P)BN`i0R_U<;E8}(#ZQy({N=9?mzFQgH`G2X3Qid!|U zZfe49;WX!;9a-A%j+?|85wDw3P@bO`*25g1OAF@A(CzO;7haQCRkkyCGC4(8l7|56 z_vtoJp;^4kDp)H@{6NP_jCb{_&wPgNU3pI5uIoeTtGINVzpl!Z=eNsG$ z(Qa#V_oDqY+XiNS3yz$}!qIRBVs1qteLaMPDaDtAp@FXUejVj-5K}WehFwpSZu~6n zN@Y{-2k46jRSs^61*#H5o{0t&u=QU4q(*JG>d&jJcWd2%5G_7K(Gi>>Z-%rZ@M;N3 z2}}2o@GcEDUKPPa?dh!i*@_fBUzu*SCGkG8`M(>HyXSIp)XgE1t$ zmVR80&PCZSIvHZH1K&9g8ZDM?BxW4ufD#;QhOZD%eCIbgwi40(LfYC zC3O3Pn22fV+|JywQjJGZ=i)WwSfFiKjb{+#*!}xJK9b^2hLd2>x;gHGI!=*w-=yZiJv+NY__4xn%0Cyyv% z(Z?@5KX*<()*ll|y3K$Rr11hhxd$YoqS7u6+cnpy(aQ36`NU@5O*^EDZE`(>c|BTucKrm?Uao{ z>P}*x-&(^p!BbyJl%R+i9b{>zb?-?7DN$)7Gom5B?qgI0W}bLuxey~TsL_N7eD^?v zXj@ePP&%PS%*UN!pU1TPI{D#P#6~J>3@q$gNBNNXbM9hd7v)d9BF9v6iP`~jNR4P* zDXlD-&lu)=kLwH5JKK)b`cV_MLg;}koqoxn`lX!$V)hh{Fer269=n*x0OUV0+6<>BacenTRO-ngXiy=DB zHBREH#%`D?qVJ|v;hb&{@fU^9je-l6pv8gy>iu*`WuOJ4$+BZCRCyrk7V~(IU`(Lk zjVSw%!yRMjN06o6EAaY$`%&1GuE-(*)$t_#X!(u-)z}H48D=7m8Okzol+Y=d9G*y? zah4~r;1X~qMAyJ4wva)jc4dUck1;QTxYo&L=q5?xatY`@kpN=eUR zT{5{XP*$0~<(XT=+*rp6*xh-;>}W%S+$HoS$Xj{*E!+-4j_%@FqOUGKqH_*r0yC?& z&Z=d-5vzvQhWXr1#+#jD=xXu9abL`UWB}!Wn8D1(;AI0CvDel8BS``{IDpIZwDPm2 zVquF->*1Ip94JSf1^#-8{U+?R`Z6;+-iIsfpPyCT z;!^uM;aBu#erLIVb8VV#(mSaWsM-W23}I6% z^o)AvZQFSaK1~+P+7f5V#_21wJPUKDIK85z_0sAKXAXsi!B~)E{yqTpg$g|5SxISt&^^|T7+_A0L zd3U^7cFuagp)5LgWw}(zYP?s#Bv2^7CUQ~Y1dfP@(d!~Blr4bMWF^6IoJk$l$DlaN zXyFrsfUHWr`J)7}mVFSS66uhn7qT{2vsF_l)bQPtruisHaF}@0Gngx8#J_TO8ZoAP zKba@cta5fIB%XaX(t4`iUjP%H-&GUEH7eY|(^F~Hu~Vr$kXG{DdEGG5dbC-&GSJv- zdjGtRYm~n6(z=ALWn5u=jW$QsA>WxRqqU7M!XeUOC&M`~zz*NAD z6m3yB$VrI-dI<{<5?t&rvA5@x0FIbgui87-TW^4#m3#G=!^NA=JUDuMcJyl{V8dk- zD|6^$za7zpyFdqAuV{U0fax#_h3UlfFj(dqNQDF{G#P&0Q9bt8Z+ zA6u9mIxcbzm77BkRmEiVS3|dxuKjG^dN4{kJbcQs&+~qYl7mTWDCnl9i0*f@*pbSZ zFRx#98(D((92FkZa&r1XKf_d|{S2(amgZXT?dQ^%wkKT=539Y~7YOcYwV+bSP+Dc? zh1%r^C5vgjtm`#2w@D2dHd|C3;8xW3N$mK^QFlf>b1zye=JA3$dF5D<;>Vcr>xm`(>TB9_twmcPCwu8 zjHAt`W-B}>7HGW94Cy)-xEUAE`&Y^W{I*T-t0jw&4ROIAnXU_C{AkhrDM>|y=044r z6&9NG&{){3XGAUnjr>FrpEwsD*CFgn@UUqoxv4yySr-Uu8CJ+SncY99Mv$xNO^5n4 ze-c_Y-%xKGecr>eV5BnC72bf!GV7yRMbfVN(n_ZM00+M)-x}@V-K|+EN;~yqG;%H3 z<*yUoCO`>(y&1{V?Iim~C^7g=<}9!51dX2my)TKnNgr|aniLXHpyV8*rZP00C^}<6 zLcafCuBnSj_D9v?^AuQ$MDd%(Bj@b+S^`Fq!QXn=_t*MFVWuvP3(G#~#@FSP3 zauG=ni+74X10*ez!LwvZ{z$S{GgSjv-*G`$rlPO~i#*GBIJSn&n7y3_SVeiAz#Po< zLRm)DDI~p)kKJ+YZ4r_bzsiMX+0!7DG_1tgBuCtM-|Z)i!EpSX>iI}n>*@NJn2p0m zu~MVqIODvjqWAiZmJK^`MRo6NzIzO!4(t=0_J{eI8&3)jrpON#zdiCm$ROj|^I67N z!mJx?a;mZ!uw0uOrx+;%8KmZyo$g;I8o+}WNZCg1+*xl-Ihm+)Jw~-8i^J;8kv{x0 zGkGm9PTXA`g@oV?A#T2Vx}VgBjbZ6h!wHU(0zpE#j5GZs=gLH9jRA`7W@4PQQZ#`$ z@5gMDpQNYM6=2a#Lm0!#Dkm+Qyi1Fx8q%i}XDw9mTkb~{Lc|H_r^n66X6vWfXga0u zNcZ~pJX4t@ZF=;ibm^^tWX7h*c!jd#f>t%o%^F96g#gh z&Lh__G41tFh2Z?20-XmFUj&nx>b(`cL;T|^KfUtcirx68wvokK1vT{?ZQSxG;)%(( zQ1vY4SKY8IwPgVHIqg~G`4W|iPh(`<;-CqB85qrzlcrUKL*pjH1}(z3OEL%4f-(jm}> z8Nq>2tH{$C&6u-zS2slLI8Qy;V6Q;todM%`PLFW86|^DvqEZd=lg>uG$kus#SD5@) z!EN;RlVs}!N8d0?2KL+RT0DzO{ZDZ5{g~EU2yBsSr1vB#o^)UNu(4K1O4{3($Kq0PokXQL zPwY6y6?O-TCOP0-b5!rwDHpbMww5Z}8;l;~)jylmk!%})*M2S4QKV5p-H5$`ŗ zR=KF>{n?lpbD>TuMgmi|njESKS`Q04Nv|ie1&;rc4(E{x3K9>Y#PF~o!+Rc$i-B#oLVFm&kIFnKW=~iFifLihJsAiVAc_Bk)NH6G zNhkj;90Qh3P3jYc_rM=&sm}RSL+-i(YD|M7Ei^_lscwFI=DR7?nhJ%aEv7200p zlzMt>NGGFHU||jH$R3ZldAhF2ZAooVaVDcxg?Ky?ecTby6-imVIeOnFGwg zl>c-!7VA8!Pcq=~l(DZ#1wfH_7r(t8soSBdhj-JyZ(~XFKoj0aOz-uYOIFBBOvDj= zEiz^s;+N@!ctOCOmFeNbW5XG|f-|3d<;JHiYeBMDz7;wM(c&+nRILRNR-hH4ZD2ty z=Zyq)cV?No*TcR7`CC;d)oGl5%xsdFztf5*g-!3-m@LZ7tQT>^jeDa18tqhIYPs8H zH*u8J-xXQ%E+hWRv+Eiu^H-i5t_-)f8w+LzLU8A zE7wfo$zk_)yKf#iv)KNmV8bizwD?q-p$)I+OZ4!8I46V0p6l>Bc`=_OS6k~D^fQS^ zoy98UbVcXSU%EJ;*gRRG*7&xl<|SYP)fdY`5juJJ_gg~a{Zp!5EegK8#CHG}j*ciG z-m>YA8E#z(o&D~nXHdn7{Y#ahnF378Q$OBYV^+Mw#Tzr<2{;p(&wjPN$HMZ%@QI_- znA2*|gy_qU)Qf{aITU`nBLS<}Kv$Zor0p7)pb~bb-w)(EAV)YYFY5hx4U|TV7>j7s zye?N&<0uD1>%8%+avalgw6lnAVh&UU8f#@l_`{5^U_x|49=g#NB}(Dp%CU+ML|)-= z@oi>vU{kmCA4J+hF0(x36^1;M!M;uwY)t2dt_m@X#ZlT&nS$r_s!g^ zG@~s7Bib7lV$-WDALf?ls$=|H29B_!n`(D`uG8xl7dCngGrk2;AlGx$WY4KbHG>JM zJ#D6n3F96tGBoiY)nwmGQ4tcDR%P6Ip)lojAT~sd1S)#@ zM+XR%NT630Z(v0KOCT4%GF1F1M%B3&-v%iCQYTsKN#A!V&d%zS3<+?+;U}HQ(QAC8 z$)VLbfh1|cC9-I}NTw!97TtJNZF~+)%JNH=s}b+{@<|ZNY=K-*QK_ulzR4yte7ilsyHkjj zb|XHqbRhv;FJYAt88V$o_L$wI|=)4t?M5(Y-~V>9bN`ODgb{5*)!e&9QYxF z9xrMfZZa@%F$dnbG-i3GTbxt|-?@*dd#9Wz%tDT6;sP_&8`CdMs5PFNCh3z95D);~ zJ$4n-y)gll=e$;hsUpZDx*P$`NrY%l?C z6zS2%!C?AAspwDX@qh8f>^8w2c4sx82>$y5o=OGo- ztcj2(Sw# z*4wFYRy46f6mF?W(H=;)1Ypan7n!To)G4Q2XIsKxWA>B7odvZbGhoXhwJVII9n#Iu zEG}L&?=BjcYD$ufvNo0_-9L-u_iv3m%6Oz>X9%sb5q=y9%~`bP9ZwX*YCk}XRZw@^PJECKA)+&O>RcBZ zF`2;gEE=|G*LNWjUc!GYz7o9W#$b%;K_0YCwaO)8}s?)EeM@QKefbw1& z7CZpRF3o?wImon+xX;UOT6qfiPt4D>ynHuhOH0^j^Z*;Li7~cP304fnqs}Gs$+@FDVR+Z_SW}^vc}`|vT%V@9d@lcVWFXgz zfreC6iu76wqixCh`i$f<53~x^dO?j=%y9^NpO%^`-cPw+03J3BzkQVopY{t-m#z6u z;>(7UGLyxYNh`%hlysG8WNI9KFDs)RC1Q%6S$fF^TUzvFrE8%K;$fU4hpZbKdPf$d6yTN zw->OPfO9t8H}A)f;K?y{2}1Ktmd1TgNJ}nXJ+q@f4U)q)z;G$l45mRTmcQ&mhXep?@%j9uSS&m; z@*Y(zRd_-I$6G>*=&a`(+KYCDQp|g)-**-g=&o|M>DmVt^@o+3b_KMB6mR!ry*&1` z!V&D%nn(}M2a5Xgy>06cRsC8W`6_j2D*K>WcvrQS+@2RpUzzW_uVr{uIm}TUe2p>e zy|2CQfF%eaGbeFXOL)^CG(wv3g!DT#ev8vLp5DU^cGZBQUDD=eo`P5n;a4f;Ni)kY zhqR(eXGHD9-Has@Nh6<#6|}GpV(W3%#`6PCNx)=O78TM#;3h+StzneRD$XQ{UV{4V zG@q3`Iq*6*GW8xr2ybxq;^ALiw&;zUM0cZLGi$=wNt{HgRSxp64UzntD2Xot%!h9! zO|a8Jwc@pe;)8Uk34_UZMR)#)xvUC+@5Dp4v-dUWe%5ZS7FB;?LvSxf$C%` z)HG(ZFfkcjGx~D(EtqC0l&)(mu@A6sLj$Vnau;R`NtDCW59Zb*2RN~^7qlYxr@gB* zg(p!)Ll+UD65&8EH&?ebjfj%_86fMuA1Zci8!P%cExoQ9NPr%XK!y?sH`(_ z@Z76=a{kAN(5Y9Tz0l%qMGCHjwNfmw5!1;JotN)L`1&!OAC7I$7sB6Ty^55Z6Dpenu7dEbYVacJYck_@ z9=)kO9J_%i^$ z$uXtFjg#LTcNyyNFmhYRtS?z+b z?i=2M$rdv3^FQO?C0kPaB3@wbkzS)|l-W}M9ur{CQhV?IJq5!8402^hy~1*6{`-4! zhxG(8_N%dy`2E$A&S9}kZzQ{pcJ^1pfH5?AS2O`Pq`MNQ)%|KN34~LEgTEk_p~Q)- z=QLfB%Y--SDRE>@iM91= zjM)!39^xPhFlrK$bo3#C%}6f1@C@y@H}mQQnnnG@+H|q30$)(qa=V)yNrg(0;lKo* zvI_Aga5MJ$&cu+IS6h@Uam2F!K*3(T6_(f@wTZg+W`?x3abQ$^N@?9@W9<12*Mq3; z)jsshVcQ$#+OgltwaA{KTn)L7D0bGJh3-#gh!A-XkAwolt#mgX6}xBeR&0QYnkt%A zHf^g%_D2q|o_c!#(NXj;OyDruEfn5&QH*K3I6wSm$gZAh`ZVL9?E^zh{)^tUx6{u6 zVI%TfXfng&2RPErnXlU?+;IU1B-Ci>!9WB($L#}>b6CWjThH24Ui1R z65nQmsjZ*%Ia|2CG>Ln@HtnR0eZuWK1^J>HRu%IC?_HA5~%nBTZ#!M zHZ1oIETpV{4)*{DyarYlf|C@GKK=$@3VM*xv(KD8^o7;cW@37Dj-bvaJs)Ut{mQCk zjto^Z6}J0(b?z-3+ApK3LU-48B3I8&Y#$n>y;<3|8hJ-{X^BX6=-~~AEGe#t3Bs47 z4Q!$oafvjgXlX_G`L%3n_OxMzZF?wVu28Z4HwC&|=|t3<34;O)WUl?f&MO??TF0n| z5v;jI3$0BDMUiZJ3RkZxbX+#Y*BXHWx5M&eV=6aR}3A2iTDM$KF^h}b zj#`Ut5_rYr-a>Q?04ZRzuO3W?IME)Q)?9N(<34(}K#)XZzO9=~W}b{y)MOL@+U&iZ zd#M}3z{u~MI%#xdR5*88{zXcl&_R1d7s`Fm>}K2K|bcg`ARP8H!_gCpUc*Bh|XKj6E5i*OCO2&IHpjK zN&~Nv#FS|0I^^p9h3i=<2a;a}4Q(7wZA`X$oRuXqdFP(-Ud?j=vPoNLD2>L8>bMmF zbT&HZ_&Yu;f*Qbx?lze0WRquBBLXw~G24B4qXv5)!N2L^&OTVTh9|;ut`rxCI+!!< z4t(dp)r1Eh0n_|*ZPe(O>=d7tK5x(=e)Tzdq9G}6>QP#*WuzRlCmJRAtZSPk!!*}) z!N?i^`isYp&MyY-4(H*w?@9W+7%eBJMX!{d1PPDxgiX5@*Qv;H0m|Ip62AIH<^5 zs@6uv5&j$gk#VGA{K)bzIA`Ezn=2In5?x<;(ad+1Yd!b`|0(SK0vsgXUf8L+ zo#*RE&wN_Q_b>)t2W!0cBSo_1v6S%ZS54?DFR?0PtakzYYgD2ZppmK}tl}rw-r)wV zHfmCAl6K2mJr|m2Q@U1Ni^MAW9(@vA=uF=1coQ;f>0YjYRl1o_$JebA&V8hOGcF1; z@98ujL41(|hw2TRnFVn$nj1&KmnpO;BxNI~hEYyX!~BB5Lc{(9a;Gyv+GpFY;*=QP zLKIm63Kv0B^)t*&V(^DP?t;_VMDfQxQJ!-E1{#Zgw~hC^5b&;uk#C>bPJ^>IHr9Vx zt~OPvXN!(x+bj;g8C695<|pMxpVf3Nxur79w^_)IYl zFDBx%ph3{?@KuWcY@XRyHSaKgixL{VWR&aS%`>E>(I z^q{#j(RDrXNg8c6z??El5mL7E@2Hoj;|>ZIl5xyJUZ2(}QHEk@+eM6Ez{ zx}2>eTq0D&7##yL8Ywno9`TuZ@6{A0u`2=(8}ge8<2S>NWfs2jW*y-r5}AiBKdS zPHO?p@gQ>WcOYk@@vgx;3iHjxmY0dV_?=M6IKEB&2!fVi4ZM0K$Bot7b^&!P>nQ6D zgZMIDn;PAzQJ`ya-SHy4@i1`8&8t;-G1YP<9F>< ziJX}*u98_SiT0AL7l!bNETLBlo9H-^^Mb}X=K5zwd>;z{ ziAQzYIsji5|KA{Q8at8HExwWTaW10IRk+%{TJeDY%IYE8G)frfW&t?gBVI1Er)*Hv0>d4vUS=ZN1dAQ=5qa6VUUSI61p`l%GG>G9yY& zP0g#HP$-D1V9)v>=h5Wv|87aWe{y}9QP+m483#Xy3{1HF)7H(wp-d>sA6gTeV%5u>}?<93CSo#18xLRyZ z@H&4?r**stu$k$lqa{P%_`95a`O<%H{LUyqDk4L{-sFO6{VT~)!xFT%O%Qq-qxiS9 zMaEGG{>u<JZaN=Xvo^GFT093aIZI`0hMjl9VYx$avzli|fdLBXwg}`)m3YSrl76EtbMtfHO)5M+$O$U&EWmdeYT^_IfbmE{?Au7kC^kTkPNNj;CRhO6Bc zRQF*tDvQLRgRcV(`;JM6do@!CURR=B$mp<}_`=S@9#y$31gO8*TAiFfE6{W{M$b^&^?vOaZL&@|I{WxO=~ zMF%CZ)t^`yDnKaoF2s5FQHXFMQD}5F2eC<>(tB={+%r2@1G(5wJAJo5!9hqlc}E6C zv)IwFy8Et?U$`lbr1?!lZoj5`39{P+t7Jcm1@!A*1d7Ws&aXuIuAg@n>{zt$W~FD# znixYKKka7Vr0H7b2--0wuOCyJ)^n0mbXSxvLG64m?&ZbKXA}W zS(c!pXg1x)JO1raSczk8Cx7;`!Wgs2)i_0FGq&Tp=lzGdFK;sTZLh&RAxrF@kY-fh zT}WK}K(Ijj*Rxhx;&{d8ZZXTAgxLQbFB50?rx}sx!HfwfRa|-r^tj1>?Zfs z$(9<>w}Wc*Iow^KeyC@>d}g2HIlLq(5VIUvCmfp>@XYSJKzLDO}Kmq$O!tBmPb+m5yFGRrN=7BDU! zJ95R=f$CcGad~lqtFuzFtTTSJKA3y=B6?K1*p{*3n}KkLmCu24&O>QH6F>Px@QVpO z`1V>D)AKI41V3fHH2?RvpLdkSSKiCYA&Sp*kP{^qv>P?}ZktrgHTJ;;2!0U&(CB!u zTu4Jh6VTpv2WC!8ZE?maE$yGLHvG(%jAQOJQ1|L1V*S0FqYMz+dq3(?JC1K9)k{V{ zCvrN8_uYi#T40=$l6;@V($RA;2fN1_Cy2zbWh*E12Pz3!fSOk5f}_`dtVZz2DJs}K z=NRX3e}d>Z*$9bR@V1VoG*hdX3BO5RED#ayEt3xsG9$PpV8t%Brg5{zCS=!RjLOQU z*DUhcm$L!es1iu9RS-VRLr(0r$x%Vz)5kQMYL#;*-(nknj))^Idi5x>pXr%dNo1uT zC8F#BoKixB7*`H(f4H}np3D;pkSeTP<1-?PhW^D#j~nB`9X89`V4AU_Oc@4evAo;j z7qCJpyB`mvy{pndPHPd>tZWz@gjJ9d<%z}Ep3!J%?CtI$u?MS-MALJv*24!q$nx1j zuc@SK2NvyB6T|XQz$jxC#WGv6CAd!-Jcy_{BgPQLrEF!kS6^tTWQk!x=)seGwA`&q`8D4G;m zoaS$dSBJx%P-4yXdTt-Orr4U9q)ZT)p83>{7)E0Gtb|0|gdqmEnUNruU60zrGdfkK z=PpQ-?kr7A%q`5Z7+3Ob9%-I{nseV_RN!*N|C>W7(O-RbVwfCgT;`NB3O z>@mAYCt9Z=uBHERm$+Wxg3x>M50I|;=sjlhC3a@>fv&EMxY7srj}tWWGXx@FRe1T3 znD~x2+)e4+hhDQ1WeZt~CCoISY^O6letp_1u-*4IEutgEVGxxR9FaV~s#ncN{pEUeg~45jr{lXf0y51Yg}YS+ zpJueZ-hThbi%Rq|!kQfM3*qh&ZsX{Q4y>Ve3*Fjfk;TgfZvsVVjtWLuL8K+z9aWAZ zbLApDDq&sytYb$Q>r=KdarB$N;VfLve>rAkqpvL@(kAP;%kUho_}+2h_v>o4kU;h> z=GA@JCZzuG&7ZSL|KP@Y@;oDVWC@>P>pKITr>#?|Yu~pGt1T?hH-<1emG%DF3696C z^2c7MRYKp}z7F19h}MZW$mlzI&X#lgR1!8S4lPfJc>zC6r`kTRdo=IwjrTEOl;e>L zUyO|_u8U3h4zaD8`@*#-leD^7-W-c=mgd)iGwZFJ_&qI+L`LMAmN#QW{$(y${iGwjW{KkrnPQ^!l1auF_-*vB9&V<i;S;wD*#R!Ni{vmz`GmCL5cpL4pHqxFh%3C*jklk-n_-97#D51lcS->)aG6Cc;??eM|@aW;4p+xKW{f7Wfl}29{5W3#r|2?gL>rml(Mi1 zbK<2#5Vr5FdbzLD#zpxq8#xC$^NbHNTvwdiu@$T2|01&dS8Tes&OhK&X`n`Lga4b~ z#Rv0ZLpOBh-nT`_luNb@n^SnHG_|}>O>3$WGkm!zF^E&8{f2QujLlj{Jo~oKQBwT= z!lO3_w#z*{wK74i2RE;BwK}g%YA!fGcSHq{-Y;u4EJ~8vYY14c+TEYM3D)t>qHZIN z3Vsz`t}JSfV5BtlzKA)~T~IvgdzuzI8eoG?J4qois&tx#(Cke@hSNhoC-dVxUE7l- zB}k@2c!8X(AGY+(zJ%k89(7l$O=DXc)Cab@aMNz^0+%K6h7+B?w~8cfr%vPJvw})QGw5kvCL|Qh zLPC0t=a#;-;vQ{=;V%0d)2xIPUd(_HdEq8-^=fbZw`$}+92c?PRP=bNy`Ai)rQ($z z2m9Li?`Ez|jb1aZw+(c$OhK|NmX;K*G(KwzqQjyv20t{34^itE43r8fSX`SvsvcA+ zP58D&&~N_o9Sf-+bW}Sn*?G;T&7G>}nInQbl+(#H0a zj+T6JN4(13Q+XA&PW8IsI`~2_26EwH=wKgcKEZ&7xMCa@{GeU%(bHjFp`%XSWpn5D zh4$PH*|xwaxwg%^@;AOkw11;p#yt-KPi?Pmt|l)*ZNMN8aLC*KH3{m{|R1QUG`@42h&~}JD1H>KvCN+eZwVU*m~^Q*3Tb9+Y`Eg9rNhUVlwZG8Af0>QkeJo zk(?}vH`r~@OMSiOzzCL~@NG|@`$AF3Wj#T3U_-)kR0WD^tB1oNog?<@4aZKFqZNJ^ z0>}>+&Ue$GbY8ljP*<_BhdxWuZ@0MH$zHo%Z*Ibfzp05c#cFaR{BUgeZBt8>)m8o? ztQ*i?M9&Kiqib-Fp#d~ykuQ)I*IjcWz1Jtj(1a{;VDHfnkdUJGuVM_9z)DNNfv-Bz zaMBnAIf#lp1{7sWX)`rI`~*%YInDp9$b&YiB*4`l@KQbL*qXa&D~=aL-at0S99K<) zitCSSBiXb%CWI}-KlAFD&Y40+Hb1eoMd&yt=KnJ*%BYTVzWoDG0;nAZcQD=nJg^Mg z`^7>HPy(D^r4uHZ-r^xSY_aJ1jxoFw*zCI5Q!cZ(lf~AKVgk6H9w?As0eEF5k;Z0& z^6Shpr44Db-9{~|!RX*XdxgjYivu;%dtkYgcvjej_)oO{G21r@z?(U`XmHiP0h6(s znqL`R<7E*br&Xt5Jh!hmeJ11Bw+Uj$b-g_I=3IH8R$r}|qbg<7uqSYP6@D~?y62#i zu{z-^Xg=nz$L?ha3O%oj|7)BQfWagPJ1G*C39Fs4d@f|rYhXGd-bM`2XI^w)DH8ygwH1*^^JS6&@^9WKb?LqQ)t*3e{?k73OK6`>LE?Q{1H1)vM7P3b^L*Q{tal_r>`t3NrnjPia^Lh<#Q7heR(ZKZfT#ftkS@wmp z!Sv}xbG8PR&%Vh9&#%Tl$_uHmL`A1^HL+z!M4-DXHMnSRW<)a=VxRfz)vE^=JVd(Pp#9Ku$YsjlA+}b-+BAp5#8^ zEG*1oV31)oBaL8D%*(DgBpoqL-puu^i*smbg1D#twfyeP1dWzF8rypLYYISNs>~no zzs|ZUI#mm;EA;Yw-N&nGIhd2$p#*S$bT@oy>dA9Ve|%u8hK*bAX-QshDerF;j?6C) z<+gsSl$eePQRp#h(5e9(6e4UUFF4)LCklBzzTnk5s$nhwm+f5riaew+5Pr9Vr06@c z|8@g0IZ*!l2MkqVIyn0ofT zjhx=@YwB`cx@_FLe?KnM{6``O~!(HH19tLydBIt@ECw!o*b;o-`o6-jN>xr>8DC}x=_Zs>w_;n z#SMgA8mA2-8ZgDh=~tiHmzFNv1U>}hTFz>*yqR4rz*~=``CU{(KWcNhbjdh9TC|DE z+yU;|HgYldOY?qB9q1n&Y?xIQ1X+B^!t4OX@WCG`xR^2(g!~_5D#S#m%Z22*Y|V(t z2$3-`6qk8?xXqcz3v=E$Pp)ZQRp`zc05FeB8e!#3Oq+>`NxfY5d8~*V>R8(gn5J?^g{w{%cSX>S%2t9C>324~QqXme}OVANM(*g=98vL{UyY^4_ zx8cTO^Z8jn<~?G5)XOu|vchuvRVZRm{9s~yY{Yo}==|c-Z3&PL^7QT8ZBBiqB=2=S zz|ulJ7kuId3(heEY=fkL87ucZlU6zFoY(nKBiEwYS&JLbYvW`S0~#O8#7#{qxdn>l zUcJ1BBHiCwtxFWQE&g4-v|uRu`_7X2Z${7c`M8(f6tNtXn?*EYt?m~8r@6BXh_Y+j zwMr`?m~@FKDIn6Nlp-S1jgrzm)Bu8lJV-Z4C?MTZLyOWO9m5d9&QG^-io^`KvUFUTiw_4BB(ByTpcIH0!n(MwfaDdPre+zaAcm887>*sgF z{i1$~@1M%$?;7I|`mCx?)5AY$4=hf96u7~K_TO?|{L9y?N;+=M-^catxpeBl#^%HZ z1REKknYFTVa*0a%W>u-+726{J-SgKH!PhtRUB4u9mEM*IB!b`PpZ?=7YoddLIle|e zFHckg|8B_&0Dr&_#C@nrf)QRO`#0qAAfVX}a+iuAk5MD9ey5j{w=r|X)weod*84b7 zzuG~jPz((AcfpK&bh2S8w0wuI_a8lo!ueZ{#hj|&O8FYv7Sn@k%j^Jmuc7&ggR!D- zO=#N!G8beOcViw>*KJh_++_`Ewm|1WOrBw5^Yz&~a`eJXcxk?mMBOa2TXBI6+mNyk z(1TzX=yxBDshE!FYoPQz=Ye~;zn{~7?}T7}7Emwndvssj0UGxC*V&-J1_QjyjdR1^xog%$As)}ExQxgw@HOeL-nRSu?ClfH|0j(Z68qpp+aTc zs3A4S$><7$2IJm(6*vF!5k_4{Mn*<*bWXc{UgmmlPQOW}%kn_k8g@hd>&iN0Iu^Jz z^14$gTMVPM450=9dCLj1bw{(oaZX4+_fU#h?D zA|p%`ALXS0l`xSH`!1QR! z!@ds0*E{wwQ?WTYcsO|q_13^+kZyZcDZ}7GQMCkr)#}!$1Q;NlsUDRl&I2Hq<#9Bu zHUH|0Q51-o=2ce2X=ExsOlrsIx%9kR$Vm@whXb$ts+H+6$3et z2vWXIIeKyi@ui>7M~Qm=Da7{I!a^X6%Q}&-?>x6Kp*(YYsk6X+^V^f`NA!tX%|Tnu z3XEOB7x>DIkK-3KrPu!1javJGD$w>#N12!P38CWoUKh^9!d*~4y zCYoLrP!LfQdry=*HY=-&8NaiZ1E?POGS% zRxLN@1~P-ERP>kFaKa2R`^K9Rp5oUru4~r-`6n7U(UgkW8KNz)yRmu0c^w(8qQo_` zgwH2->~?!otEOqP&v4MdygYLBAmb&+S8!|W+3z^yM&Z3gDE3GJ?1PwFg6gj`K1^Y; zov74UWvbmx#U~=lhoEex>N;{(=lEy#kDXSAZsLS07kTt$4XF>_yKJB%Y~T&bIEh<5 z5Ix~mD}&YFZKXdXwco^W2%)8w7RY~Km`9%bBU^xb5BzuWJpb9(1ANc_rbkMu6zYBZ zesTq3VurICZ3+C^ZT}~fcHCNQQ1D-3_kgGJKYT7u9HDgCC0;;SPplq%TVu*%_O0nllyR?t2cWUf;Adzy$US1X z5u%bHV8_Cqj7`(#3ZU`g{nz#w5;i?zLOmD|w~}!H3IAD$Tbcm)4P;GwM<`b)Amja8 z9=ulac4JultKFc^me@DT0;&GOi=jvsBqI$+XahZOGOy9wARc)@tu@1j3^cuEyVr8X z45&V-OnVKV#BXck)&vhzaL~d{InZ^Vr~&QYtrxW8@crWsA_A) zH=Mp@q_)ZiUa721L38`@`;3g9ihahFiCRdp{xJ2T*rfaATi3I3;3GZzdJnl&Jh}^g zOsM-Z-VDL*!Qc>nx{<-|nlg=EpwjmcbNp9yNEP%(Rp*{ub-AIA@2m~?Alpo)PcBM- zaajwAhC1)%KQGtE%xJppx;W&udWkaJik8klSVe7ZF z{|%eIM%08h+jPC^^wwuQq}(^(2+9i(Q;9wSG1Eg@sjGT%@sGlZ+COQC94XXEI6p0& zt8s#&3{r*udtEa;9vvokpIwWVmP#G>saD;#V6jqVJ?e7DF!8K~(pTXdA#)?!-(A#A zjM|)(L`M4NFE0vK_=H!Fbm?1`7%q+*o)|TI7QuQ)%trbo;=FwBsDJ2x(zm<4$91(} zm*Jy}(a7raNo+6}|F&P%4a10vB=n`w7ZvK&^A(1_f}s;x0l*cekG)}p1k;558p~t- z8Cwh0d;`19*esJEw}I_V2HX^kv+b0kl2UYyvw7Ff^Ry(Ttr2jlcmQ@^-h2J*1G(Er zPV?WN>KwQ5-+usu(H>BK?mw{`!i$ULH8Nx|?~A*xoRpxq5Xz=>xt8wSwq^pv$lP{j z^j2ZOV;cYS#J$Ek4h|*VsS*mI+pKRdoVlJ;{-LkK6S`w8(HFw!+8M(&DkQYUGBdZ_ zK-E7S4o+$EfDG>)WCOP&_c-J!z07 zewoY9_DP?Sxp~%>-b}tXJgQ;A2Obw5wImtW%3sb50VLq(PkFY2tUl9m4v2Q^&&<@O z0@g(79L;lELyOV%ukMx?4-<73f6&5JLO(ThI{fukO7~9Epw89B#_R4C84cwtVR7iV zK;w%Xp3Jw2B5)R|{$=(n;Gk;Dv$~&{5*QD&+W(d zt?BSHRJqPM($2k=*XxBUwlFP=4)0Cb^edU?daR902PUjmaoe+6@480+4fL+y!EQ{n zcf@Vbw_zGohaP!(ITz60sQ zu^^z-4Q<>Q(98R~ol|A;yfa`|Twf)7a=1fXP}ZMSGkMgkVw2PsjJ+oW#|UEKiaCzG zTRdv-O9!S?j$R!482WMSsu>++H^0}?E?FkTT}dI4 zj8G58k_QIs^_BwfbZ6wh2Udh!k&SG^fKXpq<#i6`g}Uf)&-eZPo7N}8{6cHg!zCm# z6q2kGLPe3g)#iZNu1n2U?`mSwa*KNWSy+M0TtTCmrKN*lC(SaqzuDW92%;3`I>JKF z;I;5Fp{Qq5s~$9%b(uwvyraXcUUuF0T)Q@i-a&!$H_HJ)B-4?1JH&bM336z;d?DiI zBCea2(O*`d0Oen>yiZaTY?f@MvZU>Cf+!t0Ebj5Ix}b56=O*8RnAd}2%ECD0L*C{5 zw6;LotZe85meC#@03e_T5YDNBD}4_NsVWO1Ln)tzZRBLLaHZ{*5L@6$cDi}{3YTlq z!7cVlMOVLFylMSrz0Kuz;oDvYdI%1lCNB#Ft%!`dlMEMNJj z8eLSyx4+wvZil`}ixw?JMHHFb5(i1PoiwKBbIL3+|_DD%tIo88@F^80e zG_CL8A*i~ghlSXU;Lf`gE~uQaO?aHquoL747RU1 z)$1~S|CX=BW%_c-w`!&Pyip=Gr{>{};XKV~$GNGPAD~Rda0Ur=2fRcM;xo*9svlga z$LqbSYF_26Z@^Z0K=JT(&F4KW`+1({{bgBiMZ8)mC;MfXZ0rj|B;$wkH9L+{#BxP5 zjx|TN#}BX@3s1z>?0ZW3vEQmkY%bTQ^un6!P-rsvl8FiJ8oU7r7>{c=hAPLK1zSrW zGoYnhmLf82$ac#Z^hT-Mj(}Bc2%Y9DsWf#}Lbq@b``!lQJXo-LnOE18r{^sEsS%Xk z@!@LuoDbt9q>4i0HvLpP~`$3#{Zx7w@nrl$6uJXw`Ggetm_) zwPNJUprq`))PK2Q{C(kn&@i?>bab(PyZetjg3hYfLM3*bXQ+?xG5fH?MCTEgb2`o& zQCxmwP5pAX<~~f8986G&=3VHC1QPEqAc4$$nj!x~ zY5D9}%gHN%uoYHQ_VkFC|9K~o)!0YJ08nz#CV11Jd&|h@#5UxOk4Zt@K3Z%GEZ+$g zjvDV}Nj&yrN7ZX?oB#lM7AUhMSeM@&p9=FT{7MGj!*K8`N2Fu~oJ(a&e_@+c^}U#v z%EqGS>kH70%H@B2na~sqDhL{dgX6cxh?<$K&)-)PjlCvybQtYj{#{R}9L+usbIs4_ z9ocR!vFKwE@x(vDdtQw7+NkHGfOw6SGL%q+IfGHfJiiM}Oxop|%0Ff<@hgqLeJ0`G z4WJl4ZXb~`K1Z#<$Nuc_tm&yUEKsau2AWr^=xxnyPJ>060HXXkXyY1D&Hh5Nh98-Z z-U&$bs}kwsS-V{lE((IfqOu<3iMj`zqC(MELO&QuCGwfT@v2Z{$>5fy0G{rO3c4gJ3H-458U|;&oR(WemLWB;{+gq z^R^u8oetJ6sA}RMUR;gW+tPhxQUS6Bc9hhh!8>lbF9;3!?qI>1CW!q^aOSf7ew>}f z4^B&&&Vj6$Z+)nd96bB&d0~F`lr==UTu_i12~3{~wfnJd=1}`1meJXZiRiqgqZaF! zjW@cS6j}t!ztNcfPFQ?wD}UGKDty%fA7Q)?_e=T}29QVGg9jsP9Qt}Y8UL*_<4%=g z#&)v$W6r%73uVv|a}nO=t?vo~^G6VicA^vV%Od4E<|s=Z#CKBEb0BlI(>yM z@hORmH4H9*|7l%@dIK(MRvtQ@5}*B$F5a)WqNo+JKfxWAf4#g#PFJW0wQcK0#4bA6 zA>hrfvl09uPONN;YjlW!Uw^W17@An$(2P#K;?xcDPRCsPaYU~C$Co?umdiBHR|_>{ zn1yz0U-I7fvHW3RYArQU&}dNTb2495(3G2~f#tTi>;Z z6x`b<_MAy@Zw02#9;&s+6!Y3RFJbWyALqXi#Ml&i?MV55 z4PrEfcw)jledWmg@2+T_pe-_cL`{5+8V{>nk~7Pi#ZCEgPz!V$#jhjyTvH7Ckt!PV z`|pH0-W>NnosAYORz!DZX&LHDc^fW3Ee^wFvL5lfDYABKc@^=8&S#yt@mGqoNqIXO z!YaBBq*!ar8x}v*?~~3R=^cO-fHGsV{$*20X^N*%Y>mMMLwBVap2hWiJ4T~{*&VrG-Mz>U&w{?3WCV>ds*Q*UU<$1PdNkh zGwCOm8&<_a{)&5R!f5AQYbBB}a-pt!GaZo1&;y3Y@NW{g8v9a2F%87 zKvo4^U-7KJU9{R@>2=jX@9uW|$ODdV1g!3Uge{5YqR@AQ`5_VG<*IkDS-&3mT2gqV z?PID6szUw4M9nFK9UV@c_u|bpPqQgKh-5)C#?yhzTtSH*aBSOZ@dCgJ8`sT ztV`L*g>iNkp;pGOGi=PLmmsTdSZCYsce+xJZ=oQd3h9Qkosj8M+4sHx%%N}bqz>>= zferY2nX=`)CzlP}eSio15Qnq_m^zw$KU*3A!tG4_BdQX%S=q|7`=!FhGP$JXt)K@l z-dtd1D+8el$f#7uulM3OLwxo6Qg6eRBntJ@E?_I*$ft=Ls~$R^89s&@ICs9SxtvmN z>*-u=tMe9A-a4{cY)ypH1QxeQyc_Bz18_yGm}xVx#!>V0^AF+NsYd*2b+mX z(0dsNq;(sx09CTFv5kYZ!`9K!u`(gyDja|xY>6lsKCZ*7`YOSlT+h@r({^>Fuo4&* z;6D4vE8DN*8CQluYtaT=8Sg}|sC;;oYDz2eEJ0Li3~X;J*%`cs-1fdd6|~6RsUJJ?f6#ydZaI;9OxpN z^uKl1r-odC=7X`S5(=~&0!m-S^vU_Q*_Nqu?=onqRKCC?8UucbvWFD3Xc*1n=Wky^ z#2MOX=~jD$+C)%9OEB=$mJSMZYX-8s*TO|j>MM?ERseQJbhSa4yt8VgrQS}MC+q~s zP+;9AHVBHz@SxorU7p?!QbpKZfC|B!Ufp%=FOjMo>?$SeJY(NRh&gJ~g{wlLUZ>u){SpGc0Lln%P6b@*nWh(UsPbB1dsZ z2eKJh(k9Y)K9wNy?(lccxuN5qiq#&JL2^wtRybuYha0dK((^Jle)b+#J7SqWws!Iw z`D>g0HX4=D-F?Z$l^rlSkL5(lba#|yjyN)2kn;J8m@;a1wO>YKEOOR}l&CpYrMY-B zG4ZOc&$@W0hD-I__gy{7nKoBtI5zN7!Qha``XUp!rDlb$?N>vejr*ya0 zxuAr6Tz#nwkSfeIV$uw{Jm&HN*0n!L5P58PUB$uoyZ9c~kWSneY*127nvUeu2=4=<7$qydkzsQi5+>nl&gFb35! z7;9RC@K71X>5330>v&Q3MR0!&yyY$$Nb6!SKjo@Y`IB9>PLEKKiEyERVVBx{gnb=v z4U9P_IhYe|*pqS!bWyZ-9?iFcG|9>;Y|4fI7*omz7E)XX;583>T_54b$iDraWw6TY z_^K&7cF^u)K=G;KBJ>xQb@#Z)dGyMekfS1Q|%P;;+ z4O~k9ks07s-RO|P+y?}VC`lD`+{w{q&<=|J`mTMWfqW<(Gmh|cuHo>>1Hu?}IC>q! zxXY6|3wnCv4tnG8PMS;*U@8iUlcWc&5A$vU0s`+!?R>MahbRse{^doUrVLX zIVjL)(%$+z!HYC8nmg(ngQchd;|E6vRbpqPM36p`Rg+F3b1CA&z4JHK=0WF5bY#wb zBz|x1NZ@`)M;PYxJBE&q>|w0uDH$$6`-S$WT=i!^KnVJsx(d_W9u7?u(`T&XRe)3k z`VqqrcmR}oYjBsqz{rI{2vJP|gWu*-n7Ipq1j-OSoE%M25?S0%5uehoHKrAw@u23P zmvc4f52Zb0v(!rV;z}J+nfPuaQAF+@-?KKM=A5b%wfJ+&C@BCk^fx_BHFf(}vheow za#UpGyAOOLcvD&dKPJLjvDUv*6|kgq)uVdMl*UGRDWPkTeETgK!U(~=d$KNB*M7_j z5ha#@$V6v0mFZEQ@pI=dc;bNh;gpu(kGXk!+yL~!0_0m zf9dt({>y*)xaj7FhSUXrC0PoARHhvWW6h3uSLer%`*O{2+ozYuMx4(_3KC;(sNUty z;0(cZ2zdt`Z};)-yUkWn(NVF0L{k)_&z{WtjQ8`ib`)K%qr*6@OrqW(l8T<58#F+9 z#QWM zL0U6(vvxPe3m3{2v>uB2OGc*53i+U-zyOPmN{C=m2&a#=L%{OQT+9r*p(~BX#WcP^ z8DQlt_*ZCXEW!4o5u@>8HU6EA_}zTANk7FR8M)Id&_X5#R%16$&4J-#P(kcmvNqxwY}*)14(dyiW!^ z9W&ZtTRTn?#^YHtxv2f&FH`K&4s8HOSVUA5(r~OcLN7QvZ*)-C701n)r4%3c?aN;v zpex0-yMo98c^apJ(NX^5*+d@VQI19#^f;)Hn=SUzm)Rji+rpWaR{j(y4OSX>?SuM_ zmAmhu>`kMFx|-HnAS3Pq#wR87!1B@x$XN6i3VR{*VIu!{QFcfWS81YvdAsuww(Fyc zRP4&ALAH;aQL&+fpfOEX2|3(YZ_Q-5#GG0rHi`$J#uAlepGB!5H^wgN0I+|}=Z3X| zzfL~^7$XJwVB3{?D{V0Bs+5i#j}xR@#c}OD08!@BHJB#y3$!!%T?n}%kRYrawAGE@ zy=)WWN-~C2AR?!WxDrIl*L$Mliefu+MqN7Fajw3;S0liozKYjb~=3HCWv&VA#d(kSUt=)-KR8%bRD*O2OAaV`752d85C1jOf zBsDdXC^4g5_osUa&csZTv6RNpjCfjA}yrW6VR3DTy*~8 zT?fVZaN|C1ld2rj3)Y0^waWtvs4u0)nRo+!#e5Kg4H_FeH!D){4&c&VBFLrkctPOKLlUe!PDv-Y;cg-7uZYI`Cpx zM)9j+ti`LoJs_w>1)~qAAu0Pi0HMUcmkj0U3&^%6)t0pT!mQ95gRN+)M78x7tX@Bw*Oh{# zhJ|k;>!il1ZyBd^?X7SMl3o>l+?(P|_-1(p=eqd&L-q8Qf@x;m9h+)WpQo=64+nK| z%88*O1HHiTtGNe@z6kBb)FZWgH}166*`67+hH`fLd}*YtOh?Q zTj{CTwSizy?1 z0C-a%{0dlZc_vGQHYulX=V&Mk+8g+oAD-lT8aEv`|_fo%CymdX`nG-=-NcFfOk@9T5Y}K%`&8MSsr6qyW{~fVNT?WV2eQE25&Fk zA|4P1rJqTTt{sh*U`@(fWUjRq|3#ZS0(zJS;X1YSY4L-L0(5OP*@grpC$s4j3i0no zW65r?S;3gmyq}fatx4@@*#$I>~PYxV-dH9_0FuUtOmU_+wL+) zpzxJL!`7kE19r(-?|8xL<~1w<{FE_-kjba|CoERr960MKuOOFeTN+-g>DrYa`0O^} zhPbD^>#plPWRw;CLLXpVj(x45WlHxaoCo9dI|;6KJZ?1CBj$xk2B(P8V?vsCO5!qehGl6YnvUq+tbDGsZ#g@= z?HEcgCbuMChij%Yr!0=zVV62Ew{gAz^R104whd9@CB!}_7>R@!+2WO3AZs`|_8Q-UU(WSv zA>(il@QXh#YQDOy&7hwhHbD+Ikuq}NKL2^JGoFKE_)JK$GkRB8%6_-6qkPea%bQ^b zygaw@V+&lre;M86T|8oT`XlZpX#!=ZD6^U@x8r#Q3{v^>8~+;Z%Yp@Aotj6T6k5dQ z2UR4WAcP}1Z#zx94=N9UaU7ib5rl=>stw7I6&;OZiNx9)CS-ou_tWp#r+)| z^-45qiSfBGX4~8E0Y#=9VtCQ+#45R*EybpSib zih#LlC3>~nt&G&y9+n&u?LK07!xxU!4hP~YbXPE-@9> zzu$4Nie4L;o|+-QulPE?_)2#?7#j)x8CArMT7VjoJg5fYzx&Ws_5w|RBV=VbU+LN1 z_dC95on`FK;7XF9-K6%E*9r9Z&S{PWrbN35jhQxZAE1-|8%FhR^|Eis;Q{#RMP0>!4J8{V1F4f zB<69eRXol_qOt`oLLxtxB$%VxiadVrC9t|}hwKxSue=D;z!O)4ahWzgHKL~*N~7pz zoq1o(o~|cRr$AhQX#>|b=3lPua?jxh9(8T3VW$xaW}sy9+_kSBmwMeAh-lW~w=L6S zq@&}yXXK*+B*NF~Q{D9m#ixzx4{0~B;Ie*Q$G;=DJhjdY7S`k)Umw31&c&LpTx)86 z+Ef%=OY&gPWEqoo(!S|?tjdd?uCh-uXSiEV!!!6`i)&IEge}0$q&Dbjgb<{q$=fZ%3Dtl`dK$wBlOedd zBf2W)w^OU|_zEV_mhOUU)yM_7vGklc?D@TWqBI@5=eFzD=ScX0%n4Q9)rHLj*Z+uh z@G_20SDj7Mi-6ZlU%pg?mr6jI(8_OwtsdO)+7uF)52Uq=Ai2O!vv?9Lia7^Te9ME` zW?1z4KU*;8vwbx)by6a3W+}sov1`%qmSwK$TV$;JiFu{r+&-LX+suu8$_F zZ)|y+nqj&FZz{}}4Mh>D!91tbW&WR@JKxyF-TG;A^dqH~XcfEu>!jaV`089^WRjp& z9;yILVCBYDSWg>LU7(s@D$U3X;e>6ur+J6`eSXWw&~bxg{sa7&h;xg)?Ewa`_P68Z z$bJTi%m=ZY)0%J~a@<96;M*1vEG2yh_{*%mL6u}B@q2-KJxLXr_oJ^bP{E%3G9O#^ z6`1`WU~gdT@4;Om2q^T$0qi4){z_%XLAN#)s1AG!Gj+<%^RVJS9#acsN$P|y+Wv|U zXEQVNK&~45{%jEAHBpWS3@CJoKExojYpb_pO&_r0K(#3T{g=NImBhtdw=&zQ9h^X6Bc@P=AHE)fJR)koZ$RF z-w5~V|J&!Ie!!>OF?3U{yQa&!BkD_-iC%W_>!okMv)!^WMCWCn4^*qhG5^>juEf-6 zpi;ol1}JNO2y-rd%oyX!w|iIOG2sd@+iMa2@!&kt!HZC4izOEn-=A08npVvia{0VA z{-nX%!p!*q~xF_cWXql{V|Qw2e?cb&w< z#18nbC5Tq#WMmZ>lx;qbFFfV7VL*M`y+k(%9DD^7Y*%|GYn(Ifr!9uikSUMsZoaT{ zBPPa616lbrk12+T+T<=@STU%1a7n?y_{(36!(+4zy^fq7r3PP{s@EfMM6XY?*Lz~nHNgER^ZP7M*>CpUp(^NTrIM^U8HZYbAKpzX z?eGljd7V!1C~`d3AfpD54$w|f_rtTRUB4sP>PR{H9hvBJbWK=TTUp4y|L(I#pL3cN z!5fQiuwmw^gy+uVK^V`tP8G@`SF0*@u3Bi)A%JGp~A;5l$5Y*AiUS_$*Mp8gW3ex$BLUj+hr1NYUZ(E$PWhb(zXqn4eifB zet*|uWl)hftgcg|TKY`xrrL)$N%DkbXYMS;ao6&UMeLdshDb@Cc*mKf-6`CNH4uXw zTypO>`0`ZhP2>K7wSqCJOa^~eS59-%>3M5LmiPXD6!+er*l(a5-~aXL)+wVq(*As! zIbux&H!h{kWS$Hi!XIg zyrV;8vT;(3&Awsd(Bz3n)E(Q6DPK#&dQTCjjfCZpL1fZLM(ef!yQ;ThI?(8|Y16T2 z8xOZnsl$tXScPzuEq@WBR zZzx$;RZQvXqtu8WV z)v!+6c45&zR@2tny57lVQsPtv)fVojHW|hFncLafeYLX1V%?l~Cn}tHUUaX&dL^S& zs@|75aqWeQe+U+XBA@tR#+dSwr{>PwLg*^nt&VL*DUX2yE-8+-co^ct;Bw63N#5*b zo9E2&nob_^ZuZG_CjQaA{bKBjov!;ul?b?S?wF3Qr+Wc%vOHS_YoQ>v52aqWk9v^t z(rCYjzpS^^5p!zD>f3ikUxQcnMvb=@dySS(2*5);m$oAkSP|G)X7ub*clk7<59EWZaizaHtM!NXHRrxHm&Cgm34{_eiqBiW+6 H#{T~cazPWf From b0493a478af4d72f2b24e4c80ce382f595015d6f Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Thu, 18 Feb 2021 18:26:01 +0530 Subject: [PATCH 047/206] corrected layout issue as per user report #9174 , so i added one line gap . --- .../hello-for-business/hello-feature-pin-reset.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 2a553e3421..2d44a36872 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -35,7 +35,7 @@ ms.reviewer: The Microsoft PIN reset services enables you to help users recover who have forgotten their PIN. Using Group Policy, Microsoft Intune or a compatible MDM, you can configure Windows 10 devices to securely use the Microsoft PIN reset service that enables users to reset their forgotten PIN through settings or above the lock screen without requiring re-enrollment. >[!IMPORTANT] -> The Microsoft PIN Reset service only works with **Enterprise Edition** for Windows 10, version 1709 to 1809. The feature works with **Enterprise Edition** and **Pro** edition with Windows 10, version 1903 and newer. +> The Microsoft PIN Reset service only works with **Enterprise Edition** for Windows 10, version 1709 to 1809. The feature works with **Enterprise Edition** and **Pro edition** with Windows 10, version 1903 and newer. ### Onboarding the Microsoft PIN reset service to your Intune tenant @@ -49,8 +49,10 @@ Before you can remotely reset PINs, you must on-board the Microsoft PIN reset se 3. Go to the [Microsoft PIN Reset Client Production website](https://login.windows.net/common/oauth2/authorize?response_type=code&client_id=9115dd05-fad5-4f9c-acc7-305d08b1b04e&resource=https%3A%2F%2Fcred.microsoft.com%2F&redirect_uri=ms-appx-web%3A%2F%2FMicrosoft.AAD.BrokerPlugin%2F9115dd05-fad5-4f9c-acc7-305d08b1b04e&state=6765f8c5-f4a7-4029-b667-46a6776ad611&prompt=admin_consent), and sign in using the Global administrator account you use to manage your Azure Active Directory tenant. 4. After you have logged in, choose **Accept** to give consent for the PIN reset client to access your account. ![PIN reset client application in Azure](images/pinreset/pin-reset-client-prompt.png) + > [!NOTE] > After you have accepted the PIN reset service and client requests, you will land on a page that states "You do not have permission to view this directory or page." This behavior is expected. Be sure to confirm that the two PIN reset applications are listed for your tenant. + 5. In the [Azure portal](https://portal.azure.com), verify that the Microsoft PIN Reset Service and Microsoft PIN Reset Client are integrated from the **Enterprise applications** blade. Filter to application status "Enabled" and both Microsoft Pin Reset Service Production and Microsoft Pin Reset Client Production will show up in your tenant. ![PIN reset service permissions page](images/pinreset/pin-reset-applications.png) From c4ee6de0f6fdca244ebb8a9939cd10c6f1a5e1bf Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Thu, 18 Feb 2021 22:35:17 +0530 Subject: [PATCH 048/206] Update windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-feature-pin-reset.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md index 2d44a36872..35853c7fd0 100644 --- a/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md +++ b/windows/security/identity-protection/hello-for-business/hello-feature-pin-reset.md @@ -35,7 +35,7 @@ ms.reviewer: The Microsoft PIN reset services enables you to help users recover who have forgotten their PIN. Using Group Policy, Microsoft Intune or a compatible MDM, you can configure Windows 10 devices to securely use the Microsoft PIN reset service that enables users to reset their forgotten PIN through settings or above the lock screen without requiring re-enrollment. >[!IMPORTANT] -> The Microsoft PIN Reset service only works with **Enterprise Edition** for Windows 10, version 1709 to 1809. The feature works with **Enterprise Edition** and **Pro edition** with Windows 10, version 1903 and newer. +> The Microsoft PIN reset service only works with **Enterprise Edition** for Windows 10, version 1709 to 1809. The feature works with **Enterprise Edition** and **Pro Edition** with Windows 10, version 1903 and later. ### Onboarding the Microsoft PIN reset service to your Intune tenant From ac85f39c7bdf19f4eb8ab37ea84541ed13925db1 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 18 Feb 2021 14:22:08 -0800 Subject: [PATCH 049/206] Update windows/client-management/mdm/euiccs-csp.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/client-management/mdm/euiccs-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/euiccs-csp.md b/windows/client-management/mdm/euiccs-csp.md index cf03244fdf..8ed1999e86 100644 --- a/windows/client-management/mdm/euiccs-csp.md +++ b/windows/client-management/mdm/euiccs-csp.md @@ -39,7 +39,7 @@ Required. Indicates whether this eUICC is physically present and active. Updated Supported operation is Get. Value type is boolean. **_eUICC_/PPR1Allowed** -Required. Indicates whether the download of a profile with PPR1 is allowed. If the eUICC already has a profile (regardless of its origin and policy rules associated with it), then the download of a profile with PPR1 is not allowed. +Required. Indicates whether the download of a profile with PPR1 is allowed. If the eUICC already has a profile (regardless of its origin and policy rules associated with it), the download of a profile with PPR1 is not allowed. Supported operation is Get. Value type is boolean. From ef183a2d25cf983dcabb319ecb2d450a253aac04 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 18 Feb 2021 14:22:18 -0800 Subject: [PATCH 050/206] Update windows/client-management/mdm/euiccs-csp.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/client-management/mdm/euiccs-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/euiccs-csp.md b/windows/client-management/mdm/euiccs-csp.md index 8ed1999e86..3ff3575823 100644 --- a/windows/client-management/mdm/euiccs-csp.md +++ b/windows/client-management/mdm/euiccs-csp.md @@ -44,7 +44,7 @@ Required. Indicates whether the download of a profile with PPR1 is allowed. If t Supported operation is Get. Value type is boolean. **_eUICC_/PPR1AlreadySet** -Required. Indicates whether the eUICC has already a profile with PPR1. +Required. Indicates whether the eUICC already has a profile with PPR1. Supported operation is Get. Value type is boolean. From 084b054448a456a5446c3e8058eb617e4d89a10d Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 18 Feb 2021 14:22:30 -0800 Subject: [PATCH 051/206] Update windows/client-management/mdm/euiccs-csp.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/client-management/mdm/euiccs-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/euiccs-csp.md b/windows/client-management/mdm/euiccs-csp.md index 3ff3575823..a1abb178fc 100644 --- a/windows/client-management/mdm/euiccs-csp.md +++ b/windows/client-management/mdm/euiccs-csp.md @@ -64,7 +64,7 @@ Required. Current state of the discovery operation for the parent ServerName (Re Supported operation is Get. Value type is integer. Default value is 1. **_eUICC_/DownloadServers/_ServerName_/AutoEnable** -Required. Indicates whether the discovered profile must be enabled automatically after install. This must be set by the MDM when the ServerName subtree is created +Required. Indicates whether the discovered profile must be enabled automatically after install. This must be set by the MDM when the ServerName subtree is created. Supported operations are Add, Get, and Replace. Value type is bool. From b402ef4ddd6da32ee60ed679ac4c4d741ca0746a Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Thu, 18 Feb 2021 14:22:43 -0800 Subject: [PATCH 052/206] Update windows/client-management/mdm/euiccs-csp.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/client-management/mdm/euiccs-csp.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mdm/euiccs-csp.md b/windows/client-management/mdm/euiccs-csp.md index a1abb178fc..3cae935341 100644 --- a/windows/client-management/mdm/euiccs-csp.md +++ b/windows/client-management/mdm/euiccs-csp.md @@ -54,7 +54,7 @@ Interior node. Represents default SM-DP+ discovery requests. Supported operation is Get. **_eUICC_/DownloadServers/_ServerName_** -Interior node. Optional. Node representing the discovery operation for a server name. The node name is the fully qualified domain name of the SM-DP+ server that will be used for profile discovery. Creation of this subtree triggers a discovery request. +Interior node. Optional. Node specifying the server name for a discovery operation. The node name is the fully qualified domain name of the SM-DP+ server that will be used for profile discovery. Creation of this subtree triggers a discovery request. Supported operations are Add, Get, and Delete. From edeb093c94e4ebcbc3fe3e8d6a18d73b0f9df8a7 Mon Sep 17 00:00:00 2001 From: Kateyanne <67609554+Kateyanne@users.noreply.github.com> Date: Thu, 18 Feb 2021 14:36:23 -0800 Subject: [PATCH 053/206] Update windows/client-management/mandatory-user-profile.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/client-management/mandatory-user-profile.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index f082708dbb..f3a6ddd33a 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -82,7 +82,7 @@ First, you create a default user profile with the customizations that you want, 1. The sysprep process reboots the PC and starts at the first-run experience screen. Complete the set up, and then sign in to the computer using an account that has local administrator privileges. -1. Right-click Start, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. +1. Right-click **Start**, go to **Control Panel** (view by large or small icons) > **System** > **Advanced system settings**, and click **Settings** in the **User Profiles** section. Alternatively, starting in Windows 10, version 2004, open the **Settings** app and select **Advanced system settings**. Starting in Windows 10 version (2004) Open the Settings app and click on Advanced system settings From 9054e35bd76f4413756511d138676997f82e9f06 Mon Sep 17 00:00:00 2001 From: Kateyanne <67609554+Kateyanne@users.noreply.github.com> Date: Thu, 18 Feb 2021 14:36:33 -0800 Subject: [PATCH 054/206] Update windows/client-management/mandatory-user-profile.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- windows/client-management/mandatory-user-profile.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index f3a6ddd33a..98d50499a0 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -100,7 +100,7 @@ Starting in Windows 10 version (2004) Open the Settings app and click on Advance - If the device is joined to the domain and you are signed in with an account that has permissions to write to a shared folder on the network, you can enter the shared folder path. - If the device is not joined to the domain, you can save the profile locally and then copy it to the shared folder location. - - Optionally you can check the box “Mandatory profile”. This step is not required but will set permissions that are more restrictive and it is recommend to do so + - Optionally, you can check the **Mandatory profile** checkbox. This step is not required but will set permissions that are more restrictive and we recommend doing so. ![Example of UI](images/copy-to-path.png) From 3dadf158f9811cd2f4591015b2cb7352a3024049 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Fri, 19 Feb 2021 04:13:53 +0200 Subject: [PATCH 055/206] Update gov.md 1. Recovering the opening paragraph that was dropped as part of a large rebranding PR. 2. Removing M365D from the "applies to" and removing the trial link. --- .../security/threat-protection/microsoft-defender-atp/gov.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 555ab3ee79..15dd5599dd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -22,10 +22,10 @@ ms.technology: mde **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +Microsoft Defender for Endpoint for US Government customers, built in the US Azure Government environment, uses the same underlying technologies as Defender for Endpoint in Azure Commercial. +This offering is currently available to GCC, GCC High and DoD customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. > [!NOTE] > If you are a GCC customer using Defender for Endpoint in Commercial, please refer to the public documentation pages. From 6d4ddaec2f3b563cd2e178e68d44e9c9308d2d79 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Fri, 19 Feb 2021 04:16:57 +0200 Subject: [PATCH 056/206] Update gov.md Fixing the MDE link. --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 15dd5599dd..08b1be6159 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -21,7 +21,7 @@ ms.technology: mde # Microsoft Defender for Endpoint for US Government customers **Applies to:** -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2154037) Microsoft Defender for Endpoint for US Government customers, built in the US Azure Government environment, uses the same underlying technologies as Defender for Endpoint in Azure Commercial. From d269c9cb605d0ffd57a42c40cfbfc8cf6da5aec1 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Fri, 19 Feb 2021 04:20:22 +0200 Subject: [PATCH 057/206] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 08b1be6159..3c7f03cb83 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -25,7 +25,7 @@ ms.technology: mde Microsoft Defender for Endpoint for US Government customers, built in the US Azure Government environment, uses the same underlying technologies as Defender for Endpoint in Azure Commercial. -This offering is currently available to GCC, GCC High and DoD customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. +This offering is currently available to GCC, GCC High, and DoD customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. > [!NOTE] > If you are a GCC customer using Defender for Endpoint in Commercial, please refer to the public documentation pages. From 982d1996af4fe9ebe0f7100aa5f308590228e99d Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Fri, 19 Feb 2021 04:24:07 +0200 Subject: [PATCH 058/206] Add files via upload 1. Adding US Gov URLs. 2. Updating some commercial US URLs. --- .../downloads/mdatp-urls.xlsx | Bin 26000 -> 39387 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx b/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx index b5683ec66f0cb1daf7e6e7c898378ba26a12bfdb..c622cbae6ba5145c511c8b065959e568c371f6c3 100644 GIT binary patch delta 32070 zcmZ5{WmsIxvNrAncX#(maCdjNpaGI#!2>MZf@^TM;1=8+LU4ixcXx+xVDEG8z26V! zVS1{oOWt~`yJuGPFyulF6uyc)Gz>Nb90URc1Ox@d;(PLnMMwyUROBjrN+=*v|KoxP zdf+nhBbur4w>qWyAT{RgY&`l4Oqo0AzKH?7mU%;$zT(GYem(wtY`Wj3qK}l>!x_iF zkVt+XcuX#=kx~&HGdim(Y5JC5MK}!0J+|BnxECUs+N0_mSE}h#I|~B0rY`lUGJ&No z8pV;kEq_w>-h9oPfOk5}yQ~7>6Nek7Aop;XRgIMjwVSRY$4>*`QQu~I_2AAVep4oD zZ2eNru7pG8a*SFeCyFpL)nTf!+`L6L&{JPlTy=Wcgtr?jCSg@1zVSDaf{>z5-#oEX zX4n5$Na9)6eX*Qwa=7XTsMgqVG71!B(oCE7qhQZSD?(;l@-x>R3zt@)>Mkj&B=EZA z%sOVVOjcjx>iwesG2P9s#l)@?M|F%z8+F?5`k8`fix3u>-S3|M1+G(v%S_KobBaAD zfk$mwPHAtHwK7RUe$v<-4o7&5RQ<$w!${i|yF)4=eB5eizVyDxLh6)GGX6xzTeE&u zR^R}CXfujLxbdONY@1%k_{S)>xs{J75C}WZR(?4u^k7cD4X&37u#Fdv)hFMm|agu@g`22wbXxODpZwExQ;r%;7&0heazqZA107QJ#n5^s-j)+}~#Bb9(N`E#jB1%3{#_PK+qV~|qpM0wfm@S3+%x30npHol|IIg6A~ zYDT7F#<<8(l4+rrIq$b`Z;#c^>cu4HvIBLZrIVBik#NA6q8ntUUUkyu5FP8v}b`kT4NsA*F@Pb!GVebm5}wDZJID&OCEjl*ZN_>2*-K zgdVUVpjV4SlGRd~v}$CkVU*OpWWt#c3Fm`9;J11oTEONmU{B`q;me<~Xsd^7T(8O_ znR1pUCv&9C6Y(BxCg7b^i>eMwsFrwQiMrkfA8mDe_(w7>i6#LWL~g`%vA5w+$7qz} z_wZ2{QeUrrX4zboP!$G3C z(5g#XkNt(|Ou(Q`?(&Rz6B){Db$=!@4zFaRBIXml4 zN4PB}vaStpy8ca3c#CV}R#8(ulS8a8#JpL;gHbfiX*7*`Frm7FKHN5+bY3O~Q4-js zd6|M|H-?4FDA}tWks)e*{063RJ8SdE}#U*?|9z{3H#`l5aE^-;4$*nICz^z z@Zd(*Hrm3jctY)@_Ui%v?w6}NanvHSyk}IC(hXKueoIlbXFeX8E#XvEuY#%fQqyYc z(i?{yO+!-rmSE=O2IhkA8}X*^9K;1qC(yThhOG#dC(_`ABj^gU$v&RWlR=p#TAgdS z=6jOpe^)u#I&`|_`y@1-4;Y1)sjhIS%nd!^UV1`?Gh|C4gmVAtoB0|WbYvbIVNduK z(o*D2FtswfB5jrO_so7?BK$e&_@HsfsUYsXAgAR6KGggiOhX22kA~DPeEfKY1`2?Y zGx*28qs%427D8_Def!28KHSZ*LlNQ($M05pEu|#ulTdU?<=Xovt6RnWpGxD9Qt+fRpB-ujR*OlQ_sFtEt-~Gu$1cjmvG)!lR6yFsmH-q^rif6;(5L2)HOl31Ia{ybk;;YGpj^g2~MiQ-c`zN&gz6i}V>?pEE^Pf4QwIKLT2G3EvKe z%m42^$gh3@aAvuO_!co9D=j)eu(OCAQBDnv8j=1?qhK&Bnz4%ZgxI*hc(T1lDx-8o z+%J&c(g4XBVO@@jy*CmsWM>z&;%10A#BQ9>$^o=*Wi`py*cAfOZB8!a;z*DO53B5- z=EnH9pX(HL-|-SFcpr&Oq9Xf(YL6h9)qg_8J`}zoroyW~)c!IL5Pt0<^kIboSg_a4 zH~rnyu!0uJI$_P3d)=gjg4|XEdxXAQncyE=#s->TE?d4s?*8P-z8`2ZBlNvc7dl@H zHw>M-nw71vk@NF&S4hc#LObLO<0Fy(d^akJ2LaJu85coG5ZC@57AQ?Owp);k?On#3 zJ$}C<__OF4X$>Wo=cmNg8@MkYTrzQVLjz|MDHsM@Yi5tz@|tFCW*BhyBZ(TgmE?j8 z_3x?%k8*!r9I>?v3mQEv9-u8OojbENA6&D(8{J=eyt-X*KF)k@@Z#DxB#tcEzMoz{ za{sb)Z}w&9aq|&)>Ia&Qn;);cyDh)8(351K{b>zeKixc>o;G=`bk`$cb!AK4K8vYn zew^IXdHV8vxOY;$TzaGoFDPh)diOXuJ!x~lc>c!j8aHa`PsPIJmSz3ZX|21EN8IC< zgER9z;5OSvY*SxY*L!4L_x!ZJIpT4Bp{D0KCuAE1q$zyGQwH|yhwVn2ANPjMZd-s+ zsgldyT zPd>f9xo(P&@c*;&>D>eO2yJJnN8^+{$1+x6f)!C-;qYq)>vEDJUQ?jWjyr@J9^lx4xDWYljuI>QPr$& zzJK?-FRq&AaNw*?2s|cG?=EyUyk+0Aq%|t;%&@@I7%x0%A<#~Y+Bd1IRcGgv94&ua z`e2LH#~@Js5k98a*s zT@%Qr`tUexJ(G#XG;zn(c2+pD%iN+%0uI)pYdh=EzUbi2N%fEN^0|efM!x5u{Li~? zp0nlcz@mF}*DVio@L1E?jY_h?^$=dw6zLGKH+uc(sx3TR`a2Jdsxp12MSqh-oyDK)fJ}qS*%nc!H-luwR9zb z>#9^3S&==uUQBw9*L9mFw;>m0BPUTq`|qBC@tN3fWLP#HT@`lAe#VB?^3Q zZlOcn@*1Rd5*rkt&fnMi*|`Uv?dO;Y(kzGqZWP;ret2nY^8AC7iUe9D zHdW;%NN0O|P_y+9c6`1QpU6$xbhtVv>qNY(m2k7Vs+@=UA?=(cMGCiV|TYTB6Uz zIsxS0c+4R`G#B>?(hc~?W2EvW2yxWM2GRm7gFKDsoLmR!T=G;^VHMxQCJ-~iY7EI7 zIz{%k1Z@{9ulL1kew))azEWZ}YHa^*|GCVBWa9 ziIwlVyfRCGrPL=@2PP-i9;FKYiJm{=0}LW@!C`&F=$g?{9VL2P?cSaya6aqExdGuH z){_71te4D$6qE7xe1JvEv6YVNcT zSJpNr-U@;w@HVj4Q@HZDMJFA3dn~sETG5;MKWHz3*X%CgAJ+-Wo!8x1F%aohrO8+s z9pzr7?WAs$vP5_%lWR=QF)!lh@sr~1WH3MB6&}VJwW;XLJmF{Su?n%Hv-~@ zAL3}eKNlWEUW9@;x)@Rc(M1?VWU+AL0?%|7Cp<@ti5{5NFCbM&MN-BgiQX)SyiWJc zEWNyT4FeL@Nudkux9? ze(oWN#XQ51GKkGHe=j2k4jlytgQ%Z}8YPI!A0v2)q#L*JNWe_=bMYj$KP|Tvl7C-} zR8|_baq&+V7h99=M?xMY4r9?Fk2bJ!5{|m}^X=2^QjQ&$ZmF6jTZnVEBSD)VD(&(G}5BbRoA$ zm{aFC*~tW@GgZwpm2X7njc;M=aH7~kwEd*0W|tDF$V~KIV>>K%y0M+>ln4{Zt*53v z#s*3d!E@RH#3fk2Jk|d9V`zWYUG^_0XoDqh9C1wu8{dCp@=B<2>=zKe z%>wq|eR?^)S+r*k2SS2?Mm&er7|#R(OdK`4IGMnX*;sT(bd(U>B}@?W8kWWHSy08c$cQ(~_5_IU;;JVZiA%(GC$vsOm;F)J8Ue)R!q z^6%8p1ccy1*?~bNK)9{Nyugj%7|@=3b<@u3nr%R2fVT~BzQa8 z=qMtT#-ih*m6=2rOF7q5H3N<)Ma7lGgii4T(x|O!IbLJ$`#zT0!fHTGCKn52&ag2l zH>MBTinb@~Iil=5@-!1Q1RLW-1Fr~)BaP#$6q{ylH6SaKJIS#@4VLZK2kmqS{*I1Q z;ksi?EuOrk90tblknOuvv8CT;pdNq%#5{bbK7JK#p)?X#Gx7 z4^K2scrMJ*wDVOE2{amKDyrqqFM#e~l3nBAq$bU?Zi((d#zK27&DA$?814FqOM$K( zvbm83S-j7f0?UE1{sk{^w&?FF((`Wj2p$9m^FMmt2Dbek{&;cvQqm?|W;Z=h6{@bx zW9k#`?wLD(u_KYRh5eOHUNAw$DhtQSX-*DCktv)XRryRUdJl^EFLl%G<`biL;Pfo< z4ozNqvg zlsxv@O_^7)g`>QJ?Ry-#sMl!d*f0EU$bw*@Oj$U=|qh@l*A0JPu7^M zvYQ8nE42eWO^qtG!5(4!d8MHqnn97iAd~>mT}U?y4B{R^$P|h(n1KRchxUKVCc=T5H{feiX5CdFes!c`_Z;ND;ME?(LQ2zrP3&9s4 zbbW$vMg~*Gjv2vKen9STSLJdBk@X_VFe&J-fyRmo7%~sX_WNVvRjZ1(Iz-aom&-0qC-45^AtZ_@urO&))7znh3YJK25f%rs!sYPdH zfN#VmO}uW$PO!J>2(}^v(X?Op|Q$f z_DfbIv(#ChjMLK;JOj|})&}lA^JlI!hBlV2H zalE?pmCOVc7D$mGs-w>Y4k@Ugof`AGQPg9zZXsK2;v~vSKMnaVqi(ItOT%Uqg_+V_TVKMuzyV0~+^sgJe1UeGJ-v@b&GX*dj)mG9CU1 zaUl91*>lM@dMHv)+4ih%Q_@OAh<_@a^goI@&~8x7CP3nN--&k?AOc)gsQ6$N``Tk3 zA|>t?A!Z&|iz|7rGogujbY_;Bjrz{n;EnD4+B8RVH*Ep)<=`cgFcfYNfPzi_Z@rVX;qko z0Rc=mBY{Lbw>x7?%|w=jBzfd+dqgG>(BmWsxa8wSDM@m;_k4CF%aTMD7*@XU2eu)g z?=On^Bh10+_M z(F-APie!g>#n!&0=u=^b?6-_sgu`FAE?%NkBA|ypSc2Xfxtj>&|3*gDG7&ov92xmA zF{!d#lzJVotSmT;mV_~`P{|; zA%sZSh+%>#D184{J_F2cWo5vY*HTlPPa$Dk2Xt(oBY0tu6Jla=hDj0pr{2No5#CC? zcu9}^ov2iq5BsA})DFfSB?M<4nK?GJ-vyObJi>661CWP7PAe<3l?b+hPeNV{Y%sdR zD7>d!)EFLQ4h028Ed{SKuCy#7vhk}NZtTmxr`D*F4p@O%PxGVlL*-Aa6QP?zDUI7 zPvjSp5au$%1N3k(3!;AiOYgtVNxV9T&hhB8+>LWbDFS+NPCP)6`oCH~{R%XvnzyKL zn>D@`lA~1C5eTWkRBru-4&h?!BhBS0cV9N6*A~82g?b@{8Up^V$ zN?+=Y#Ptw>IaW`KQEUrR17-xhXetMnF&6&0l(VW|BrwgCQAKY?>w{)wK9qd9s*TFv zovav&-DIz%h68&w4&4{6K`V1Sp~pDQgDYn|4Gfa(pV&5yDog<>A7}7$s4*mg89YuT ze7+nc3|Xy^BCR@#Sc4n*-oYg)i4Etr66UU$@pP%8gpie4OpGZx2@N9cuML7ZC9n6z zuXlc}rEQ;|KGr?|^b#@fONR??xnc9%`) zC~mfeeIs{m*8Yppk*5YjZn^vVh5P-#-tL*2$}0_bXAQRtHh_RZsjG0tFsoLLze+2@ zUgz#^#^&ai=eh+zSn&M%8SV7~eiHP70}clQf;Js|0Z;mJ`Tk{rC$V?A-lpAO{Jox(E9>Mq80BVP$q-lL)?*w8Zirkk< z=IJD9IWzOOce(5R$knDtbUGURhyA4KE0goHLywcF_R-}LxDWT;XPYLswO+c$XiqxF z@WAcO@iTC>`p4zk>$$;*>^Ea@(&OdIslA&Q;80~OSe}`5e}1@sm+!H$?{eKDpz*xu z)jZpNG&3B$E;_1=cWckn>SknX1UIw#$l7amf4Og2*R}+{Xs$4RGh<%wtw;Lf>6nbW z;=b?DJ;C(4Wzp;T^v<@<%e#!Z?Ni3PVByFD{~BO>`o6b5>CpCev)JQr`-k<-y@PAR zOJk!)VVe}*nd1EI5u5rYyLQswOxwr{AH46h@wD-V6TYl%XPU=Fu(|AKrV_3UGCu!l zidRh2_U0sd{AQ{CL95-M`C9lL+8_Vt)<-9<#|LXpPwvrzbJz7jp0BRX?&k~5%1PRB zw+HpWgXNX`1>he=M*0qC^-eeaaK^X-zTM(@XD{KWCEDca`rN$b)ZBnIHF$4on`MZ`XHEj2Dcr_ebjc z#Vxps?~J;E=ac?JkMkK~**G0|Ue;J&aUSBdb;W=s2Ok88(9A0AX0nQ({ir^4pAUa>d;23hDDyN> zP&|@u@$jtj;l`x?(OE0vVsCn>oppcT@~X|HT)9rwLZ6qEl)L0O^Czya<6gv%&Z-}R z-X)6V@YCOPtgkgMxBFLvzhzD%w)w3ASWL8^dm}V8DhkgB=EL;0Ha_=$C@C`1-R7`i z+B)E{WjZRQEa@xdO8!Z69kx-;qDvpEtFJ~MTk2I8DIZ9X~nHj^q!{Y{Yr@Ng?G*wrdSepRq=YHuH|Fw{~dd~{^-L#APTL6|rpGeHf6j>=y+ zl#WZO5%OYq$g5Qb#2AqKaPeiF0U{6n=y__W9=R@&Qd;n*QzCt44x;y^AWGKsFGn`4 z21ljTGT=#+)ha!TLk>i0UP@W_E>IsS-uHvfoptVT#{krl(AVv`pG-e{nCYiY2d; zS}Pj-*NLJhfh7;+nxq-?tdz3Wbk)z8CgwCIQd(H%Q!-9ca#X;YkkEEHCKVGRrww&v z%)fpFVoN!1QP6Dz9$nyd@WJcEOv4a>*NK@3Nh7z{4vk58dD}08i=<0$(K#!IlxtIW z>LOJq8xWHaK%lD_tx7dczz`8aFrU^e7hXy|P!z)>^&hv@@TW@}>&5w+BE19e?a3zm;EUT3=_5oM=KUBODId><;MJdMT~iL-T%%X?dIm?pJvx zRY&E(l|O8wo}}3v$J0t98R^vmL8yUA`GqUBt(ogscvP`rD`{)tkRM}Ui5rElJu4On zjxghNdR!H)<3NlTpOsj@iBtmc(WL?cB6>!)aHY~aN&}aF>x5_UGCw>;_J%*bAtd|m zEToB>$6!DMQ+m2PgMUNcQG2keJjzlXZ~~cvz#d74ufq?6-9s3XreGa86NI|KG-Zzd&qL_ar>FZNm@~&@Q%F?T9pw09L(u@ z#Lg9u*eh5n&J`!=S74uFd8MY-n-$wrX=KvwMeJzWu|8%)iBd){@Pvw`7&>E?9Ai+>BlIs)@`h5!DDmLUY*2x@E6&{3PO6+n{gj`5s!@nl^-F#~mdEkz z6%T%T2b~+Q;utn!3a6-9ma51#X2ZriI>hqjY{V$75X!7njRNS}*aLG%+aDL-MfG#p zcN#2xe~Jl#W2OL%;ag#kIa{4<-F~#q4Q97`qvA+9u7wS`6v8LMgnDX;esrncn^LUw4=iC-*g6$j;aQs$`)w$xV*CjZ3*R3R>7do~bdQ9u|XX+88lgsS}j!bA@K?N-{vdMFA%*xoGKG~UCa z*aXVXLWLL8LRuv_E`_Fd=+#}kPAsBx@nKDQzKMRAFHycdN}n(b!e731KqCX<$4RjY z5q~MYU>w$zO;;f!x>p2?AT+I)9=+Qnd?wmJ=vM+MR}U@cuJ`Hj>biIydl2XaVgOQ> zQBINog@-RKR7fr!tP0Q9al+WIj@xok1S$fOjlof9Ay=t9idONx3!Epae(_A&$rMBK2r=I6yN&&0#G!ll$?gEQ^`a9=0VIkyVSS`!EBfD5DBY*K- z+vQIf{>8NQFCK~rUs?f73M94-Fb`n8j);`FUZYl8_p7uy#s% zeediLjs$!QP-P4{ZOLt*G1ag1>GmMM7fiZ!I#K*T2uwK%R6P>VZOB!^>vOYIqph{bdZ~%vaI7VHA*Lm%QTm@dZjgv7JDZ^LKMY0|*(6!E7O$YIEIkWObER#T7d z%gTY+qxnieXU;Yz0bzarFNj`^fR-CDT3H{JWcW&JM&2cz@(li822A-ZF@vW~_4@OTA&o0eZ-lm?mHN}N%$|QVtqza_;qV~7#jLQm#h>|TJUd<$zW_XA%8o4l182aBfoJvq2Pb*W0y z3J-t%w#8@1xTumi7?s+UtEgC7dqjT5rppgPIh#ruyAyyv+dtQ2#EbCFJ_IT zH@=vK|6-O{G1RMB_ye^`Ju5qun9xvAs`v;JEaYb+MfxEJG~c|F11FTE?7mo~#~5!T zMYwk6fY}>X^VJvP)(vQN8ZzKL@laDbtB!rx$_X@7U+1Cug(b{9xZnbE2jLe{kfq&o z{r@}Vvgu-^nYqBld12n7lc$uPldqKCuRE+s3cfyWTpw-60YCWdnRIX|^U9YAY>n5B zYkyH~naTLkr7ycQ-`z<^6(+bn&`%n^Uj6YW^J%K&7_iR%rtz+=U-fAx3y1HYFcY_y zjukR6IfYQ>cJtLa3>>Qls{e7)wx%E6Jdnc~tf289AR`<33!n5g=6`~Wa|f~rEDyQ) zqh_tt7_N{e6QzKSc4zBSMsnwPB{kKAGQ6zpjG2zVx{2S&hRCL)={RVG>f!}R-q$AO zKaA7xp{`#F0dd%Adg9jf%ijJ)U+5Wje; z4k@cAo`uOknx@Yq;}FWN8p2x@d0`|V<48)}vV%IKm#vkcLtRLyZ{iUNp(Dhqk}jV? z7LOGn*kLmaVjL|`(t!Bqu(NLMun-2?Pl`TK!ogW09oA6C^)xSStk+1)-&)Qp3oNc@ zC1S=wOqi98D|u%_DcOUKbw%6JUns-y4+g%ES+Fs5jnlZ?t4Syz z+&4Ga7L}^e1uwmTVoE;TAsN$*p7JS#SYmZhNFqHTzQvq+x!zyetr{(c8<=}JA^eL; z@>UpvBnHtSN;MyPQ8+XLrahQ0eN@N0a3K#YQcgu13_{NMPaSjePX;tjtKY!8)LfMV zn#UqQyZONrC*MCzCfh2VvYw4;FVBk1cB#!VC7?2d%~K02BLI{#NiCs;Byb-6&mIK( ztE?ES`n$LE0A*l~bC?Q>osEb%OV|a27dW)3vs55l214H&Vch%z>WEh_K#s|n5%iRS zDsmvG!ru-Bp9-_0cDt!O>pqD^qEpOYL43$mSuAvtcCH6^B>F4N2!jF%DzHJ{F(W#P z<8rFu{e=qAqS$)_tibzhP)rU+A>z{c+Ghgbh93KCs1&Pu4u)i&ibAN=%9O0?T!Sdt zRIv1SQ!x+}Stg|<)oZUe5vwuEiOH2`CRCMZ(I?J1F(=Dm6?1EF7A6{0-ebxMkM#;^ z83Z4fG#H9r&LKGvyEL2M^Ye(o_>7Hp1aAOCs+0WxN(M>W4~Sr;(eg#4(y9UZGXHe= zKvOn`erB3YFdlm2Hv@r)OAgzyCj!o(;BJR}PdDf-S}{j*!NO2!1_0 z^^yLrA_o5Qfh;o`MINaTF{0)rIAGBKM>yS;tzceER;0X0e(M&%Kr2CYa>_77o=5)Lbj6C2tjrT%66k#ln=@l> zTyR#8?u@CHg8?))+Pp!_RFPU9hK&)PE2Itp{TGaR#5M8p;uxoQ_&EsCCvfO)wOYoG z+Dir)3?k<59iqA)FvPOq{?i#?aBJc_#4s5Cu+vnoU|{|o_6?dJHX)c`qJ$0kMSA4$ z9WCGt@pZH9Cc=6ZwST$l;;!TU0Gu>E{CtYqJX+YY0Iq7E^t_5sPFe_4n!(prTgSnN z`&D}BO~yZiyRRB=|Ezo5R{ouS{$ZJ6T)!ZG9%bXMbN}?&>*mzs=hEjHw%|>Z8m~su z7F*ZgCC4xLX@XjpfNcqUhOII8AAe>tEr-F;%cDx&I=SZS)ZqP2+tcXjW(Ib&VK(Lc zc2?Km$2pt(_53|kuT#fquEO6RFMDN;9@oLQlaDvQgr9_89=bqMp3JO>13z@JjuOX0 z3%)$nHndyg!S*t?eiq+wJ=;B@5!0kCD?sBXJoFT7j)W|cC7vs&X z1WEh5v0tc-`)crDub8n_nidDoIfznNg0!TV-mP_LtiGb&pW`f^)>%|ewFX6yE3kYE zcz(NpbelC3ZjFX-laO6EGXg@uHmnJwHwHkZLHzO*OgXD+kR^^HMJ4}F!Lh#+PBo?qL zQY~$Zc_WAOJQtr+yB=md7%NOoXM%O2Db$3q(4&z&op z#vH_Bxbbbl{DElX18gt~k!FVZFp8n{q^FG`rw z*QeN3RlBHH{**Mhdt_M+s4v*MXa6CP!vxX_+;~VKQJ3ghevn-$)qbmwshs^xUE4fh z<;DqtTZ`)Bg2x`vPAApT3}NL8X}z}2LlQwXwibd?+Tc>=m^0`}+dJb=2%7->px6qH zD(JAp8{~$%OqmQ0WG~q=sD-JPL+!0w9T-Cpw^0_$#neFlP}_ZgKv-6y8TJ;t#dD zGPQ;66(hc#6*aacRIaBjkcasID&vW%b)WPfSF&q`w$pDSApOGoU}#w{rd&$qf(WR+8~oFs@2KK`qJV7H}_y`er1tO4V5 z-y5T*d!k6LdFG8;u;Qq%?qB>Otx_M*=27|yKI1y-fz^Kf3NXx4aLovfcM4fAMGAHj zRhvGeH?Gy4$^HD4jzVp$SAuo7C4w7q%Du(Yjz{<~G(1gM%I{ype_`^~2r1i`wF92u zFPnlLp|Z@IH^t8D1U3OvvG%C6kaqx5gX$J)FoXZK^j4Ypm eO&e1>67JfyS29HV zkI6D+0*vqa+^{8AaGH!N#QV$2z6Sco>=-F;J^%BR0WUU`9xn_8gaGEtQw9Kt)$Q}A zQXNCP5+3xIVufB4goLKB#&%3d)LIBOG(232`hb_#!}#7jt)Nx=e%TeS5CnWvOR)HqXSq};dM%8B@R zHv`KEw$8YSOt=&O%?UKwpKXSR_tIIEg~XH8Z(Eq8LkHxu+|~%R?cNrD z-W+^zP)Cr>i%#cwHts{i4$=zN|0D$#H9+36-raNIt zaVY6(yhzB0tTS(0Ir9m7cQW%Q@UO8@37X`8y9z`ckX_f|Z>b#l zzK`X>w7RSWT%3t#sUSPT{tT<;l5c?}~EVhOg zO|NvuFJDD|>u{*)M7q&>s8&m-6f_gXXwyLA7(v*$f%28T;R!vz!=WR3*6@6v z=v|986G;n-HUr?DdI?0NC(B9DiP&4`$>G^%f{3B#LFVN4U|GLO?2w48jE+uq=PI5J zeDp#JXkRWL8TQYiTz(!sotUow8I1vt+D~GBfVm9u?>#hi7~mjR5?7+yu1}JK4uLtm z>_OPW2-aN9{|e!V5;7S*IpEwwAbL1JAOf@^4~^jTQ1tuopb~_nAx_P0qGTC4!2HM= zuD7Emh}K4fN$40<+73QcG~lXJshRomVQo*_EdfeW`^|@X#~h9_1Q+ZSmGt1zp6QAc z!aAfTVl#w~dg`H0KX9-H_Tk1wHet(hXy3h=)vnA^XH%XOA9OUzf!w$)`+QiQp*#%e zXDkn@Px`cCR;V^ai*LSsXdZ1P=8QEBdSB7=F`jMK7nSbE|BOlJ98o%d(3n8IPai^M zV`MVhZxRnU)Y!wFATi6Ok~<)(QuM$?y6d>EVQIlK8N+HclgX$<-+P3)6W@63n<}pj z*cfx4soTJSIx)(6$%WCg@H9bA zQ#W+hL|i@#{$sfw>U_z1Vk9YE2F%9WfWa~yIdY@ z?|&F&HPJpaHXO;i)=S44G(XHmqvVIg12yqY>wNiomIv}coTwn7U^3D3>EYJiQ|R95 z_VDd!?FTh21{STRw{M*zuo0K?drk76AOETS#=F_Ql(0$e0azJfQgwN$mp#FO*>TWq(uuJHkhU?K? zNpH8Bb?=oDjjH&Ymtij`k6PEj|7q`g#t&ruj771e{>{l-kgSzAR9HVqexFS zHy-TTa565P>yo$Muny}2fOnp}N!B-CED8h^<@CnA1OZsf-0@OYVRk4grE-P6JG-1J zODWk5^(!cS#`{0iy5~$uOR>D|GFwK2It@d;yh~*l&rq&JFkk4>0(?mnEw9qK5Px2I zR)>BXu5TTgS@`X}x4+36$o)$zKf%0x;`l&vgQuy==nUqLj)qNh`$NR$I#s^%fj|8B zesdM^PFuiT$eXQ>WUha^^hwnCiF|ieNBnG5l;-Qmx21(34a5z+F@-~3GdU}`$n7GG>=3A9@0wc?H>iV?IZAs_;U{-RID{5@}2d5bXnm_cF) zC+Y#()>L}>qcbL@uvY2km>j0YG6*ar z6YZm~(MWjYVnQ8JH)#2p|F#A4+;#iIhpBxc*(MxNbb0^qP$q^if83XqCVQh%+4s~c z_J%Xe5ne6vc4T`R`Pgxx1Qys1jGZsZY@^gf*>H``aIfAIUfV<-c5C-`RLbWZ3PhAf z-P|dXk7hYyeM~7dAmxZx`)*&JO-!;W#oQhbU9Bdp8qbKeNhsH+YHN-R@80g6LvJkf zWu?g1tXgm=0&I{xQJ9)VjxET(rdGNULmDs;4*YP*r4vdUM#wX=0OT%)>9=Ur{&Xa>$zePciZj>$9pLHEPnTllnhC z?~4ip4F$5QxXa1ly;QYIbvpRfhk{#?f27ur1tjSk`jxm&A#RvXgS1lnOqGV9LuC>* z^~6R?t!+f*Pwq5o?EsRm7-CjB>OV;;jYyZ3@_tRMAvTr#$xNl7z%pRfnQZW!t;*QQ z4lu6dUJ^_lu)!>^S09x<-_;t5 z)!gB}$!>VUv3UIFmi#a00vCK%+nP|kKjM$1$jgrNNQMdEp=*B_JzefkHX<47n&T*LD6&LA6Wpi_ z3k%oYC%Ak1%z;lOZLMaJhmMn)EnP4+{jeUqYcvosL@@aVo$;-Bn$=7I&ek4FNy%h98W9fX-~DxyV#Rf!v3B*)G-Lv(d_xh{}e*WXHk5#1C8- z3sKUlgn_%{p_5MN1%syctq5z7r1^uNv8C$kRUhC-3JHP<-s$qjmRar)D%(m8q$?9W zKdgMJ;CoIt7K=xV$3FPRVF0Oh)iKnUCr|N?_Tdfb5rNNFQ5_I%Ym!nQpk=PVQ(^iX zdg@#biRJ6WbscxWVG-uH3&C|kC7zQ5fpM}QzgSAjj>-$_7aVnZ^L%1YENLP@3MsWK zy`D!d`euodWhk>hi)u(L>j)JlQhI=gFtRcUCdk1(_oF0;H(w&|RwJwx+6e0H4_Zr$ zHN=ijoZ`^qyoISmCe>fx0gVtplu_5_*+otfj*=;0yPF%y`qW+F|6g}+6;)TWM2(_> z;O+!>f&_=)8r2QR73D|MQDmWQxD>PtOje6vpW0l zg!sY$=PbuEvEJ@)BJv4men^WSr{)(X)82a28knt@IIgm(e&gQ*&KdH@ulV9ug&>mvwATRsQ~ z{9B$DXA63J2Nw$?`#-vMjBgp4Eq3`xHU=PccLEXBN-IoA!L&~}Ua@aVk~pQ&FL|b= z|FEdlHuQX3Pz>rV2Z1eXTtL1+Tg$BYV@^XwMF|nG%wB&HcMp2I9BsC|U)-fRlw#|| zDF5o7RQphj0u7i-ORC?ij&3&ce%QL><%I*Us#~~>Va)2FS=P;^^H*IlRoDHTWblD) zHKgf$X!#Ofp`+~QxKG^Ju$osIo`(66tBk$mY4HZ`DPGC21m4tZwRRotm|BvLOw&lO za=U~Q-qC4-|Iz*K^aoiskzcj3;S-ljgME>_#2UBlTQ-29TQF-ntM#^Iwha5w6JM_J z56Pxv);?@1Zor9|E5{GF;X1#i@JEbwIHWT;KaFy$K!og+X)((4f@ZQqIO%AfrEqm- z=mz8z^mVUW@06GdhGv;b=AgzNs=gj)M^7IKS)?(={4Sk&sPgDZ zPReNbsU)ufvfXFtCi=vkYj1*u$S)4P+k)CCmwl9Q0#mpQ>5U;@;$FUf;BRde?%3cS z*imy2m!tE{9hGmK&Gp$6Fy6$%i9ayO2!X7Y2f}mLs0?lxO^fyQN5-dgq?KJ!{x1^vg@a8X z7b&hUa91X@9`Lyxm6l&?7c@bXd30!h12)Q#L}j35S+_RAQeekeEMrq`BOPR9J2K5h zi@U!A+)p~p1@)ej1glCUa%i{aZB6EeU zO`GKu`L-PO=+lXc^4=#j!fQ~i!)vJgZMUA!0MQ^JWjri@jG7bU+SQljGum!evFi~{ z+quymCGyrn~$)EAc4W=CW1Q4fNmb%14! zgyN^CdDqFyuZEZYM+{A}a@})Jr*1xK0-Pba*QI$?u(ncJA47wwovBk?h`LVj{NT@> z0YYtpQ4qm5cC+RlXcB;Wpud84d+jNocz6DH591^UTrUQsswl3vyEyH$#MqagXOef zBlB>3sO=)&Ny@%A9V;MpS#e=a(AbNub*q(L#>tEB**Qet~ZlbiL2W+x8wJm~FK zqUDB4>TiwnF1M^s+UZU+^U((bqrngG;jPijDNnEnhEtvsA|q^A>q2elm5OZ!nlq@* z%7o^>?`9!wAw5OG8CQL&P6~%l0VO^1ge`kEJiOvK{*$H3ANO*M%b~kmg$5ZiGE<}k$hlv z`q{G!G5+WvUX4_>=;D-~AOHc!k-tZ; zzv{S0Vb1&fK7sN{^~J=+gaPt^e7@e`ly+u71D22US*()Tc(q}g?SRvQN|SFXUBB7qIb{Zd4@VNbhGpM$^44l$5yfm!Cff@7y03 z;ChTZzVYDFdL$lTT6ZzZDgl%jEC{}Uy@Vo1%!6E^nhBCcXg%4J5rkP25N+b&R%b;T zhk}I#g0D*kzy|a9;n0ySl_jZi{#BnL$ckbY&cpQ+~sX8VU8AXdAF#s3h4F5O_}w zAafHM_FeXDNtF3GsOlI1R85u^ALi%>A{I?|(?%>q#LeB~R_Nbd05K8B43Zs`h zK7CD4%8Esg2+tLZ!ndV8IAajr;n1uY5HCxvwaxN+cE`ubhdMD|8y|Q3i3$-$aT0qQ zBhRlqIy&f*hV%3ij06Zmrd_Amd`6vv|54nh@I?}VvG<2ucltmI3tL3;&kE5vjIaJm zVEw@HSPG))TLrtcJ{SCL&XKWC6`RGxV89>JVm{Fjz$KmPQBm+8mO&l;3)+ekUa2Q! z)QV(efCy+SyLvzZ*Z#IeMZLewsN*nRJR>3+x_}%}3=-vWP!}LVzV6=Sq*S>KSzH2F zooi}QZKYSPJ*VRvjAH0X7b0@2kh!tiU^3VY!x*8)w8Gn2=`9h4*5pA+r`AmX`?!)Tu(o3dP8VaVgq?y)Am8LQ+A zg~*NL#>r$~d~`X^%-mHj+IJsg(k!6U z*W9bXduNtN?n_R3>%$I>HtUvMB@0E|v9qaVhmo(np+rgB#fk8Yop_u_wO_?|u+ zlq|V40^C#KuIgXT=~JDL=B;cR7&%FPQ1u*2PZwAE=6)+}Bbpwc0{Kd|0t19- z5RHQ4Q{0v`0Uf<#ikQB8pAh3kf0Pt{^90A)fU>-}01XZ6r9Ko-w)NM_^KNeg#n?P{ z%VctDxCKjJgMt7<5_Uc>ec^J-F4BaJn3x$IK)YH@vkg^9?xieyzLT->UOm&AB=5@$ z%AEz3{?5Sp)Ivw|R|DeOye-tHaY>DQw!>aHEW^;6a;bNST_NO zQwzl30NIGo?bVpX>w_`T(7zL!!obtl=jKmJC^44hV2NTn&JgM80jE&Quw#jzrx-e$ z&gcN#2B!NSGQI4N%vm&%f`(RY=SI4XN= zDurzshgFLa7;w$cLj4xb#qD@24xDY^_Ii{SWpJ9CFAsXf@ccUQetbuL0Se(gF{Oh( zV)r~;MxL;A%xTB8mHrhB^$B7@ZF7XRhJby`PRCnPOC9t zs={9sMW&O{;w4XO8)CSFR7IsU6Vui@mQVb`**4F3doGON{e?A)!UbEYhAz9*{fkeD zD@Ey-4}}8SF_n`&>c@W>6>nz=2>=|kU2QTxn2ny z9MW01H+(n^XNBScN?ca)rTUhSB4e&q+T+8(Pqe8z8kVJgziBow6!vOGK(#*TbQ(a~ zn2;FrwtxKc!!?4CLms5tsRz=M-LOS`-t?HvJmA;2yY{`9roF75FcoPN7JWcSd(^WuY&s9yx@jxPeD$QzVogeQt67!u=!QF3u3O4nULc{_ zZ{vv8O`Q$ZECzY6GRc?OrGdJ`osM-|X&4IkNg3awh>OeF3uL1PnfxC8ZJCi+&AKIZ z;(KKJk<@C=%c9D(m4u9yRY}0SGq<37d)EHqq}*Cej`j>YwZ(Ui)>@pO1V!@1_q}`hkUe z<*r#`=Dy-=!clv2&{?nj@dgLDi}M$ioL$`}GyD;*GF(O5-+(r)s$>9LG_D?1ro5Sg z++&=B`Mm*=f|(HJ2#S@bsI80_b1bQSqENR!ngc?17B?+P;;}M!*I1s0n~W=$OvA-K zz&gVG^bG!_vC?awRT--Xol%WQvqV_!w&zT`OSi>7LiljL{@x)J_Hymwx@-l7081?! zFu=^zy11>a$a~$Am8sb-YTuE@`1vmDl#{#qXvBXC*_)yjzwKe+aUX=O4o8l=wcIt+Fns zVE*i{Y{KG-pjNsKbo+8LRXPtKna~+-yx5z+bQ7N$I`TeJrzZkJ@G{Ym%`W|rKNNz1 z5ra2?%^>3aMx3N8rhXa7!VUj2@ktRM)JVjq?CV;U3!LH3Q}*Ep{u*3O!-OMrn=rVN z$=A?PekX-l>;vwOsE~^#e)Oh5SEUodBqc(EiVD(_q;*gEF{n%*lHSv2RIk1YkvKcO z9bL6&mYR_k$Q^A!w1f+d(UhW|(N!4CQP&{sUL86fGBuq&+^=rS(F*HRNd<6e+=m#h zU*B}OPVG-9h-b-djN>W^XQl1gs}Ts3~!c08m3YlPlj)-Rwg z>16(>62Sa~@9)DH%rCmB&l zsW+Hn8)7~t>!iwzM#={)X72NBLuby#FCAXoUW?1dNp|=kiq4k$e1#DS{OR@tY4F`& zKmFQ~u^bPQ17Jty-$JHA5tL0nid3B&N&gZO;v;lW0Ko$+cn6Lo<_E#yh!ajtnFy4Hnit^( z(Q(1?bGP96NpY}W2xJx*^IlS-(05sRg|e=rs?P{v0}3A?{iL@Q!h=!#v!A`u^RFiF z#FWh(??n7!JN(3{%SE&hwm*KTmPbBjBk~OEjv|yJLD5$1l#Qm-inYDdR*cI*AHo&9 z?frl~N{T`|Pxg>9)=`IMr=&|aVwdF;(pTu;+azdm+NWMK%Fq1^venW&c)E^^H89Kd z`Zy~O0|2t`Fm_`T2zE#7Di{#{_1sX-aWBmgbO*n;g2iLu(FBhj$Xu(N+6TPaz#SD? zW77qUgWr{9sxV973IQz}K-4%uUAWD97#czSDSi1IwonC?mMx^JOvb8HTA<8g@F_}8 zbC$--3YrfBn+n zzgzb!OgS$+AP6rR5JyqDdFy5f9@fiaeaWrJ2WxAU&hIEsBNJ7CdLDvgQ7I~ka`M7a z{q~{FoR_jWfkj|WGori73Y`_L|5Kw3t1m}bYYjFb2OCQX;{DeH0c~p|5L0u?NNYfC zBH(AZN3A3q{8FF%n25+Yg74wNU46tsX>=4>Kk+GPGA;b5{ju3Sn%oDaW|8L+%I~Az z7GKhSMscyk9J8jzRs~q&*s{~|f~WKkA&3|QS5$k{0*qz=SUkg7Dc?o^U$itq3Z2d;bl5@=WO?2 zpx#^*pACB!En-GE(Yh-N-h%2U;$>Ti7!n*2g2cz~UwUcQ%ebWroN03#hnk&b6K>>LU&*dg6kLk2K( zu;twN9VLfui7}|HqYWEzA~U7;1tjni4PV~kT!53yO>*K)D4>H8anq{Qk?RcnWgKrO z$m1?wo_C_|N%Mj7#Uanv=hsbdVD+$91g+sAUG;^84wzVmjG`=2o(}_daj66p5T}lP zi7%Z3wj$9uR9Ip+f{_~$N(p4ciX|d#=&u%JJK$Td<#>R6>>5-mp}*V+^;9BHX(cVieW3te;VcF=1`qN2XHcbUHg+5jSQ!( ztZDM{92;1N_puf^>lqA+`zrughqDRobG3>aA2}u$BlWEZPFMn5OuG_$b7e&p7<8pu>P>Ej!32*P* zJ?j)!35=s$OHR*~TA;8vHj9@!wdzlYp$gZ0S{uoM_93IyFMg>)cc_tYBAKP8@gxRdsUQ7T2V2w*yDLys8r) zFYjAsn;ilw7D`(#S0Vs;?Vd|%Zt>*|m90y`rO+WVO$n4;Q$`^bBuCR`;;i zt*ci&+%`0KeLz-{jwht`_DEJi3ugmE6HU77Tzwgee#?mz-fF$?m!&bfVRqG1gJDsE zESOf#obCENMY*O^bbWLm%gQ|Y^ItbJl==QqjE3gZ#hffgGMp+@**89%+yf%9698c% zwC%KIO9>_V$%UJ#t1CkRY_@B&$kI0D{k0dU#%b&0hk-m)HPQN}sU;oG`jxGT z`#REq7Lh%RGn$<3b1|OrU$4<@5AWeDprJkz5JDOon4%8@%$3;tDDr@hvhX$sKL~u5 zBEPG`dr|n*omROzcT;o9o*guvUT=5N_Fl6gVyViMtg){p?dm5b-TL z1vw%G%KVQ8wk6DDxuYma#?T@(3`C%rr-O8t5NwE4Qln#lBF1!b{DcwQ8GDR*%I<31 z8r;6JWX&0OtjC%UN2=Y*6B`%2Aly}K*Drxm6=n9`ElKnsBhqW#lP2Q5@kMIb)8=2h zyxexdKpjciw_#Cq$l|{`3_R9{0lalp9Gw5Ht3Iy`+o!|zkjMuX^u$-i*Wi;2$EWL7 z-xGzZ0B2(KR#eWv(PE+!M5|XkMu7LZ#EeyeaqkidfBO0_iJaKU-X*Ggmq_*~D(oK; z<-AKI#`G@HgW~r$i8}vC6s4iaHqu7(6MLL4@%x$!<)an+uFc?&%eCX_TgGt(7y_m$ zZM6-wNK_@lc<*W7y1kIp?mlHTn>lXf*Mn#Y!@LXe;_LBhhUWdIPJxnn16C`>`xx|zB8Y*%I);r z&y>U~H}d|UTE#rP64O@TSBCv0En2M4<{v6#&o`+^neKN}*4T7DZOWby+7p(}OiL<4 z?iYQWpE)$TEId=}?bX}*AW%31T^b*HRC3P*SKd!?D!3`G7-c?_5OZ2)v?l0aK?w?E zl0pW|?yljO+2*U2rKs=xU{aX*F8Sr&+R|)kT~GMsGgv$y#)x?heuV&99+fuC&KE7Z&>GNr{X4Uxix`=f~462le)zOmYPI3%QAW zc)w>ZNy-6kOgq!baF3ZIH3`LyC1XBe%=%wpH#C0l=OXIUp-V4B9!CrW!(NH@;|_KC zjqoS!!pFSqOyPg=f)MZ?k^Yy?{)ZwMYE%X})MFyM&OCrl{l6)K@4plQ@1Kg`dioTb zh?gp+JGZ)Op<{BP9%vY*CYe{sj-_--lI<7$ou1WbbMZhSNxN;f7B11l`4)Vm*_2h) zlPOb+VWiz&_GSfVcq8^`_vb>^&&P=4aC}R5 zN>`xB^wTac{i^$-Q_68uupsV(i*&h7I?FRL?b3^BI^cOTdbEaU=DB*+uRZB4_dyh( z`T4maMG>&XjQzBNc2BszPF|4gwKGl4#-J4VW$qvXf}`eR1>_5fzj3?0$jI+ONU-!DKLxd3Mv zAbL8L(5h8%(Iza&zIn5~BLHpfvb2H=>DFi(8bH6K*HWbOnu=vmle`Dn)J}mFksEb5 za*m|^X>J4Z5OzjO5IY$<-|lBKcs;{fu^J7n@QvO+^M3RkssS05*>R<_e(PJF$wi2q39=&at^t6eCF&um%!r8l9iv7cN3z4O!^{D1jrHc zW|vE4>=q&#D_cLD{_1}R>!;--nady?M<2^4jS}oEj8#3aps3V!H%Prj?G$sN5@cHJ zqYZX`OI;eXUbtOI3SrkvEh}f!ujCE;7Wm53rQn;PZ^$~CIzH-tMiZj*?s1En?NNYH zqJ%Y}pi2^PM9YULkap>#{!Hgn4XDP(s9GUUJhc$-O(M?s^>-U)tiTB7eBib75usjj-$m82w}YTDXGK@&NJi&J;mp%lc^fD)dI;ZLQ{BH<&eKod+>1d}ts0s!Y#gMUML zQ&_4RBcgR=#-yijGk^GDyROTh=8J`%6e9tlrPc+46&Y3o7F;E$<}XotO%*hDtq&80 z2^v`T$U4!7MH~W?gTkfSQtwrF#E>cZ4L+~3dcR5HY{|1BgP4v!e1IL+I4(PkL`6)D zw3Y{K4+B}C>@ppfdK9=TAU?<9fs-HGJ(}3I1n3^Kyi3$(8`1g+b4DNF``f<8!U-SZ zOULT1CEld1{UPati0K?HAFXj0_nOFYv{9PBwqCn;yMntYCcBZz)r_Y+GPHxL&6jTkL(yO+t6`Sh#yHkc9X}^r2jgVfak%lIbxTNxnA>g6>viE+M8W11RdFk z1Y>&&UkzCvWu)$G9jDa(5dCJP1nhKfIZ*b8sJUp@topChCSBt7i`lw8 z+&xu)8JjTFI>CEDb0-!j%ouyw2N|msJUqvxdgvPaiMM{>hor~1VbDe64b@- zby*&0RP`ri-tN|`>aP9+uw^FxOwVQFld7#gERn=dN4H216ehQ%=J^0`0_;a*93u3b zWtbc}qHv*Q#*o+;u;0~{eI~*-A30iC4kD2V9$i~J)AXmw-~iLtLf&FO^58{P`7t!b z0v(i`N%4`T?etn}Nb*V*oWq{!qc%|tV_<6XNaraFdAr9E$f9<_2$dMeD5u(O-2I-= zADKr4-VDYiErXt7!XS}BknnOWJyA_<5d6(Bm=Utk_KDw?p|u)r?Ox0)I*w0(hG)`>OmLSouib8WAzQb4YN%1)BK zX9Ha%YrP-cNSLo$+JtfT>?~iSZ;yzCJ;ms813XSvk}u7;+Ta)kO~^ADP9nF&kF~$M zkffYLBpDsDI>IbJNOv?N;0a$HL_y12byV#N1$L7o1@ObF2$)IMZR_1w46~m*DTae( zXB2#c1`x9uhA%lz2g9n)-2$fe@zKE`+)PnHpVXEW`w(qlmx>_xOy&28*@onirR(PP z5w=f!F3 z5)*lMtH;HQA%ofNDhfVT(?W6$aMWAwPcr1;Irbe}yuw>AofEZLb?sT9kNvS25~{2% z7+~1CCy)6Ae=G)_SKCSXi|(Qh%0~#~H;X}i@{{w0Ssf9b`^{pY{;?RqIpr^)Oh6bF z4Vb|g6jEU@5D-xaptTD6Km5;B1ug3(LNt$z+E?A*($A0x5r>NPRe9nwie)Q^nFtXR zaH@QZLJF^sHk0Hd&4H%YHjTHbZewklYscGIU+oS2l_7&Fh>>h&4(eo6z@D5fh(Nu6 zNR}-WqSJSzYuMC0JnSr16+}bvXe@xijY9zz;1-e+Xq0vbU4V~! z;`DsMu#d^B&AZHEA9nhnQGxS#v>w^{M&y^2O_sx< zpZ?@`^z6z3Oe!HcZ2=#~fJRbNMf&8)+Z&j!8C!rEw-q3-n!li75S{QE25N=GvvMF| zQ}ljUVQJO~H3w~zmLG`>-kUUn(IUH;nA9{IZ38HCE8?`g7@9snFbVbXY+8+2oF=xG z*%v!RKgi5aH&_n-GG8P&&oH`oLd~aX!w2x2?ZpLI=Cf>bzlju8DO0TAG;JjTXSuF0 zWv>Z;ajU45^iy4Y42=^}^a#oZRLXIRDWVncg~rTLq?;YcSZSIBP%=lGinRmlY6-y7@lR2$p9hbNJq5UdF9K4kx~B;AHJK$KHODb zn8e(SlnloNEQh?F3@4z7ozbzxvHTM{S=lKSi@S}7A8`UIdBF@bhqU~oXi;Rph;)mn3e&M*zns?K zKq;MPXioSK-SjTP3B@aXzMZP-UO z(9JEwLSMjDtLc>8(WKGo>;9pZ!!D`o{gq&|P;4Xr#vF_A zr(`!_*G#@A)Tt}LQ_&yqM$@Dq+D-2Z!^c!Z;TQ3hh&2=vk#0fiPKk`&1PM$;(VWvcAR# zv4Z{JdAU8gQ!B%9(k<n)76sI;yjz~NX>68pysm1bHnon}r&NJa{7zc+j4ihXKKh-ye01ZG08rD)Bset*#B zo{EiyN%2i&OFf{#aMdEmmBJ&z3Tu$1HtkpLGvJu2n|O>m$;*^+AYqHgm9NuTtW^JiGjoSeGTP zso6Rth(=vtDeHs=+`5-#A}ngB&8n}K#^FAw+nQuThDKx7_?*>2XNBvq!VP;@vov1T zPO+b6H7EzCPM=Lkc9kD}UvbCs-KD>qIvIJcG_$hEhyzomuPYwc1;36t%eV?z`uWPI zM=j$8jn0=18=MHz`vlVh7=^?S<`9_9Au87WI=PqEodi~T#^^K!xKrAY$ebxsUp zedG!=3c@XSCQ2!*Y@S;_91yDk5ZV9&aO%|;nIw*c&di?c~|t=gSu!u zg304dbvt`Fbf}J!=F8_$@Lw{%uIxg=m9~1zGEydua-j~Sx0JSAAIS@sG4r}5%Kxz( zKKLBnaq4Zdh6$pkUycA25GxhA$bb}Z7WY6vyGFEN=}*1wJR`8gT}iF3>*kpDP2W;q z^piEj^K}|2F{xI4;OcIuN~G~B;c0}@0M5Bds?^=c*Il?$$D%5iF2qOc8ktl*SyrXI zny7PB!k@siwcs)*mOEV#>~E@)&d367VZ_sriZFZA_0t2X6^fbDfW7FUFFATAR}zq{ zLJhX9LF-r@`B9^X{86_dL*!2tCWj6~fijN@QXTT{&pSGCyMdEqd^MGnZ%e|0! zT2?B2xBjNnNmOCN=Xdl}BCvor-?vk7I+2#h`Zz~N5Ua%DENuoiF{o5mO+gJm(Km1W zb=s{#8FVxv8Kbvc_LKaVjrGPX!qWlCcG772?b4gpDR;3d0H15T^NI;?WWftB-zx3y z@4&=V-s0f>i@KrrM_jX|a0Lbf9AV!7@%FwN{D)J-^k-r?HFm@*hXKw1mSlvB@Jy=` zo-{(7n!#DIh$-~ttCxhNK73z4yJfcAnup|M?zgF46Gt11QKvI*70opZ2i#UMF3Kq* z5G`TCC@o8jVvXtw8{Y|7Om@4DI8ShJBqc7=X7}BJ`ZJQ{|Be8D@aV@9J1;)8te|&UT;ej@7Q?yFfkokprMw-grN=~5y zWAMDv{q68s%}Kvp+qg>r z8`9{ld9P&4>AW>IDBmR?ZvRW8Nx4o;$6Oln7KkQ`S{hs`XDmo*Mg8#30uKZ3 zv83YgM#<5CQ1X2vcBF}MB;&@jm*Az``9{T`8M z0R0Y&v>l}@3Bf=ToArm*_Jw^`=V(XS{2`Ebfj2%H?EaIFAOG;N>EC?x_!l3WalcgB zm1hKOjF;wObjKYS?Ez#k{_t^@t~;wiemF2LR=RO*jwA766Y@ji!FShywJRgjCyX{L_)6?!i`9U|TQEnSX7&q9sN{J7}sa z?M9DnN^6Te*3sD~8FxI#Q5|Iih87HS<3_Wz+D^#lZ=_r3qTiUk$+{q1>!^k~Hlm2- z^N_>U(k|JM0HZe()KY&4$^1r0TXoFq6^P&L{H|DfLT0H6aRi#3B>i6rY0v%mh0L`@ zv6SR|WJuhjZhE;qsW=}x+V-#%9Eh_%(hSCKGo&fveTk1}kg~Ru=p!`GUHW%3y7{t!~8Z;5+#k(X0xqA7Yo=gk#+JEIXqRszV$ z3-|8dGr#%wGFYHspF#d_=MDptblC9TkEVTlY1+O`F1=CuKR)OXz+)YJ+JsDrbsQuJ2+n_9rv~cje#ZOjBt#GptpB?11rLlSMt?gS5gqTZY|VcM z-IBh6aDXs+NO*r`CHXsui4(|3jsui^1O1f};qRa)?)T=R_0aMD+U5Lrkh#Dg5GV@} z)DR8tul;p@hcSx1!&v{ofcbhjV5t(oENkKcOJa=6^t-Uw}LY*m(aAK>iPG+Tsnyg7@#R z-Twg2EZ-aBHo(FAE9mw2#$c@98)JEI?BAiD|EbH`<{ifR4tt;eeCzV^+YiNmbv?uu z$Y{uc_wV4x8^QkjKA_qG0}RRW{-0|=a(t_S6i8=;j`!~g(*LO?$r0FZNdBe|NN|5O zpW*taq#zTWzNwY0#D8nZUz09>@6czr_lM}9r~kGijQ;)CAEwZO<$AnV$MS!x?yuqX z->duL`9IaYGYaqDBdfPti~U!p-~RIV0_qsy1ECBN@ZQHEZvc!p%|-q%P`)?N-hhPq zFMk*W1nIv37JeWghSmnMcGfob^m;Zn?=+q^zybRa2s}3+qx;Ll`g@m6L;k1BOn*v$ w{_73+_aaE)|5F6`ri6ccAoY=d?jSDnKkgvphd=!#e*1dAZN?Ld`t#ra0iAt{Gynhq delta 19684 zcmZ^~V{m3&&^8*|$;7suOl;ek*vZ5;?%1|%n-kl%GqH_{PG+9(ea}~?>ikJn?%L>e zp;zzjz1JH+V#k3o6{JDI(10L-pn!mYh=7JRnR$kQfq){Q>M)5x0BY+t>x^*T1hoLh zd#(Yg4g<_!4(}Ck%vxzb7lNK2PP8J)U~wn$-2_#IqD+O7QJ6pUXjho0IrsCZrmNYr zXf7G!;JcJC4phD!pXpcXshvJuERRB}A_aWk@gJ75j$2rKd#G5wU?={Da#5y4=lE92 zwn*n9U=n(4QUYBD3P@gWTtGhkMyseNS90Zy$5U_w{e)@3_ZkUbiHD)be(P3ZY|u%~ zcd>O=Mh(uyr3D(H;C(d7Pns~p+AM~8>P#_1HW;X1D!MOiEN%{x6O{{F ztbMvXafCKf6XztV@B>V^`_4)2wN=khydEOLQsNDjYgETJ6YzmLXMx;T&V#_*$l4}i z0=cw(#y7y=+$l#C|0Bh&)&G_2VK#wMAa!L=xG0)A{K~8((%T4&Rk-bp&Hi|*c)OP; z!OPb9F~~`mUhMIgZ4sQ;#4RWnymLAY2SafM_fypwE?@T}hv`5B}I*pnwkqSf_0-)a+S! zyo;EFdKUrXgTSfb!ZRlP;_j(#l)LT(JIHU~!lqIrP1R#KfX(>=9q@gSSDmkgVQMS1)~Fg#nQ|YtC+YW?$$u$JhHB8FY-(*!ka}@O(#uTD$oB6lP6t9*WpqE zu}hetQXwH=){@|I?MEkWOtq+%=sGxq>U$+Na^#RxdCxg^YSCwcCW{A>1P*a`!4eku zEv>om{bo5U%8vo2f^60z^xzUKVv$*)ko;Rb?Hk%CYPl36WyJ@+FDtQFmU!DX14;7F zKgu4wKc4C%CUt~`MOspv#H)>nJx#S=GeJ@A`Nr;X66_(-p#6@Ga2-K`fMgP)A&CJ8 zPq7@6MPZZ$hsC1)$o>dC(K36D=#tu;m*9CXSB~fG)_#jNgEos?4|UV7U5=9nE!OL~ zYze#=n_vmBkR(e<`FopQ{(uP>%SgqVpX#$>PFDVU8Zq5E?=Qm#Vk0SLM7l^oPVZn0 ziJC*rn<=nMb00#q8juuCv2?1nNsfRHJt?sYpWajpoOS2S9viBwYXqX?BmL0!L$Yy^ zHVcgs7s7Zp72tQD-jsLWrR1ZYCY7$rWHqWaG69~u;0krna7C@5SZo0K)vH-Y{ zt^5nrE9yGGpFslf19&`A5&9lYooiWW-Hea|8%y6GdP;^|-JBeEKTLHaJg zkfzj%*N$XTX{s|w`o|ssO46r2H|o1F_5&wr`P(cJhbln-K&nqbfGRS5x}6aSp}jcp zWAHu;jqJ=bHAnn)3wj7}T=4EB*ug3M-Owi=*q-~xLt`+no99kPMrQt>?v zZEDRViX1X%n+fz2vzdRGBefYi=H-0Rw>#*NjSd8F1xIO%H9*mz>>nQBkc4Pq7 zAOuSd4CuA!XM_vB3g`@&^|p_9*~E1ApbF4!xdfKUAIJ;CqjlEW@*%Hv@r&0HqKA-t z{^TcJUEg$F50$@H;jSPIGer97sJ_swbZzhD?FJ!OX`P2-rYIN#)^Yw}^BNp=Xcs24 z83#q3jD~r5DJnGv-<(dooClvY_oC(qpKv#F?2u_k)2a=D}8Y zAMDs@#OH5HhcU4f=DI=y0_smlKqSKgFwwhNTV*D!M`ti11z*uT;Kg2nV#1Lsj!<_< zE+na`F8*#Zk}(7~vf$3Js_60@2CI)#Dw>t*N$vl9XUR5jaE(oRnrK2UpF(~V-oHsN z6IwXK^?q%~g^M$zt%B7oOFude!g2cU{b^IL?qSKEsf7sDG&(!9W{L|IY~5N27*dC? z*_AD8EJU|?;9`tAZ2T!&50lR*11c#R6&+aD6_huo#K@;^Md5B8gEUEFK?G<(jyf@q z-}FyVv2~sFrCJ3tB%?Oa)1 zgdEOf7$*QP@U2HZssG4eOa)5^@WU?msH@yJC)zm}iq_OVN7degIj$ECb1Uv2KY7{n zOB>VWj-Ml@%fSHSxv09Qr*Nk4-poT4=yRDv9(U|` zIyOI6T4cMK6S%4N4ujzWsK~k*HE&{UAa9dr&f}*PPnCR2ztp zj$(+`8xegr4rs$4jFJ*u6Da$2S#?q$99`xS{8V}TRVaov11(gNC4nnc369g>zPnIq zPpQ8Xbu1AWiuWR0{fRmSG%5@8l)e8<-64&tUe0os3e93B_K6Q-R9p_4nP4{v?KE*& z502s@8`xsLWrF@pp}zFoN6%s=@d@r%e7m}YxNv&|2Lk&1{Hg&zKNEE>qBmNRy^{L* z1b(Go!CQgecr3Ay>h&>3J|mH0WM=I@uwbKe8mm_A0f6`A>Gke+=QW=9$KT5#CGYTWk2yKrAJ0bzuUCMa zIGpRV;j8VBo0FJVfS1>&_12T^-4sD~bW0RLwhy1T*XMT3^wswJ)9+W;?VjgEtdd}+ zhe&l(E03Y02{&_qg_Y+}n&r92kd~>;v}~NW{7b$90`Eb-LNxC|xq=)o8D(NhHp;g# z(n8sti6yj$l91Lbn-8@F+phT0dEF;`nnkVuipVwvp#ZtaW5#@%5O^|rbn4nGup zifbrysETic@~LyayNpE?+KKNUsxF8ih$09TXyu!={u402qq^}l zn)0KNqRBLl*6R1YOpZHR_C2YWAyslJ&*Id245=iY|8oZI>qU>tIN$%Ak!G@eF#u3K zcHCM!p|3VE%N`O_asN$S_;pr0hSZ`Ch(V`>c1fX(fh_{)*2Km)Tjs(0Vg)DL+odTS zchntot9@DDirDXIh91h4i#X6=&?3-QwiX$~tE-#nHfLl{8qALBnImZPVM4Q6 zBU;=P13I@8^Mn+wFr0Bz#i&6_S%6r9Sb;==G2h{^_4b8}fe9UZVr3Z$7*SVZ+l$QD z7PD*!&R*4#Fd3#S%EZ$^Fn_RoFeL~cxec`^8w%6QaMUzIE=9_ARCmjxz#rgQ?%4Za z>O>UGgHHJh<)|o7D4{44Sl1j(W~43OTyMiMc2Z4MqAwxXTU@LTK%~;f)Bx4FiCo4| z9K|F_%5+4eNGQ;f0-9RQG2l|J^Qnie6ajyff;$qHtpt6njGAQZOIbDxco}MH+Zsf- z`jg764rH~<`kVJpE)Qd!ZTYlomqFW5P^jlbWbJJu5ad8Y)KwkF2W+Jg!cCjIFeczr z;!j(QrK=l$N^fnf68raI^?&(q6~-dgm;xac`*8ta(0#2=E%&1n%h3`7nSo0I@Tb=N<~x9p2xwDW)2YUQ_ALv zxH<1;yB~)QWR6x^Fyhw6vY9O=^9OKpt|gPY<-A}!oFd}qx9$^}#kl=v|(E^B=0 zG`^Nd($`Vsi{3i#x_(}%#;)^|Ko`{j7S)!LjjZ9F~*!)Fx>b*jX6G-xOAncIE6s3@mXe7&6 zujCG;SkyfPJ0N-sh@)B2#TJN+tKfK*Ti!$-ahqkB-GaAQkCEW4vV)7Gw>RudO5#k8 zg$1?tPG~)Kle9V^K@HK|z@Dqeip71V4tQNW)khz&L-mu|HK@4G`2h(%iW9ge!dAH6 zPLlx;UkENRTIN3kbsPCYA}c zm45-C$d~JJPOBNM+PS746ERRk2nA^{Fb<+`XjTBIgl$)#Msf`vEb({>Otb1nrL?AC zF|MZDf1Zb#a9>KIG_)yH*H)JFOZ8YM1Xj53pmtVT=O4gQPR%pz)DjF4(`+r$emK^0LtLj+eeW~gL!an3|7*==}Aa+&-=Pq9%fs8-YGJj(aUk8U|9-F1_`B9~4QqvBADa9QxeW*h@{nA4t zNOQE>KRM640`s8w-w^z2omr83%w;*k?>{v;JsjaPxKSxfZ~yU+%y|mSA*&Y>OGA`L zyhOZq(++%EOV<(i(VO+_@q79PKcSX_8C9~OqgjLu_n1m4Aa^mY+1Kb1k^1PSC4GVa zZ}3SkZhyEs;#_*O0KX1lTVPjG`ex-Z;O74je-^)eVeY-#+#ly<-w4a7<~T`AsxrXg zhnoo&?Eo@~y!7gFOn;zXhC+r8*9DNPY(NHm87N_j{ zn>~Fg$sLk;^R0=GGd zc{rM(T>{0!rohth{~n0Dy9y>AIQ*p*wB0b&uN@T)RgCy;3VFBpOI6#zUlIg+fl^L` z$%qXB)TOjXy8Hp<~ME+0Qol|)>P9?rm+Vs(rH&MPmm9MplEmZN+-?5fU(1Y6jH$CiH7@R6>cl6PkRz4*%SHUoQ#9CLF0yw1azXC)H_egs7JU68 zbF|#P+z%#oJ@5|^l(((89l&2mPiWh!tM{f+Pjiv^_xQEI~non~5| zuxUzW+R)@)QxbN`ZYMkYAPSG|&%DIPd5&0ocQ25f=bQqdhg^>EFUi;5Z;U9lSH|`l zhO5#ZHdkt-9e8z23N@v_k}62!vxM0{6Pw_MzgDzV8we)!SNz1U5`}z}ap@)u?yHHL z2#c7dDLO7bswksVb?GK4_Rs!vRp;@jq5t&1DlT;YCJ4QnYqBaWWMiDNjpi;|G`P+< z4A?GvIUIR+)tD}wbtm~0dXXiW6%~Wnfqk?vDS_PnFMFPo)V<^mm?n1`8!EeSa~S37 zDz;zTI$ngCs7sJ`ctv{mK3ARJmuCFS;Bnrhlmv;n6ZI)*R%15eCU6Vma@&+UxRoQ- zu@Wv=4h)#xNm=+`CF5UZ*8^fieg~jLX*}NUwGgK)biegN5D9l{=sf&ncl$>*$sX7O0#T0as zYDr-D+(n%nbkaZ26}?IG@Oh!X6@FWkj$B;VFP$xy>!!`OLtErLog+xgSMaPH=kOr= zPimCqF<=V?6uJIiApr0c6bqEImKde(_l>e7E4dDo;kNP566OB`dr|!MWHv$mYh{~L zC8e|5R3|RwBJ#;PBw-PY7;ww@7x(AM|0mXCJ`{zRY~Qa~FI@ygqjX(YF%%?kFBDFVVTA#@NV`q2pHtHEDahWsroE$6I)3dIa46Nm!wL02D>}e*hm_id&Y7I#{Z-bR(Re^S`nH`3vG~p1%;!t_P0g)9fnyblgPRTg~E4D=3z9 z{!$S5A9(Y>;7#}oFR=%Xf`-#Uui4$r=o>BK@0EP+?A&}gns%82^}YX03?Tj^!N==< zOC^zYd~Yoli+)vvOH)#%&7CjidQh_MGb`cb7iWL(-?;`GxexXqevfg!9=BjBu^y`j zh?l;NlpQF12N-WtrL*Jo09`$jxbsAXI(3@=h5PXf?psoos7A6?X|hh7f`y%oGG?q7 z_~Gx?%!L3CDwS=*3eUxyPr`rtrC|o>B|`732d`VdbfB#W=hr276-}Rzg z|5PQ&*$iH+(exl-M#Ck9(XTAQfc|W>JFh!^ajqqQt=|?MEm48-uT{$VUTJLcHNAm= z`)ZZq12Pk~ZPy8rhPNp$00O_(!9Fbv2g~M+m;SKJuK$r?j8^P%^G#5h|9HyEBCkR# zi=bZZV!3|b_}aW)3)FrxR3;SDF~U<|h9zf6HLrtwz9~W|M`oH?4K&yVZ!E$s^IA-NklW8XrxuPTKaGo4R^q*cEUKSQW;9xCa^*x_`7{cn0o*Lht<#B7q%$o}Z)wZevNHzJv8d$Ty72CX0O)99ee8N8V z27krd^$Dwvgtzxdr`P-p95v))pJAXvxQvPk_SwK}z#+#cngToFRV1@m0?>SJ;&#EbS@US8l1|L|^+fp}T#ITVU_k!~ z!4vn4O|pf-9VU_`*GM!R@H~q0;fk8ac#woli{h$fXlI2_pzO?;`=m685GPw{VD?d$ z97_EBnh*R>=Q8QSrjHR$RIg|ZHc?<=7>!!+iC8sg!F(?D=b$dYMfLa^U=#Y1(kwoD z5@j;n#hn%WWcst*jq?*NrSq=(xI3dJTiupM-3gRo=j;KK_Td!f5bP{aN)!n0S2$ z+p#lph!TkOem3J!xkbHb^hQHseEKe*vD2Ctoqh<+Bv*i~TxO1|mrAn5EI}yZ5w9=B zoqVVA@&9&y>!~DU0d{fZ!$peBW=NTv@F z{Ap`?e)D!y$mN7IB(<5sfj|-|GVM(FY8?jnDD|fjTdM0a&AJo~(+eDoi3nl1D`4kd zhuK9!^3d8_YBLZEJ*ZNc2=+kY6~VR!pgCS!G!Gz%)viUTi2p=85Mf&V&0=7BX>eQ| zr(MamO*7lUG7uWgS-RcqP>Yei_q2n?((#UDR|O$pWlXUd5n@>QeD1z(+0Tx5?;Wl@ zG&|ZOx+_O-{`Qn1Bjr#~Wupyc>`?vE{O*qyctdm2{Mo^1FBQo#Vh_5laPLS47+g&f z-PRwaFnIaKPM?x?VWP9wEvoxXG?_NQL{ME&Dkna-^e1|yI&1daXnVTK3IDIuWfT{; za~Q1I#OJUnHA(+b!%N8H6g2VIDe>PtHjP_Rer6-6zlbNmB`2ZXYQv zmy!b|Rfu*rjif1(H1q)zyNqzI{R-@OLWog)+U2BK4z*xGZ&y@kmWL4!b_}cTtjAT<3+)Go z(W<1By(1J4q}^)qC!f#VKbLg8HjV|1>;RfRniT*%5?FsCGq;hC89C>~NNq$lWx%J+ zzA4!r;YB!hEm+D&rSK@8er>^OQzz-3?{QFsDrO$jUmEGMfx+`#-yHSCGhz2hQweD? zt(Z=(a%l`RKjHGt&H=nK6V6gHGFVsR=vV%^)ecb@E1tKCOvu(x?EFOasoifLbN5&T zPAh;!VGT=<896A$&fSLR`b>7=Ay_>2Lxm+XpBWn{#pLO|$y+ZtPFW*Imsw?#(%E_3 zg8R~*(oC;9!Hz-o92vz(X0IJhtarEb*}ONWc%eirJ-4bzpI`UK!@W*S>zaXbEQbBz zq`X+N&hv!j`ksj@1%nLji%Z>H*`^vgD5{BAJ`o}91{@xcm7t9t-TKTJ$c_kF#hv&L!bhvG>w->{ObN86Evo(TfG zXX{IK@%s=F+S_m9o|F0J;A0v*F13ZFVy~k79$dxA$Mmy`{nZG;loJBF|7$~1Q5Z+? zXGD5SDt1LH%|#-t3k?H6q5|^9ZlRLmi^QUCw&}1%Y`GJ%veKfae8~z4P2}ZH=T1|( zSi`z#1t|^NO>IWfq>m(7bHF53Hn{~fT4X<20Hm2rQjC>%seAOUlx+rXSTg~(Z?efA zWlfEsHgs0gO&~cYYNjQyAvHg0;h*oUA3VEI$cr;~^B=qv1($~_zK z$;6AAxME5{;y@8bjHwgnNEp2vIixtC769+v=PJANKAPWaTB)u6zz9$<{7dKuNe$f` zU)9t-#J|Ba>wkmi|HO5Zf4{t&rQV!>6k0j}oh6z(jP-}2{4AtWX_!2z$vM-P3A@Xu60yb}Ibq@O;QxFx zcVTroq6U(WooUTf+iFoB%B&QC#Yjg7VBaSWS$vIcZPG01Lh}*l*dhujjWkPx5dzCP zgAB%$B!6JFEzdjy8|Ic5u8~wo>L2rdMngk{YefdpB5Bwiv1i82=`?IzS;9Pp2;U2dO4NvR)z}forz)ej>_+L$)Fc_+90_r1eDdJ{b=pRaf)w>i7m@q2-Py*Kf6eTv%q$ z%@?M&+16)|QbNR}`V2#dA1z+MinAR>8TYrg^0@gmfEc$D%!jf)+zUtv=839*-sD(< z{e=AAipncq5FvmNNwh|YLjYW)0zSU+B!8K4Xn|f6C-3o37C@0Cw-6TP?){E{C4gCH zea+I^vMTsPIyl@xYNEpj>zNC>Ts2@1YcU)~EUc;&*nPp@gc_?!3Y$aW7kMb5pOXU7 z0ns$2Ip5IZwAO2D!N{^xC6F@LffSWeGr9cpxS_9>+cQtJ{F9p^J}%rRD4Zt_TaQSa z-z0=CM6D4nIpB$L>f?I^8Ga6iSHB*dL4#-}qHvTItSUjAHM0IS#0dn_Ia7>j!Kn#L z-6TZ7_@PaLqsyM|2IBuNkTpv1??a4e4f8&b8ZvUxd}l(=TX|lj%RTxUu^`4cYo|cQ2)6*6hJZGgzI+b zE4s1+H4F_~3TQm}>#&;uCo5LurxDa`S-`u=d0b~$S0yqrh>U?Js=e&Up>8~nQ55ZF zhduj9uwHVs3gKk zXT`&bK4}H<(*Yr_L)U6Sy1FUNaJw{Ivo6zG*|ekakXNYL7*ew6ELw9o5}41WJ2y+L0tm*=P_ds>`=HysU|h1ITz8^++0NvqIItMur+Ga${ zHj?@#MW|c;N#Vc=FA#=WsXcM?dq^@mBVU~B4Lz2qJ=5=_$PYqyv+Ql$V8nHV(izYr zIf8@4KUY`0}md_ts12pSGvCtT{R% zgaNg86oa^T^>YQNALu)nzr^iSfYdk? zcPZxqM(qCZ9!N$&;7GWV-mVXmuxoXrr5RmX#lMpw@EVsvb`JV{Dixe&9_0wE0EvPjo{KNurglXcEx@ZNSp_vP*2?Z28vta`hFu&bzj~8T8*g>#FS556TM~cQnp>FF7sXtuTr(M zT(emL)U8Rt3QwGlwO6vQaS0P>7DnOr5NMq=aAQu&^H3|Lkx0mEr@@h#+^vXUrTP5a z;2};D6;F}z865aaTfZ+V5Y9BZ5%ED8Q19p}zAMHEXZM#_vI8=;9uw-K7Tazs}If>R45RHVbr(tFn{#%cBTC^tPtit)GN z7SA%Th?&0g&7{h&5chqaUP$1~PbVlZBEjx6AeS)wUMN5N;K%M3{NC|*@l6r}V4|gE zt&ZABhAFste?!GwJ?kDwBEXCkKxGYRqF=|9sFdlw-2g9Onc|3BD=DQknNG{AAihbs zu5w_7p)cT#5~jFO-SabP?is&eXx0tz17k*?ZuGO+v19A2Oi+yd7qwg^y*%H7jc&R zIitFTSsf`lx-Y>Rp6U%@Xl@5$ev%a!g{U{G zeQu)33Smg@v?w>Kx3~`69z5T?Wxuq{?@Ep zj5Cjo+#~PM4?hcc9820AuOYm+?OZ(Yq>oM&%7-Sm5iFC;DU< z@5$zbVVJ48S#9Rtq8qY(hff;B^$MRC0v?-HD3&^YpF96kB-}|0fSLfId#IAsMc|hk zxPEbU874>DdhO)4%dXA+J$rf?d_c{D*kMuv!*Y~VAquwt!+aq+#7#sGJ^asHip=b|VEW6}Z%i>FrAJQxA z$RrH7UTPc&`r-xzq7RU_p0aVC4O$u}WuV?GI0!aPTQbUjHH8RYRSDNBo4aVd1 zueF+}uGe^b(JSVn0zOf!gJk`eStKNSF#@5z=ctatgQ#`hwDpbRxv6arM97AD-aIR--A$ z<68*ASz$PF5sn_xUY>`QaqEgCoJ;ph5@4_10-;YT2ovw*DG;A>Jg?+a*|i~fl$5-< zG+@1Nhj$JlVl;7rJCy)j8kh-Q$AG7%ZX~AVY^lHjJyYtaw%(ePUo{CT*8&WIjP?uN zJp7+k1a}JAjCv+>UR>_3_V#_uSRWGul%Eb^3;{7*xL&LQVG=2M41AB1J4QKt2RY&! zp>0yji&w7HY>T$b%n~Y;vY!TC$}c#ZdjWE-G3$P^QT+p>`mUfIC~NZl0{{WBN~srq zp-JUzT3q(75M~9MN%|>`oY`+8WAxJuJ~b$m%bor8Pg{ds{I-;t-Dba~E5WPACqI2E zY&s5n9_D2!8z{s>siT8f*H#Jsl+9U~+P$R30;diK)GN_C8z)wN9WxRkEtFle=W~ns zc+&(pL_#WqHp`3oZemoY0(eH0d?jBHYrvNtoTil#?TIv$#t#Cnx@+;o{pbeNWMA{| z(%#CViEL2=N@KnN5f*Y6a9|Jt>&x zcZWy|!sJ3#e37x72IYg6{l2-;X%MYv7!yw^5$rxZ=*erKb6pW)baEZ7uwFdL5yWj+ zbT-MfkqsMXjNt|?dcX@VPF;Fr$52A1yOQARQW5n6l^|77hYZ7tx~ANi6qjZz#iU#} zAnTWZ{Z^o~l3^BQ8D0$=JzLtu$*PnKh0+K0VA`X6M_PzS!(z{E3o5768T*$6F%_W(=C*gJ$gW z5_Igb%f{K@>)rP1iQ8?Bx*FcI3f-nYFn>r3SCF39pj;J=lgQKlOIQoc+R0gTd=i2K zrEDvlK}TU|?Xd}FPb*0hc&9)t?x^1`_nW^e?wk(Y8!h}~IuS=0CCpLbWe|=1yDDL) znhZO0NC~4c96+5@-ttj3HA#wK_2l@J=H#ky|3n%#Ta4SkiZ6Y{!$&Jw9dD@|D^lLq z$re?|!!92murERLf$m2UlmKF7ayw~5F>jF!8ZZcs6?xqo4DrNSzFTF4WU`D{J)l%5 ze}Ug-)6ybxOOm~YW#WCPT)^ECm!qQ>wfd7c2+&1*1z4L^*pAKXvSw5{p18f;u*BnM zt`c=2vcCYAp}8)OOYhSwGW-pC=Hw?%6aEVop90y(SXo3*%5Qa`6m2%&qv9uhr49R?#q|XM(c9~wgO$48t zGfePtWtFgD7`CdO9s>Hcuh{5<#&cm((9;rP)rgGO<<`uwkmRZ2a)R4J*!5=-I~%up zx5O^_15C)DZKzG9ZEfuKg07RxKgA4SS9|G_Uk^6o&JCXQF&szr8Jg>kTe$X986;Eg zo&%h=F>K2Gme$34J4zlsHWU3)9bKH(C(rvX^Ysi})JeL_$B zbH&>6mJ*Yw34byqa%D0otlo9A?Ehf<3GJd42n3GpxeS>v>bCuQL*}EceaMg7Xc37* zT?8nHt`+w;+-B@UV-pZ9yw|OKwI}=#!WTCg(*s90HlSGxU?wkCk*-z61m}|nUd+s1 z+$6Md4QP0C=tS98tgp`I;9fhiITb0<1!`APo`$59&guQ>{HoBBq%g+MAbXa!6K8%1 zy3+4=`tk@oa^PBW&UpuOU-gpya<~cepaEEv31cieQmH?<&y2sAprO8L!XQARrgwzG z9I%!PQU6|D4*Z-Hx7TZcvJ(9YM?#`h(We;Zr8K$t9GgMi3Gd+RnL^7J?nb`#eBy)k zAdY;^ai=2#J5zDBj)=cp2TErf|0(ONs#*~e7&wr<>5eYu`^tL36zGR?+&Vg+LIh}m z+Lr4T3&qMS)?!pU63rqrh-gnYjCO^`?;lMu;Kj?JaX~2HIm7G>Mr2D%f=DBos_C_i zz@O5+PZfAQeMh_m=DYf#UuO=m%&pz=#Hh z{JzwTk8VvGxbREZj}JrP0m&K!zYd_?0V?1F)j}n3LO3C~uMwylXGHK+a9TqDJe3=M zt?Vnx0GUdv!PLL%ST-|$jkSCKY4i9!Em$XAwA9*(;r)CXZWFU71xS6ImUwhd#Gnqf zXv4u1L)FVK3DT3NObol&}FsqvIqnnSL}&~SMltyM%lT24L1O8*WHCP z)|!(8iFlUufxtaJlw!9QVz`^4nLuW{od4FSs2 zA4WC16@Pdwfs*rws%+!>Kr1qWaIi#`&JRU+VUsR5wF|5J_;ym~j$dFq-kw6rzl{^( z53Tt@GFxjrCED_w{Fbv6&g1|x?hajf64Iv*a}Ig&%0WDsO95SvB-b)g@&2h+syK-% z=TU*f?gEq_L&dkziVfNwumJ+WGu`+1AU%~Ai&s}Nz$xPLGqd~LHt4D)4fEvr_qA_L zc?5ur$UXf`Nknp$BKAMmpk@Wz1P#-PC2y1`NwT--e75UkLN_8nHZcHfJGddK=mnx! zZP5V*yzg28RO`3rr-#w$1tFuS>-(Bh8D%zHpIXTg5Y!$!`?}Ap<>rl}8XOGpPjbB^ zRT(j>*zWkrx4dBH0Sd{7H#fReEfkoilI`bSA@!SV=#)SEe$+C=x1aCR;+>p@2_QaE zs_OUakIqgAZ+i&JI-df_zh!l!YsR-|SK=k=oI&Ji(Tjggn+NE?Z!61$xdL7?@(b_^ zf*tgh@NZ4L;M_ZsfTeA7dD=e~4L_K|XQ;PXPqn0Z3BC#8pvg~*Ez8Or!599DMm|x@ zAFW8rM=MW}KQRF+Ua^Te8{Bxwk>z`&VE&~RzuBHZO?uxCBK!(CI1-Q$bsjmkntSE4 zeWys<&i}DW+va^=fxAg^fv?!@&CNC&SG(EC;^dcxx}hIqOP{lgm$9Mqt2&I%g|CAB ze1)hwVAkZ7_#44XOg|iVR%G=R?oK|kot^imAa#|_E7Ke6^9}F5f+)vLcvqdYcmkuC z@sR|S0`Wx=GASCsX>T-!IZ6>BeW+agXZFkDreqT7UhoXeJ9a-lq3{V-L3jg3-a1~L zEh=Ij$b)L&3-cSWc>b~eMvHL#BM1GmjKP38_s8voz3q@cE&FNR^p0I}9!oTQUSY$X zemLKEX0T|^+!ry+7DwG3L|J=;?GRh8h{zyqQ);0wi!&xbqKOYFpNffEag^UJ4Y(+Q zvqtf&=-!(AoZaX9T1J!`-e4k<0q+vQCUVbvDIhPytb*{edJcB;u0aQHZG1+zSp0P1&_HSca zoO7|s3c$+&A?a^HLVrXCz08YYVZAQ>ZZtg8&$okH4vlZ~U5Y(5xROrQTj!4!Zh$A;Mr$?!nFBN& z#cWz=|0=^rCKJAA{=d!phH49JVCelno&JP<3MOmlhH?I-Ja11X30)vy$8(ag5<0rs+d!XF*Q! z)`fe55v-IEJdeb2@L(h^ppoCGpf^p!|1`+MzR^M(l(_GcfGBbq#lzLr(ie7%{|x?x zVe@uykcQp+?nWCso8`6=QHyc)7d~jz0b10)ukNf+!mK4>!uA((fiZu-NJJ933VI7z z@g(IAQ3xl~lOkFse+LrPUC)1%`q@JE@_M`yC=}gqw8f|c(7Yp%)t!2|Cj8HipzGSe|B{S+3FqPfRus|vJ7kw?|4^wcR&Fd~@}Ojt zCiA$vF8|X-w&6SPK@I3emNFg$>;YqAuH3SAN>0Z-$B^$8)mx>+?R4NMS-d`Hz69@x z>cx1Vq2QVLW2);PThnyY(VPHQ=aKfzizP z&ktR)pASDa|1uRNHEBA{9E9iAH~xMxjA(g{qTO@V>kenkh(0+a2}&BB1@*t|)yX zaVa?q>m!G>!Cf>jZSx88ml_y?44sIpFS&&SHv|R}00UxW<^O&CD)AOV`NW1Lfto%i z^IKY*oFj6xVBvyTlUu59;lmRS72JN`^tFkgyLmNIm_aVqfw1zReohI=3fposQ4k0O0qUwGCC4$yHy=Y^a5_|{QfX$$NPcjfqB~&dQez^13CUwP1Cq)QBBjw+N}=D z=~39@KVc?xq#`uLg&cw;RCzEbjM@J`U7UF|l;0o6$1wI~(hSoWVFvm7VVGh_W$as) zQihN%i6leJw=zxqB9SpXG#Vu9$i5YkWQmZaX%Q1eiy~2$DZ+1ZekbWZe?8BAoqO(m z?z#7VKIgvATO61==P1HJ#}a#aw~siWGC~F*gbGo6g7d6kv0Ti8q2eNZa7FrIfU$8R zy1+6o->s%_I`nFXqfF{n%e)KReJ@4yVf<{}dFBGAkJxizni8b9GrlTQ_wY!eWz5v^uT(Q;@iMv2JYgWH#D!Xc z50Bh?qQJVQ{{HzuQ@ok31J|Q^=4Ipe`^$=>&l0rez2OyvAQ|V9b7MyBR^LnK`WNU- z0JdzWX%J}az91bc!5mo#uK(E|fX;u2u%`BkjCZ)^OLWG$l-Pd31z9a(?1qc^!aRkN zW*4i!)MZRARCIYy5a)Jb2DySa;*^{-R+aAUDQ^=?m5pzVRsSwYi(i?P95@3l_E}iv z{!HF;X7)2j9-J6b^ke>6ejWa~mLTzT?o5ivh1yP!u}W#A>wdLyHZs*<653X)9Zj`9 zdi;y!?#8`(X%ZP8PZzt;pNECd=3dmNC*ke8d`}NOWr~`XnWu+D>9Y`iwO+y{)$MnE zWu|-{kLJzX$a%SS&};>4r2WzHCONhs|7J`?+%-`RL;?K(+B8$GFWnmrutbN{mskTl z%Z+c+$4;=fw89Q+Ie}fRmB&@Q)jFxP+-g`y+Fjh8+PvguQ&|>>B=Vr2?{13Xp^!t+ z6ilB@Nb*K^W4i%L#t_nbWocYsW^l8(5tjSJQ>4Ni zJTTEcy7fWU5!1l;sRiPsOt%vfy$3oZEVXvx7#idwnM*VB#TRc?6mGSjRgq~A^9iun z>Eppi5z;z)3&GBZ#Ub0$+o`Gy1XWxAT-)xmH$j4oGxwr#S*Nyz{Uad!StGWE{*QjD z^aZc(tEL?vz*oG*U9O0gE+E<%fjUnHWf!ExxRe`-I%daIEFgC(Nps?QtDkW%p2-k+03HO$Ty>cWWkK4*IJL;;k36f&I z5qFlB>de0*Jn^gL9x-#+*0I?H&lin?;~%}>Ha1MXB?WAcSPO~pr065>OKq{}YrBjJ z-L)q?GGNc%+Q&L{PWHOK;AZWxwJ{h3G8X`!7aPNiOJFiw;vlhOYPI8CfBsq1KhGGc73@()Xi}OQM7!F2Aux{O7hhArc-%C~`hs zFbsdQY|1YpT>3V!N2tt@$)L zo2j~u1NIiPWz#VsZ=tFOQe!X-(M-e(-({>a25+>uHE2Pfv_s*&;s|LB-14&gG}$I& z=rEt8s($)B{zprsqJrPa+UHq~-;U*c**z35wcQtn{Hi>0Vzh|8_O83neU$M^26W!O zX0*R2Te+NF-7bD@SFfT^xWt?W8Vba}zeMfWRqzfX5TA6v{_@=p0RguFR+K`s`$da0 z5H?xzGxUg0x-CGz!@|Ldc#UulvvK%7VUs)Q5~0w5?HPpR;dMH>YlPIx1?b{t?6P&7;}5^<&~nKfyt&&h!wS| zHTQfggFbGMKd)O*nBym(2OHNghN|dBDbsXH^NP{RxAI_PVK$zL!7;aG;X9~SSm}K% z{1vq_M|P$7akY4*T;UdJjOZK_&DO5&9{*?;-MAWUv?{l@Cw4*_;pTT0Cm0YL8aD}F z)a-_%l^j%c5=%llk@c3J53A}nIdt<^HjwUuDC^&;ClF1 zI~VV_z&npkfy|3aRC>>^$j_Ym@C3H!V3v#C9sUtG`*1TM>43%n#^ve2!KInB#y~Pd zEKHyLp~q6Zmw$0Q?1=DbLpA|7v~PH2YbQsQ5)=DMx`W!g>OR$v+K>VzcS=j4 z$-(QiP$ju>ice{}M6UX&`Q!a6hCy~T4Z{fu?I%}g=G12D_De*9A6)&LEa%@wI(AU3 z;Kn)Q_XAl0*!=wAPhbML5NihB>e!wR> zT5iMc0|Y|;Q40b=0M%qo)Q0N?2!z;F?faDt zbsd7Hz)>4or@tYP1`kpPify6d8{G)T0$Tx<9e-;%Hh^ipKa?Fn6di`zxUB*4{_3Aa z-v~$o2w-1Z;0d6M`kk}!c1Fyf7>Kf;2gvc#I3((KdcvE6&CmzCb?7w@T95a6fDCVr zwrpzYlRa=G9fR74Izb@lCZO^Fa6Nqw__-4>n63hNF_7RcXW#)v8Q`SBQNJTI-qda$ z36Th3LuG&%Iuy0Bx&IA0y8(IERR6zNZ>GV)T^{RAJ4QeN@--;x_uAuiecPs9IUNOZ ZF3QO`+Cl_>eV5@q%RIp`)$`Ze{{T7Q%S8YH From 9c682c5c5a3b1de3754781696218628a9da31a13 Mon Sep 17 00:00:00 2001 From: Andrei-George Stoica Date: Fri, 19 Feb 2021 19:33:39 +0200 Subject: [PATCH 059/206] Clarify firewall requirements --- windows/deployment/update/waas-delivery-optimization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index a9ec6583a1..2239629eb9 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -134,7 +134,7 @@ For more details, check out the [Adopting Windows as a Service at Microsoft](htt **Does Delivery Optimization work with WSUS?**: Yes. Devices will obtain the update payloads from the WSUS server, but must also have an internet connection as they communicate with the Delivery Optimization cloud service for coordination. -**Which ports does Delivery Optimization use?**: Delivery Optimization listens on port 7680 for requests from other peers by using TCP/IP. The service will register and open this port on the device, but you might need to set this port to accept inbound traffic through your firewall yourself. If you don't allow inbound traffic over port 7680, you can't use the peer-to-peer functionality of Delivery Optimization. However, devices can still successfully download by using HTTP or HTTPS traffic over port 80 (such as for default Windows Update data). +**Which ports does Delivery Optimization use?**: Delivery Optimization listens on port 7680 for requests from other peers by using TCP/IP. The service will register and open this port on the device, but you might need to set this port to accept inbound or outbound traffic through your firewall yourself. If you don't allow inbound or outbound traffic over port 7680, you can't use the peer-to-peer functionality of Delivery Optimization. However, devices can still successfully download by using HTTP or HTTPS traffic over port 80 (such as for default Windows Update data). If you set up Delivery Optimization to create peer groups that include devices across NATs (or any form of internal subnet that uses gateways or firewalls between subnets), it will use Teredo. For this to work, you must allow inbound TCP/IP traffic over port 3544. Look for a "NAT traversal" setting in your firewall to set this up. From 1018cf7c8a2e125f441bc32c0d86f1cfe6f3e975 Mon Sep 17 00:00:00 2001 From: Emily Womelsduff <66487667+ERWomelsduff@users.noreply.github.com> Date: Fri, 19 Feb 2021 10:47:40 -0800 Subject: [PATCH 060/206] Update set-up-and-test-cortana-in-windows-10.md Do not publish yet, please. --- .../cortana-at-work/set-up-and-test-cortana-in-windows-10.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/configuration/cortana-at-work/set-up-and-test-cortana-in-windows-10.md b/windows/configuration/cortana-at-work/set-up-and-test-cortana-in-windows-10.md index da23d57297..eb96cd95c4 100644 --- a/windows/configuration/cortana-at-work/set-up-and-test-cortana-in-windows-10.md +++ b/windows/configuration/cortana-at-work/set-up-and-test-cortana-in-windows-10.md @@ -19,7 +19,7 @@ ms.author: dansimp - **Cortana is regularly updated through the Microsoft Store.** Beginning with Windows 10, version 2004, Cortana is an appx preinstalled with Windows and is regularly updated through the Microsoft Store. To receive the latest updates to Cortana, you will need to [enable updates through the Microsoft Store](https://docs.microsoft.com/windows/configuration/stop-employees-from-using-microsoft-store). ## Set up and configure the Bing Answers feature -Bing Answers provides fast, authoritative results to search queries based on search terms. When the Bing Answers feature is enabled, users will be able to ask Cortana web-related questions in the Cortana in Windows app, such as "What's the current weather?" or "Who is the president of the U.S.?," and get a response, based on public results from Bing.com. +Bing Answers provides fast, authoritative results to search queries based on search terms. If you enable this policy setting for the Cortana Windows app or Microsoft Teams display, users can ask Cortana web-related questions such as “What’s the current weather?” or “What time is it in Tokyo?” The above experience is powered by Microsoft Bing, and Cortana sends the user queries to Bing. The use of Microsoft Bing is governed by the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement) and [Privacy Statement](https://privacy.microsoft.com/en-US/privacystatement). @@ -46,4 +46,4 @@ When a user enters a search query (by speech or text), Cortana evaluates if the Bing Answers is enabled by default for all users. However, admins can configure and change this for specific users and user groups in their organization. ## How the Bing Answer policy configuration is applied -Before a query is sent to Bing for a search of public results from Bing.com, the Bing Answers service checks with the Office Cloud Policy Service to see if there are any policy configurations that pertain to the user for allowing Bing Answers to respond to questions users ask Cortana. If the user is a member of an AAD group that is assigned that policy configuration, then the appropriate policy settings are applied and a check is made again in 10 minutes. \ No newline at end of file +Before a query is sent to Bing for a search of public results from Bing.com, the Bing Answers service checks with the Office Cloud Policy Service to see if there are any policy configurations that pertain to the user for allowing Bing Answers to respond to questions users ask Cortana. If the user is a member of an AAD group that is assigned that policy configuration, then the appropriate policy settings are applied and a check is made again in 10 minutes. From 29235b0a0c00fbed0e89dd3fc24e854f8f2eac95 Mon Sep 17 00:00:00 2001 From: Apu Dutta Date: Fri, 19 Feb 2021 12:15:21 -0800 Subject: [PATCH 061/206] Address review comments --- windows/client-management/mdm/euiccs-ddf-file.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/client-management/mdm/euiccs-ddf-file.md b/windows/client-management/mdm/euiccs-ddf-file.md index 24adff5b0b..4101bc0f61 100644 --- a/windows/client-management/mdm/euiccs-ddf-file.md +++ b/windows/client-management/mdm/euiccs-ddf-file.md @@ -124,7 +124,7 @@ The XML below if for Windows 10, version 1803. - Indicates whether the download of a profile with PPR1 is allowed. If the eUICC has already a profile (regardless of its origin and policy rules associated with it), then the download of a profile with PPR1 is not allowed. + Indicates whether the download of a profile with PPR1 is allowed. If the eUICC already has a profile (regardless of its origin and policy rules associated with it), the download of a profile with PPR1 is not allowed. @@ -145,7 +145,7 @@ The XML below if for Windows 10, version 1803. - Indicates whether the eUICC has already a profile with PPR1. + Indicates whether the eUICC already has a profile with PPR1. @@ -189,7 +189,7 @@ The XML below if for Windows 10, version 1803. - Node representing the discovery operation for a server name. The node name is the fully qualified domain name of the SM-DP+ server that will be used for profile discovery. Creation of this subtree triggers a discovery request. + Node specifying the server name for a discovery operation. The node name is the fully qualified domain name of the SM-DP+ server that will be used for profile discovery. Creation of this subtree triggers a discovery request. From b24137f0063c3c2bccc21d990dd06d9b6c39be73 Mon Sep 17 00:00:00 2001 From: Warren Williams Date: Fri, 19 Feb 2021 15:33:21 -0600 Subject: [PATCH 062/206] Update windows/client-management/mandatory-user-profile.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/client-management/mandatory-user-profile.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index 4feae3100d..83dca7f380 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -53,8 +53,6 @@ First, you create a default user profile with the customizations that you want, > [!NOTE] > Use a lab or extra computer running a clean installation of Windows 10 to create a default user profile. Do not use a computer that is required for business (that is, a production computer). This process removes all domain accounts from the computer, including user profile folders. -======= - 1. Configure the computer settings that you want to include in the user profile. For example, you can configure settings for the desktop background, uninstall default apps, install line-of-business apps, and so on. > [!NOTE] From 3b0afcee67b41dfdb47aae2e24c6d9830a3a6bcb Mon Sep 17 00:00:00 2001 From: Warren Williams Date: Fri, 19 Feb 2021 15:33:29 -0600 Subject: [PATCH 063/206] Update windows/client-management/mandatory-user-profile.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/client-management/mandatory-user-profile.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index 83dca7f380..7c3c3ba50f 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -103,7 +103,6 @@ Starting in Windows 10 version (2004) Open the Settings app and click on Advance ![Example of UI](images/copy-to-path.png) -======= - If the device is not joined to the domain, you can save the profile locally and then copy it to the shared folder location. - Optionally, you can check the **Mandatory profile** checkbox. This step is not required but will set permissions that are more restrictive and we recommend doing so. From 472af05f8ac8cea8e76cdd12414f7b6baf3d92f6 Mon Sep 17 00:00:00 2001 From: Warren Williams Date: Fri, 19 Feb 2021 15:49:00 -0600 Subject: [PATCH 064/206] Update windows/client-management/mandatory-user-profile.md Co-authored-by: Trond B. Krokli <38162891+illfated@users.noreply.github.com> --- windows/client-management/mandatory-user-profile.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/client-management/mandatory-user-profile.md b/windows/client-management/mandatory-user-profile.md index 7c3c3ba50f..b1ce6d51a9 100644 --- a/windows/client-management/mandatory-user-profile.md +++ b/windows/client-management/mandatory-user-profile.md @@ -101,8 +101,8 @@ Starting in Windows 10 version (2004) Open the Settings app and click on Advance - If the device is joined to the domain and you are signed in with an account that has permissions to write to a shared folder on the network, you can enter the shared folder path. - - ![Example of UI](images/copy-to-path.png) + ![Example of UI](images/copy-to-path.png) + - If the device is not joined to the domain, you can save the profile locally and then copy it to the shared folder location. - Optionally, you can check the **Mandatory profile** checkbox. This step is not required but will set permissions that are more restrictive and we recommend doing so. From 3bcf38908d58b3a974e82ce31e88d61401abf5dc Mon Sep 17 00:00:00 2001 From: Patrick McDonald <48225667+pamcdo@users.noreply.github.com> Date: Fri, 19 Feb 2021 17:53:21 -0500 Subject: [PATCH 065/206] Update hello-hybrid-key-whfb-settings-policy.md The ", and" is part of the dialog box and should be bolded as well. Not bolding it has led customers to believe there are two separate options instead of one. --- .../hello-hybrid-key-whfb-settings-policy.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md index d7355b0c32..d8a838a906 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md @@ -13,7 +13,7 @@ manager: dansimp ms.collection: M365-identity-device-management ms.topic: article localizationpriority: medium -ms.date: 08/20/2018 +ms.date: 02/19/2021 ms.reviewer: --- # Configure Hybrid Windows Hello for Business: Group Policy @@ -55,7 +55,7 @@ Sign-in a domain controller or management workstations with _Domain Admin_ equiv 7. Expand **Windows Settings**, **Security Settings**, and click **Public Key Policies**. 8. In the details pane, right-click **Certificate Services Client � Auto-Enrollment** and select **Properties**. 9. Select **Enabled** from the **Configuration Model** list. -10. Select the **Renew expired certificates**, **update pending certificates**, and **remove revoked certificates** check box. +10. Select the **Renew expired certificates**, **update pending certificates**, **and remove revoked certificates** check box. 11. Select the **Update certificates that use certificate templates** check box. 12. Click **OK**. Close the **Group Policy Management Editor**. From 196c74f673f21454514c8af192152e8dcae6cfed Mon Sep 17 00:00:00 2001 From: Andrei-George Stoica Date: Sat, 20 Feb 2021 08:35:27 +0200 Subject: [PATCH 066/206] Modified from or to and to show that both are required --- windows/deployment/update/waas-delivery-optimization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index 2239629eb9..d497aeae62 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -134,7 +134,7 @@ For more details, check out the [Adopting Windows as a Service at Microsoft](htt **Does Delivery Optimization work with WSUS?**: Yes. Devices will obtain the update payloads from the WSUS server, but must also have an internet connection as they communicate with the Delivery Optimization cloud service for coordination. -**Which ports does Delivery Optimization use?**: Delivery Optimization listens on port 7680 for requests from other peers by using TCP/IP. The service will register and open this port on the device, but you might need to set this port to accept inbound or outbound traffic through your firewall yourself. If you don't allow inbound or outbound traffic over port 7680, you can't use the peer-to-peer functionality of Delivery Optimization. However, devices can still successfully download by using HTTP or HTTPS traffic over port 80 (such as for default Windows Update data). +**Which ports does Delivery Optimization use?**: Delivery Optimization listens on port 7680 for requests from other peers by using TCP/IP. The service will register and open this port on the device, but you might need to set this port to accept inbound and outbound traffic through your firewall yourself. If you don't allow inbound and outbound traffic over port 7680, you can't use the peer-to-peer functionality of Delivery Optimization. However, devices can still successfully download by using HTTP or HTTPS traffic over port 80 (such as for default Windows Update data). If you set up Delivery Optimization to create peer groups that include devices across NATs (or any form of internal subnet that uses gateways or firewalls between subnets), it will use Teredo. For this to work, you must allow inbound TCP/IP traffic over port 3544. Look for a "NAT traversal" setting in your firewall to set this up. From d9803f8f375d74893d18dc6847f2024babe8be20 Mon Sep 17 00:00:00 2001 From: Patrick McDonald <48225667+pamcdo@users.noreply.github.com> Date: Sat, 20 Feb 2021 19:02:46 -0500 Subject: [PATCH 067/206] Update windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../hello-for-business/hello-hybrid-key-whfb-settings-policy.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md index d8a838a906..5a639e777f 100644 --- a/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md +++ b/windows/security/identity-protection/hello-for-business/hello-hybrid-key-whfb-settings-policy.md @@ -55,7 +55,7 @@ Sign-in a domain controller or management workstations with _Domain Admin_ equiv 7. Expand **Windows Settings**, **Security Settings**, and click **Public Key Policies**. 8. In the details pane, right-click **Certificate Services Client � Auto-Enrollment** and select **Properties**. 9. Select **Enabled** from the **Configuration Model** list. -10. Select the **Renew expired certificates**, **update pending certificates**, **and remove revoked certificates** check box. +10. Select the **Renew expired certificates, update pending certificates, and remove revoked certificates** check box. 11. Select the **Update certificates that use certificate templates** check box. 12. Click **OK**. Close the **Group Policy Management Editor**. From d612aa6bf2868b407d203b0ef607475932ea5b5f Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 22 Feb 2021 14:31:51 +0800 Subject: [PATCH 068/206] Update two pages --- .../advanced-hunting-schema-reference.md | 3 ++- .../microsoft-defender-atp/tvm-hunt-exposed-devices.md | 7 ++++--- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md index 17f6ebfe5d..c2f9975fac 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-schema-reference.md @@ -64,7 +64,8 @@ Table and column names are also listed within the Microsoft Defender Security Ce | **[DeviceImageLoadEvents](advanced-hunting-deviceimageloadevents-table.md)** | DLL loading events | | **[DeviceEvents](advanced-hunting-deviceevents-table.md)** | Multiple event types, including events triggered by security controls such as Microsoft Defender Antivirus and exploit protection | | **[DeviceFileCertificateInfo](advanced-hunting-devicefilecertificateinfo-table.md)** | Certificate information of signed files obtained from certificate verification events on endpoints | -| **[DeviceTvmSoftwareInventoryVulnerabilities](advanced-hunting-devicetvmsoftwareinventoryvulnerabilities-table.md)** | Inventory of software on devices as well as any known vulnerabilities in these software products | +| **[DeviceTvmSoftwareInventory](advanced-hunting-devicetvmsoftwareinventory-table.md)** | Inventory of software installed on devices, including their version information and end-of-support status | +| **[DeviceTvmSoftwareVulnerabilities](advanced-hunting-devicetvmsoftwarevulnerabilities-table.md)** | Software vulnerabilities found on devices and the list of available security updates that address each vulnerability | | **[DeviceTvmSoftwareVulnerabilitiesKB ](advanced-hunting-devicetvmsoftwarevulnerabilitieskb-table.md)** | Knowledge base of publicly disclosed vulnerabilities, including whether exploit code is publicly available | | **[DeviceTvmSecureConfigurationAssessment](advanced-hunting-devicetvmsecureconfigurationassessment-table.md)** | Threat & Vulnerability Management assessment events, indicating the status of various security configurations on devices | | **[DeviceTvmSecureConfigurationAssessmentKB](advanced-hunting-devicetvmsecureconfigurationassessmentkb-table.md)** | Knowledge base of various security configurations used by Threat & Vulnerability Management to assess devices; includes mappings to various standards and benchmarks | diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md index 3ee21c13f2..0ca6c08b6d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md @@ -38,7 +38,9 @@ Advanced hunting is a query-based threat-hunting tool that lets you explore up t ### Schema tables -- [DeviceTvmSoftwareInventoryVulnerabilities](advanced-hunting-devicetvmsoftwareinventoryvulnerabilities-table.md) - Inventory of software on devices as well as any known vulnerabilities in these software products +- [DeviceTvmSoftwareInventory](advanced-hunting-devicetvmsoftwareinventory-table.md) - Inventory of software installed on devices, including their version information and end-of-support status + +- [DeviceTvmSoftwareVulnerabilities](advanced-hunting-devicetvmsoftwarevulnerabilities-table.md) - Software vulnerabilities found on devices and the list of available security updates that address each vulnerability - [DeviceTvmSoftwareVulnerabilitiesKB](advanced-hunting-devicetvmsoftwarevulnerabilitieskb-table.md) - Knowledge base of publicly disclosed vulnerabilities, including whether exploit code is publicly available @@ -56,7 +58,7 @@ Advanced hunting is a query-based threat-hunting tool that lets you explore up t ```kusto // Search for devices with High active alerts or Critical CVE public exploit -DeviceTvmSoftwareInventoryVulnerabilities +DeviceTvmSoftwareVulnerabilities | join kind=inner(DeviceTvmSoftwareVulnerabilitiesKB) on CveId | where IsExploitAvailable == 1 and CvssScore >= 7 | summarize NumOfVulnerabilities=dcount(CveId), @@ -66,7 +68,6 @@ DeviceName=any(DeviceName) by DeviceId DeviceName=any(DeviceName) by DeviceId, AlertId | project DeviceName, NumOfVulnerabilities, AlertId | order by NumOfVulnerabilities desc - ``` ## Related topics From 3aba7e57c8d34b634cdbb044225c12aa35a3ac26 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 22 Feb 2021 14:53:22 +0800 Subject: [PATCH 069/206] Added two new pages and deleted old one --- ...nting-devicetvmsoftwareinventory-table.md} | 20 +++--- ...-devicetvmsoftwarevulnerabilities-table.md | 62 +++++++++++++++++++ 2 files changed, 74 insertions(+), 8 deletions(-) rename windows/security/threat-protection/microsoft-defender-atp/{advanced-hunting-devicetvmsoftwareinventoryvulnerabilities-table.md => advanced-hunting-devicetvmsoftwareinventory-table.md} (69%) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventoryvulnerabilities-table.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md similarity index 69% rename from windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventoryvulnerabilities-table.md rename to windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md index 9a7862714a..b550022bcb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventoryvulnerabilities-table.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md @@ -1,6 +1,6 @@ --- -title: DeviceTvmSoftwareInventoryVulnerabilities table in the advanced hunting schema -description: Learn about the inventory of software in your devices and their vulnerabilities in the DeviceTvmSoftwareInventoryVulnerabilities table of the advanced hunting schema. +title: DeviceTvmSoftwareInventory table in the advanced hunting schema +description: Learn about the inventory of software in your devices in the DeviceTvmSoftwareInventory table of the advanced hunting schema. keywords: advanced hunting, threat hunting, cyber threat hunting, mdatp, microsoft defender atp, wdatp search, query, telemetry, schema reference, kusto, table, column, data type, description, threat & vulnerability management, TVM, device management, software, inventory, vulnerabilities, CVE ID, OS DeviceTvmSoftwareInventoryVulnerabilities search.product: eADQiWindows 10XVcnh search.appverid: met150 @@ -8,8 +8,8 @@ ms.prod: m365-security ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security -ms.author: dolmont -author: DulceMontemayor +ms.author: maccruz +author: maccruz ms.localizationpriority: medium manager: dansimp audience: ITPro @@ -18,7 +18,7 @@ ms.topic: article ms.technology: mde --- -# DeviceTvmSoftwareInventoryVulnerabilities +# DeviceTvmSoftwareInventory [!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] @@ -30,7 +30,10 @@ ms.technology: mde [!include[Prerelease information](../../includes/prerelease.md)] -The `DeviceTvmSoftwareInventoryVulnerabilities` table in the advanced hunting schema contains the [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) inventory of software on your devices as well as any known vulnerabilities in these software products. This table also includes operating system information, CVE IDs, and vulnerability severity information. Use this reference to construct queries that return information from the table. +The `DeviceTvmSoftwareInventory` table in the advanced hunting schema contains the [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) inventory of software on your devices. Use this reference to construct queries that return information from the table. + +>[!NOTE] +>The `DeviceTvmSoftwareInventory` and `DeviceTvmSoftwareVulnerabilities` tables have replaced the `DeviceTvmSoftwareInventoryVulnerabilities` table. Together, the first two tables include more columns you can use to help inform your vulnerability management activities. For information on other tables in the advanced hunting schema, see [the advanced hunting reference](advanced-hunting-reference.md). @@ -44,8 +47,8 @@ For information on other tables in the advanced hunting schema, see [the advance | `SoftwareVendor` | string | Name of the software vendor | | `SoftwareName` | string | Name of the software product | | `SoftwareVersion` | string | Version number of the software product | -| `CveId` | string | Unique identifier assigned to the security vulnerability under the Common Vulnerabilities and Exposures (CVE) system | -| `VulnerabilitySeverityLevel` | string | Severity level assigned to the security vulnerability based on the CVSS score and dynamic factors influenced by the threat landscape | +| `EndOfSupportStatus` | string | Indicates the lifecycle stage of the software product relative to its specified end-of-support (EOS) or end-of-life (EOL) date | +| `EndOfSupportDate` | string | End-of-support (EOS) or end-of-life (EOL) date of the software product | @@ -55,3 +58,4 @@ For information on other tables in the advanced hunting schema, see [the advance - [Learn the query language](advanced-hunting-query-language.md) - [Understand the schema](advanced-hunting-schema-reference.md) - [Overview of Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) + diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md new file mode 100644 index 0000000000..cf0f41c4c4 --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md @@ -0,0 +1,62 @@ +--- +title: DeviceTvmSoftwareVulnerabilities table in the advanced hunting schema +description: Learn about software vulnerabilities found on devices and the list of available security updates that address each vulnerability in the DeviceTvmSoftwareVulnerabilities table of the advanced hunting schema. +keywords: advanced hunting, threat hunting, cyber threat hunting, mdatp, microsoft defender atp, wdatp search, query, telemetry, schema reference, kusto, table, column, data type, description, threat & vulnerability management, TVM, device management, software, inventory, vulnerabilities, CVE ID, OS DeviceTvmSoftwareInventoryVulnerabilities +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: m365-security +ms.mktglfcycl: deploy +ms.sitesec: library +ms.pagetype: security +ms.author: maccruz +author: maccruz +ms.localizationpriority: medium +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: article +ms.technology: mde +--- + +# DeviceTvmSoftwareVulnerabilities + +[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] + +**Applies to:** +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/?linkid=2154037) +- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) + +>Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/WindowsForBusiness/windows-atp?ocid=docs-wdatp-advancedhuntingref-abovefoldlink) + +[!include[Prerelease information](../../includes/prerelease.md)] + +The `DeviceTvmSoftwareVulnerabilities` table in the advanced hunting schema contains the [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) inventory of vulnerabilities found on devices and the list of available security updates that address each vulnerability. Use this reference to construct queries that return information from the table. + +>[!NOTE] +>The `DeviceTvmSoftwareInventory` and `DeviceTvmSoftwareVulnerabilities` tables have replaced the `DeviceTvmSoftwareInventoryVulnerabilities` table. Together, the first two tables include more columns you can use to help inform your vulnerability management activities. + +For information on other tables in the advanced hunting schema, see [the advanced hunting reference](advanced-hunting-reference.md). + +| Column name | Data type | Description | +|-------------|-----------|-------------| +| `DeviceId` | string | Unique identifier for the device in the service | +| `DeviceName` | string | Fully qualified domain name (FQDN) of the device | +| `OSPlatform` | string | Platform of the operating system running on the device. This indicates specific operating systems, including variations within the same family, such as Windows 10 and Windows 7. | +| `OSVersion` | string | Version of the operating system running on the device | +| `OSArchitecture` | string | Architecture of the operating system running on the device | +| `SoftwareVendor` | string | Name of the software vendor | +| `SoftwareName` | string | Name of the software product | +| `SoftwareVersion` | string | Version number of the software product | +| `CveId` | string | Unique identifier assigned to the security vulnerability under the Common Vulnerabilities and Exposures (CVE) system | +| `VulnerabilitySeverityLevel` | string | Severity level assigned to the security vulnerability based on the CVSS score and dynamic factors influenced by the threat landscape | +| `RecommendedSecurityUpdate` | string | Name or description of the security update provided by the software vendor to address the vulnerability | +| `RecommendedSecurityUpdateId` | string | Identifier of the applicable security updates or identifier for the corresponding guidance or knowledge base (KB) articles | + + + +## Related topics + +- [Advanced hunting overview](advanced-hunting-overview.md) +- [Learn the query language](advanced-hunting-query-language.md) +- [Understand the schema](advanced-hunting-schema-reference.md) +- [Overview of Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) From 3c55e1ca6b9aec3d289bd40f21d5f20cb1105910 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 22 Feb 2021 15:13:56 +0800 Subject: [PATCH 070/206] Update TOC.md --- windows/security/threat-protection/TOC.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 958d86d6b1..0b3f297f8b 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -429,7 +429,8 @@ ##### [DeviceNetworkEvents](microsoft-defender-atp/advanced-hunting-devicenetworkevents-table.md) ##### [DeviceProcessEvents](microsoft-defender-atp/advanced-hunting-deviceprocessevents-table.md) ##### [DeviceRegistryEvents](microsoft-defender-atp/advanced-hunting-deviceregistryevents-table.md) -##### [DeviceTvmSoftwareInventoryVulnerabilities](microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventoryvulnerabilities-table.md) +##### [DeviceTvmSoftwareInventory](microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md) +##### [DeviceTvmSoftwareVulnerabilities](microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md) ##### [DeviceTvmSoftwareVulnerabilitiesKB](microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilitieskb-table.md) ##### [DeviceTvmSecureConfigurationAssessment](microsoft-defender-atp/advanced-hunting-devicetvmsecureconfigurationassessment-table.md) ##### [DeviceTvmSecureConfigurationAssessmentKB](microsoft-defender-atp/advanced-hunting-devicetvmsecureconfigurationassessmentkb-table.md) From 544c80ed1edf0fdf8adfb70a1a9ef5f96aaaff12 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 22 Feb 2021 16:12:10 +0800 Subject: [PATCH 071/206] More editorial edits --- .../advanced-hunting-devicetvmsoftwareinventory-table.md | 2 +- .../advanced-hunting-devicetvmsoftwarevulnerabilities-table.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md index b550022bcb..99b53c1d97 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md @@ -30,7 +30,7 @@ ms.technology: mde [!include[Prerelease information](../../includes/prerelease.md)] -The `DeviceTvmSoftwareInventory` table in the advanced hunting schema contains the [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) inventory of software on your devices. Use this reference to construct queries that return information from the table. +The `DeviceTvmSoftwareInventory` table in the advanced hunting schema contains the [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) inventory of software currently installed on devices in your network, including end of support information. You can, for instance, hunt for events involving devices that are installed with a currently vulnerable software version. Use this reference to construct queries that return information from the table. >[!NOTE] >The `DeviceTvmSoftwareInventory` and `DeviceTvmSoftwareVulnerabilities` tables have replaced the `DeviceTvmSoftwareInventoryVulnerabilities` table. Together, the first two tables include more columns you can use to help inform your vulnerability management activities. diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md index cf0f41c4c4..a48860436e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md @@ -30,7 +30,7 @@ ms.technology: mde [!include[Prerelease information](../../includes/prerelease.md)] -The `DeviceTvmSoftwareVulnerabilities` table in the advanced hunting schema contains the [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) inventory of vulnerabilities found on devices and the list of available security updates that address each vulnerability. Use this reference to construct queries that return information from the table. +The `DeviceTvmSoftwareVulnerabilities` table in the advanced hunting schema contains the [Threat & Vulnerability Management](next-gen-threat-and-vuln-mgt.md) list of vulnerabilities in installed software products. This table also includes operating system information, CVE IDs, and vulnerability severity information. You can use this table, for example, to hunt for events involving devices that have severe vulnerabilities in their software. Use this reference to construct queries that return information from the table. >[!NOTE] >The `DeviceTvmSoftwareInventory` and `DeviceTvmSoftwareVulnerabilities` tables have replaced the `DeviceTvmSoftwareInventoryVulnerabilities` table. Together, the first two tables include more columns you can use to help inform your vulnerability management activities. From 13e59ef592d0f2469fcdd6a763c1a4f6a1037ce5 Mon Sep 17 00:00:00 2001 From: SujudAbu-Atta <78092864+SujudAbu-Atta@users.noreply.github.com> Date: Mon, 22 Feb 2021 10:43:09 +0200 Subject: [PATCH 072/206] Update api-release-notes.md Added batch updated alerts API release note --- .../microsoft-defender-atp/api-release-notes.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-release-notes.md b/windows/security/threat-protection/microsoft-defender-atp/api-release-notes.md index b46d84553b..13ca1ef039 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-release-notes.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-release-notes.md @@ -25,6 +25,12 @@ ms.technology: mde The following information lists the updates made to the Microsoft Defender for Endpoint APIs and the dates they were made. +### 10.02.2021 +
+ +- Added new API: [Batch update alerts](batch-update-alerts.md). + +
### 25.01.2021
@@ -70,4 +76,4 @@ The following information lists the updates made to the Microsoft Defender for E - Added option to expand the Alert entity with its related Evidence. See [List Alerts](get-alerts.md).
-
\ No newline at end of file +
From 0646bca665e5cb644b80dc9f579b8c33ddf625f1 Mon Sep 17 00:00:00 2001 From: Jin Lin Date: Mon, 22 Feb 2021 16:53:30 -0800 Subject: [PATCH 073/206] Update enable-exploit-protection.md Additional parameters for hardware-enforced stack protection (https://techcommunity.microsoft.com/t5/windows-kernel-internals/understanding-hardware-enforced-stack-protection/ba-p/1247815) --- .../microsoft-defender-atp/enable-exploit-protection.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index 046a880398..3f2f1e958a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -228,6 +228,7 @@ This table lists the individual **Mitigations** (and **Audits**, when available) | Mitigation type | Applies to | Mitigation cmdlet parameter keyword | Audit mode cmdlet parameter | | :-------------- | :--------- | :---------------------------------- | :-------------------------- | | Control flow guard (CFG) | System and app-level | `CFG`, `StrictCFG`, `SuppressExports` | Audit not available | +| Hardware-enforced Stack Protection | App-level only | `UserShadowStack`, `UserShadowStackStrictMode` | `AuditUserShadowStack` | | Data Execution Prevention (DEP) | System and app-level | `DEP`, `EmulateAtlThunks` | Audit not available | | Force randomization for images (Mandatory ASLR) | System and app-level | `ForceRelocateImages` | Audit not available | | Randomize memory allocations (Bottom-Up ASLR) | System and app-level | `BottomUp`, `HighEntropy` | Audit not available From b656b88244dc5c6829c97d5bf66e3d2874cc237e Mon Sep 17 00:00:00 2001 From: Jin Lin Date: Mon, 22 Feb 2021 17:05:55 -0800 Subject: [PATCH 074/206] Update enable-exploit-protection.md Policy also works for system-mode --- .../microsoft-defender-atp/enable-exploit-protection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md index 3f2f1e958a..50c80fed5b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/enable-exploit-protection.md @@ -228,7 +228,7 @@ This table lists the individual **Mitigations** (and **Audits**, when available) | Mitigation type | Applies to | Mitigation cmdlet parameter keyword | Audit mode cmdlet parameter | | :-------------- | :--------- | :---------------------------------- | :-------------------------- | | Control flow guard (CFG) | System and app-level | `CFG`, `StrictCFG`, `SuppressExports` | Audit not available | -| Hardware-enforced Stack Protection | App-level only | `UserShadowStack`, `UserShadowStackStrictMode` | `AuditUserShadowStack` | +| Hardware-enforced Stack Protection | System and app-level | `UserShadowStack`, `UserShadowStackStrictMode` | `AuditUserShadowStack` | | Data Execution Prevention (DEP) | System and app-level | `DEP`, `EmulateAtlThunks` | Audit not available | | Force randomization for images (Mandatory ASLR) | System and app-level | `ForceRelocateImages` | Audit not available | | Randomize memory allocations (Bottom-Up ASLR) | System and app-level | `BottomUp`, `HighEntropy` | Audit not available From 936be85c51592f71e1c70b3a1d185610be7dd497 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 23 Feb 2021 11:41:52 +0500 Subject: [PATCH 075/206] Addition of Configuration Updated a configuration in the document to reflect the CPU usage during scheduled scans. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8929 --- .../microsoft-defender-atp/linux-preferences.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md b/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md index 7da256d6f9..76d874b7e8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md @@ -245,6 +245,16 @@ Specify the maximum number of entries to keep in the scan history. Entries inclu | **Possible values** | 10000 (default). Allowed values are from 5000 items to 15000 items. | | **Comments** | Available in Defender for Endpoint version 101.04.76 or higher. | +#### Maximum on-demand scan threads + +Specify the maximum number CPU used during scheduled scans. +||| +|:---|:---| +| **Key** | maximumOnDemandScanThreads | +| **Data type** | String | +| **Possible values** | 1 to use only 1 CPU. 2 to use 2 CPUs. | +| **Comments** | Setting this configuration will limit the CPU usage during scheduled scans. | + ### Cloud-delivered protection preferences The *cloudService* entry in the configuration profile is used to configure the cloud-driven protection feature of the product. From 36d4eb45c7a006202f40069d260cbae283613943 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Tue, 23 Feb 2021 12:27:34 +0500 Subject: [PATCH 076/206] Update windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../microsoft-defender-atp/linux-preferences.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md b/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md index 76d874b7e8..f22ca4f413 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-preferences.md @@ -247,7 +247,7 @@ Specify the maximum number of entries to keep in the scan history. Entries inclu #### Maximum on-demand scan threads -Specify the maximum number CPU used during scheduled scans. +Specify the maximum number of CPUs used during scheduled scans. ||| |:---|:---| | **Key** | maximumOnDemandScanThreads | From 3a984306d21fb022badc0be578954d7a0f4cbf19 Mon Sep 17 00:00:00 2001 From: rbsec Date: Tue, 23 Feb 2021 09:58:21 +0000 Subject: [PATCH 077/206] Fix some broken quotes --- windows/whats-new/ltsc/whats-new-windows-10-2019.md | 2 +- windows/whats-new/whats-new-windows-10-version-1709.md | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index e74672c002..435e7530bd 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -220,7 +220,7 @@ The new [security baseline for Windows 10 version 1803](https://docs.microsoft.c #### SMBLoris vulnerability -An issue, known as “SMBLoris�?, which could result in denial of service, has been addressed. +An issue, known as “SMBLoris”, which could result in denial of service, has been addressed. #### Windows Security Center diff --git a/windows/whats-new/whats-new-windows-10-version-1709.md b/windows/whats-new/whats-new-windows-10-version-1709.md index b33762e67f..1792e88bff 100644 --- a/windows/whats-new/whats-new-windows-10-version-1709.md +++ b/windows/whats-new/whats-new-windows-10-version-1709.md @@ -119,7 +119,7 @@ The minimum PIN length is being changed from 6 to 4, with a default of 6. For mo Microsoft has released new [Windows security baselines](https://docs.microsoft.com/windows/device-security/windows-security-baselines) for Windows Server and Windows 10. A security baseline is a group of Microsoft-recommended configuration settings with an explanation of their security impact. For more information, and to download the Policy Analyzer tool, see [Microsoft Security Compliance Toolkit 1.0](https://docs.microsoft.com/windows/device-security/security-compliance-toolkit-10). ### SMBLoris vulnerability -An issue, known as “SMBLoris�?, which could result in denial of service, has been addressed. +An issue, known as “SMBLoris”, which could result in denial of service, has been addressed. ## Windows Analytics From ba31438ad05d00b5609548eec4ad66184afa2689 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Tue, 23 Feb 2021 20:29:49 +0530 Subject: [PATCH 078/206] updated adobe reader version and made words to bold this is my own PR, I edited some paragraphs, I added an Adobe reader version number. I successfully a few paragraphs only, But remaining i need to edit. I will continue my work after merging this content. Also, i need help from contributors with suggestions . Thanking you --- .../deploy-a-windows-10-image-using-mdt.md | 106 +++++++++--------- 1 file changed, 53 insertions(+), 53 deletions(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 2779d317f6..2017acc4d7 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -21,18 +21,18 @@ ms.topic: article **Applies to** - Windows 10 -This topic will show you how to take your reference image for Windows 10 (that was just [created](create-a-windows-10-reference-image.md)), and deploy that image to your environment using the Microsoft Deployment Toolkit (MDT). +This topic will show you how to take your reference image for Windows 10 (that was just [created](create-a-windows-10-reference-image.md)), and deploy that image to your environment using the **Microsoft Deployment Toolkit (MDT)**. -We will prepare for this by creating an MDT deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. We will configure Active Directory permissions, configure the deployment share, create a new task sequence, and add applications, drivers, and rules. +We will prepare for this by creating an **MDT** deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. We will configure **Active Directory** permissions, configure the deployment share, create a new task sequence, and add applications, drivers, and rules. -For the purposes of this topic, we will use four computers: DC01, MDT01, HV01 and PC0005. +For the purposes of this topic, we will use four computers: **DC01, MDT01, HV01 and PC0005**. -- DC01 is a domain controller -- MDT01 is a domain member server -- HV01 is a Hyper-V server -- PC0005 is a blank device to which we will deploy Windows 10 +- **DC01** is a domain controller +- **MDT01** is a domain member server +- **HV01** is a Hyper-V server +- **PC0005** is a blank device to which we will deploy Windows 10 -MDT01 and PC0005 are members of the domain contoso.com for the fictitious Contoso Corporation. HV01 used to test deployment of PC0005 in a virtual environment. +**MDT01** and **PC0005** are members of the domain contoso.com for the fictitious Contoso Corporation. **HV01** used to test deployment of **PC0005** in a virtual environment. ![devices](../images/mdt-07-fig01.png) @@ -45,14 +45,14 @@ These steps will show you how to configure an Active Directory account with the On **DC01**: -1. Download the [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copy it to the **C:\\Setup\\Scripts** directory on DC01. This script configures permissions to allow the MDT_JD account to manage computer accounts in the contoso > Computers organizational unit. -2. Create the MDT_JD service account by running the following command from an elevated Windows PowerShell prompt: +1. Download the [Set-OUPermissions.ps1 script](https://go.microsoft.com/fwlink/p/?LinkId=619362) and copy it to the **C:\\Setup\\Scripts** directory on **DC01**. This script configures permissions to allow the **MDT_JD** account to manage computer accounts in the contoso > Computers organizational unit. +2. Create the **MDT_JD** service account by running the following command from an elevated **Windows PowerShell prompt**: ```powershell New-ADUser -Name MDT_JD -UserPrincipalName MDT_JD -path "OU=Service Accounts,OU=Accounts,OU=Contoso,DC=CONTOSO,DC=COM" -Description "MDT join domain account" -AccountPassword (ConvertTo-SecureString "pass@word1" -AsPlainText -Force) -ChangePasswordAtLogon $false -PasswordNeverExpires $true -Enabled $true ``` -3. Next, run the Set-OuPermissions script to apply permissions to the **MDT\_JD** service account, enabling it to manage computer accounts in the Contoso / Computers OU. Run the following commands from an elevated Windows PowerShell prompt: +3. Next, run the **Set-OuPermissions script** to apply permissions to the **MDT\_JD** service account, enabling it to manage computer accounts in the Contoso / Computers OU. Run the following commands from an elevated **Windows PowerShell prompt**: ```powershell Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force @@ -76,7 +76,7 @@ The following is a list of the permissions being granted: ## Step 2: Set up the MDT production deployment share -Next, create a new MDT deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. Perform this procedure on the MDT01 server. +Next, create a new **MDT** deployment share. You should not use the same deployment share that you used to create the reference image for a production deployment. Perform this procedure on the **MDT01** server. ### Create the MDT production deployment share @@ -85,21 +85,21 @@ On **MDT01**: The steps for creating the deployment share for production are the same as when you created the deployment share for creating the custom reference image: 1. Ensure you are signed on as: contoso\administrator. -2. In the Deployment Workbench console, right-click **Deployment Shares** and select **New Deployment Share**. +2. In the **Deployment Workbench** console, right-click **Deployment Shares** and select **New Deployment Share**. 3. On the **Path** page, in the **Deployment share path** text box, type **D:\\MDTProduction** and click **Next**. 4. On the **Share** page, in the **Share name** text box, type **MDTProduction$** and click **Next**. 5. On the **Descriptive Name** page, in the **Deployment share description** text box, type **MDT Production** and click **Next**. 6. On the **Options** page, accept the default settings and click **Next** twice, and then click **Finish**. -7. Using File Explorer, verify that you can access the **\\\\MDT01\\MDTProduction$** share. +7. Using **File Explorer**, verify that you can access the **\\\\MDT01\\MDTProduction$** share. ### Configure permissions for the production deployment share -To read files in the deployment share, you need to assign NTFS and SMB permissions to the MDT Build Account (MDT\_BA) for the **D:\\MDTProduction** folder +To read files in the deployment share, you need to assign **NTFS** and **SMB** permissions to the **MDT Build Account (MDT\_BA)** for the **D:\\MDTProduction** folder On **MDT01**: 1. Ensure you are signed in as **contoso\\administrator**. -2. Modify the NTFS permissions for the **D:\\MDTProduction** folder by running the following command in an elevated Windows PowerShell prompt: +2. Modify the **NTFS** permissions for the **D:\\MDTProduction** folder by running the following command in an elevated **Windows PowerShell prompt**: ``` powershell icacls "D:\MDTProduction" /grant '"CONTOSO\MDT_BA":(OI)(CI)(M)' @@ -112,33 +112,33 @@ The next step is to add a reference image into the deployment share with the set ### Add the Windows 10 Enterprise x64 RTM custom image -In these steps, we assume that you have completed the steps in the [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) topic, so you have a Windows 10 reference image at **D:\\MDTBuildLab\\Captures\REFW10X64-001.wim** on MDT01. +In these steps, we assume that you have completed the steps in the [Create a Windows 10 reference image](create-a-windows-10-reference-image.md) topic, so you have a Windows 10 reference image at **D:\\MDTBuildLab\\Captures\REFW10X64-001.wim** on **MDT01**. -1. Using the Deployment Workbench, expand the **Deployment Shares** node, and then expand **MDT Production**; select the **Operating Systems** node, and create a folder named **Windows 10**. +1. Using the **Deployment Workbench**, expand the **Deployment Shares** node, and then expand **MDT Production**; select the **Operating Systems** node, and create a **folder** named **Windows 10**. 2. Right-click the **Windows 10** folder and select **Import Operating System**. 3. On the **OS Type** page, select **Custom image file** and click **Next**. 4. On the **Image** page, in the **Source file** text box, browse to **D:\\MDTBuildLab\\Captures\\REFW10X64-001.wim** and click **Next**. 5. On the **Setup** page, select the **Copy Windows 7, Windows Server 2008 R2, or later setup files from the specified path** option; in the **Setup source directory** text box, browse to **D:\\MDTBuildLab\\Operating Systems\\W10EX64RTM** and click **Next**. 6. On the **Destination** page, in the **Destination directory name** text box, type **W10EX64RTM**, click **Next** twice, and then click **Finish**. -7. After adding the operating system, double-click the added operating system name in the **Operating Systems / Windows 10** node and change the name to **Windows 10 Enterprise x64 RTM Custom Image**. +7. After adding the **Operating System**, double-click the added **Operating System** name in the **Operating Systems / Windows 10** node and change the name to **Windows 10 Enterprise x64 RTM Custom Image**. >[!NOTE] ->The reason for adding the setup files has changed since earlier versions of MDT. MDT 2010 used the setup files to install Windows. MDT uses DISM to apply the image; however, you still need the setup files because some components in roles and features are stored outside the main image. +>The reason for adding the setup files has changed since earlier versions of **MDT**. **MDT 2010** used the setup files to install Windows. **MDT** uses **DISM** Command to apply the image; however, you still need the **setup files** because some components in **roles and features** are stored outside the main image. -![imported OS](../images/fig2-importedos.png) +![Imported OS](../images/fig2-importedos.png) ## Step 4: Add an application -When you configure your MDT Build Lab deployment share, you can also add applications to the new deployment share before creating your task sequence. This section walks you through the process of adding an application to the MDT Production deployment share using Adobe Reader as an example. +When you configure your **MDT Build Lab deployment** share, you can also add a**pplications** to the new deployment share before creating your task sequence. This section walks you through the process of adding an application to the **MDT Production deployment** share using **Adobe Reader** as an example. ### Create the install: Adobe Reader DC On **MDT01**: -1. Download the Enterprise distribution version of [Adobe Acrobat Reader DC](https://get.adobe.com/reader/enterprise/) (AcroRdrDC1902120058_en_US.exe) to **D:\\setup\\adobe** on MDT01. -2. Extract the .exe file that you downloaded to an .msi (ex: .\AcroRdrDC1902120058_en_US.exe -sfx_o"d:\setup\adobe\install\" -sfx_ne). -3. In the Deployment Workbench, expand the **MDT Production** node and navigate to the **Applications** node. +1. Download the Enterprise distribution version of [**Adobe Acrobat Reader DC**](https://get.adobe.com/reader/enterprise/) (AcroRdrDC2100120140_en_US.exe) to **D:\\setup\\adobe** on MDT01. +2. Extract the **.exe** file that you downloaded to an **.msi** (ex: .\AcroRdrDC2100120140_en_US.exe -sfx_o"d:\setup\adobe\install\" -sfx_ne). +3. In the **Deployment Workbench**, expand the **MDT Production** node and navigate to the **Applications** node. 4. Right-click the **Applications** node, and create a new folder named **Adobe**. 5. In the **Applications** node, right-click the **Adobe** folder and select **New Application**. 6. On the **Application Type** page, select the **Application with source files** option and click **Next**. @@ -153,7 +153,7 @@ The Adobe Reader application added to the Deployment Workbench. ## Step 5: Prepare the drivers repository -In order to deploy Windows 10 with MDT successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot image and operating system, using the following hardware models as examples: +In order to deploy Windows 10 with **MDT** successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot image and operating system, using the following hardware models as examples: - Lenovo ThinkPad T420 - Dell Latitude 7390 - HP EliteBook 8560w @@ -166,19 +166,19 @@ For boot images, you need to have storage and network drivers; for the operating ### Create the driver source structure in the file system -The key to successful management of drivers for MDT, as well as for any other deployment solution, is to have a really good driver repository. From this repository, you import drivers into MDT for deployment, but you should always maintain the repository for future use. +The key to successful management of drivers for **MDT**, as well as for any other deployment solution, is to have a really good driver repository. From this repository, you import drivers into MDT for deployment, but you should always maintain the repository for future use. On **MDT01**: > [!IMPORTANT] > In the steps below, it is critical that the folder names used for various computer makes and models exactly match the results of **wmic computersystem get model,manufacturer** on the target system. -1. Using File Explorer, create the **D:\\drivers** folder. +1. Using **File Explorer**, create the **D:\\drivers** folder. 2. In the **D:\\drivers** folder, create the following folder structure: - 1. WinPE x86 - 2. WinPE x64 - 3. Windows 10 x64 -3. In the new Windows 10 x64 folder, create the following folder structure: + 1. **WinPE x86** + 2. **WinPE x64** + 3. **Windows 10 x64** +3. In the new **Windows 10 x64** folder, create the following folder structure: - Dell Inc - Latitude E7450 - Hewlett-Packard @@ -193,12 +193,12 @@ On **MDT01**: ### Create the logical driver structure in MDT -When you import drivers to the MDT driver repository, MDT creates a single instance folder structure based on driver class names. However, you can, and should, mimic the driver structure of your driver source repository in the Deployment Workbench. This is done by creating logical folders in the Deployment Workbench. -1. On MDT01, using Deployment Workbench, select the **Out-of-Box Drivers** node. +When you import drivers to the **MDT driver repository**, **MDT** creates a single instance folder structure based on driver class names. However, you can, and should, mimic the driver structure of your driver source repository in the Deployment Workbench. This is done by creating logical folders in the Deployment Workbench. +1. On **MDT01**, using Deployment Workbench, select the **Out-of-Box Drivers** node. 2. In the **Out-Of-Box Drivers** node, create the following folder structure: - 1. WinPE x86 - 2. WinPE x64 - 3. Windows 10 x64 + 1. **WinPE x86** + 2. **WinPE x64** + 3. **Windows 10 x64** 3. In the **Windows 10 x64** folder, create the following folder structure: - Dell Inc - Latitude E7450 @@ -209,7 +209,7 @@ When you import drivers to the MDT driver repository, MDT creates a single insta - Microsoft Corporation - Surface Laptop -The preceding folder names should match the actual make and model values that MDT reads from devices during deployment. You can find out the model values for your machines by using the following command in Windows PowerShell: +The preceding folder names should match the actual make and model values that MDT reads from devices during deployment. You can find out the model values for your machines by using the following command in **Windows PowerShell Prompt: ``` powershell Get-WmiObject -Class:Win32_ComputerSystem @@ -220,7 +220,7 @@ Or, you can use this command in a normal command prompt: wmic csproduct get name ``` -If you want a more standardized naming convention, try the ModelAliasExit.vbs script from the Deployment Guys blog post entitled [Using and Extending Model Aliases for Hardware Specific Application Installation](https://go.microsoft.com/fwlink/p/?LinkId=619536). +If you want a more standardized naming convention, try the **ModelAliasExit.vbs script** from the Deployment Guys blog post entitled [Using and Extending Model Aliases for Hardware Specific Application Installation](https://go.microsoft.com/fwlink/p/?LinkId=619536). ![drivers](../images/fig4-oob-drivers.png) @@ -229,19 +229,19 @@ The Out-of-Box Drivers structure in the Deployment Workbench. ### Create the selection profiles for boot image drivers By default, MDT adds any storage and network drivers that you import to the boot images. However, you should add only the drivers that are necessary to the boot image. You can control which drivers are added by using selection profiles. -The drivers that are used for the boot images (Windows PE) are Windows 10 drivers. If you can’t locate Windows 10 drivers for your device, a Windows 7 or Windows 8.1 driver will most likely work, but Windows 10 drivers should be your first choice. +The drivers that are used for the boot images (Windows PE) are Windows 10 drivers. If you can’t locate **Windows 10** drivers for your device, a **Windows 7 or Windows 8.1** driver will most likely work, but Windows 10 drivers should be your first choice. On **MDT01**: -1. In the Deployment Workbench, under the **MDT Production** node, expand the **Advanced Configuration** node, right-click the **Selection Profiles** node, and select **New Selection Profile**. -2. In the New Selection Profile Wizard, create a selection profile with the following settings: - 1. Selection Profile name: WinPE x86 - 2. Folders: Select the WinPE x86 folder in Out-of-Box Drivers. +1. In the **Deployment Workbench**, under the **MDT Production** node, expand the **Advanced Configuration** node, right-click the **Selection Profiles** node, and select **New Selection Profile**. +2. In the New **Selection Profile Wizard**, create a **selection profile** with the following settings: + 1. Selection Profile name: **WinPE x86** + 2. Folders: Select the **WinPE x86 folder** in **Out-of-Box** Drivers. 3. Click **Next**, **Next** and **Finish**. 3. Right-click the **Selection Profiles** node again, and select **New Selection Profile**. -4. In the New Selection Profile Wizard, create a selection profile with the following settings: - 1. Selection Profile name: WinPE x64 - 2. Folders: Select the WinPE x64 folder in Out-of-Box Drivers. +4. In the New **Selection Profile Wizard**, create a **selection profile** with the following settings: + 1. Selection Profile name: **WinPE x64** + 2. Folders: Select the **WinPE x64 folder** in **Out-of-Box** Drivers. 3. Click **Next**, **Next** and **Finish**. ![figure 5](../images/fig5-selectprofile.png) @@ -250,22 +250,22 @@ Creating the WinPE x64 selection profile. ### Extract and import drivers for the x64 boot image -Windows PE supports all the hardware models that we have, but here you learn to add boot image drivers to accommodate any new hardware that might require additional drivers. In this example, you add the latest Intel network drivers to the x64 boot image. +**Windows PE** supports all the hardware models that we have, but here you learn to add boot image drivers to accommodate any new hardware that might require additional drivers. In this example, you add the latest Intel network drivers to the x64 boot image. On **MDT01**: 1. Download **PROWinx64.exe** from Intel.com (ex: [PROWinx64.exe](https://downloadcenter.intel.com/downloads/eula/25016/Intel-Network-Adapter-Driver-for-Windows-10?httpDown=https%3A%2F%2Fdownloadmirror.intel.com%2F25016%2Feng%2FPROWinx64.exe)). -2. Extract PROWinx64.exe to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. - a. **Note**: Extracting the .exe file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the .exe terminates. -3. Using File Explorer, create the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. +2. Extract **PROWinx64.exe** to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. + a. **Note**: Extracting the **.exe** file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the **.exe** terminates. +3. Using **File Explorer**, create the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. 4. Copy the content of the **C:\\Tmp\\PROWinx64\\PRO1000\\Winx64\\NDIS64** folder to the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. -5. In the Deployment Workbench, expand the **MDT Production** > **Out-of-Box Drivers** node, right-click the **WinPE x64** node, and select **Import Drivers**, and use the following Driver source directory to import drivers: **D:\\Drivers\\WinPE x64\\Intel PRO1000**. +5. In the **Deployment Workbench**, expand the **MDT Production** > **Out-of-Box Drivers** node, right-click the **WinPE x64** node, and select **Import Drivers**, and use the following Driver source directory to import drivers: **D:\\Drivers\\WinPE x64\\Intel PRO1000**. ### Download, extract, and import drivers ### For the Lenovo ThinkStation P500 -For the ThinkStation P500 model, you use the Lenovo ThinkVantage Update Retriever software to download the drivers. With Update Retriever, you need to specify the correct Lenovo Machine Type for the actual hardware (the first four characters of the model name). As an example, the Lenovo ThinkStation P500 model has the 30A6003TUS model name, meaning the Machine Type is 30A6. +For the **ThinkStation P500** model, you use the Lenovo ThinkVantage Update Retriever software to download the drivers. With Update Retriever, you need to specify the correct Lenovo Machine Type for the actual hardware (the first four characters of the model name). As an example, the Lenovo ThinkStation P500 model has the 30A6003TUS model name, meaning the Machine Type is 30A6. ![ThinkStation image](../images/thinkstation.png) From 4727d18a70570350f02a2581cb8cb725cbdc814a Mon Sep 17 00:00:00 2001 From: Max Stein Date: Tue, 23 Feb 2021 14:34:41 -0800 Subject: [PATCH 079/206] Update set-up-shared-or-guest-pc.md Updating new steps admins to take as a part of the 2101 Intune service release. (Set up shared or guest pcs). --- .../set-up-shared-or-guest-pc.md | 28 +++++++++++-------- 1 file changed, 16 insertions(+), 12 deletions(-) diff --git a/windows/configuration/set-up-shared-or-guest-pc.md b/windows/configuration/set-up-shared-or-guest-pc.md index 00fb65ab30..9c1330bdc3 100644 --- a/windows/configuration/set-up-shared-or-guest-pc.md +++ b/windows/configuration/set-up-shared-or-guest-pc.md @@ -85,23 +85,27 @@ You can configure Windows to be in shared PC mode in a couple different ways: - Mobile device management (MDM): Shared PC mode is enabled by the [SharedPC configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/sharedpc-csp). To setup a shared device policy for Windows 10 in Intune, complete the following steps: - 1. Go to the [Microsoft Endpoint Manager portal](https://endpoint.microsoft.com/#home). - 2. Select **Devices** from the navigation. - 3. Under **Policy**, select **Configuration profiles**. - 4. Select **Create profile**. - 5. From the **Platform** menu, select **Windows 10 and later**. - 6. From the **Profile** menu, select **Shared multi-user device**. + 1. Sign in to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431). + 2. Select **Devices** > **Windows** > **Configuration profiles** > **Create profile**. + 3. Enter the following properties: - ![custom OMA-URI policy in Intune](images/shared_pc_1.jpg) + - **Platform**: Select **Windows 10 and later**. + - **Profile**: Select **Templates** > **Shared multi-user device**. - 7. Select **Create**. - 8. Enter a name for the policy (e.g. My Win10 Shared devices policy). You can optionally add a description should you wish to do so. - 9. Select **Next**. - 10. On the **Configuration settings** page, set the ‘Shared PC Mode’ value to **Enabled**. + 4. Select **Create**. + 5. In **Basics**, enter the following properties: + + - **Name**: Enter a descriptive name for the new profile. + - **Description**: Enter a description for the profile. This setting is optional, but recommended. + + 6. Select **Next**. + 7. In **Configuration settings**, depending on the platform you chose, the settings you can configure are different. Choose your platform for detailed settings: + + 8. On the **Configuration settings** page, set the ‘Shared PC Mode’ value to **Enabled**. ![Shared PC settings in ICD](images/shared_pc_3.png) - 11. From this point on, you can configure any additional settings you’d like to be part of this policy, and then follow the rest of the set-up flow to its completion by selecting **Create** after **Step 6**. + 9. From this point on, you can configure any additional settings you’d like to be part of this policy, and then follow the rest of the set-up flow to its completion by selecting **Create** after **Step 4**. - A provisioning package created with the Windows Configuration Designer: You can apply a provisioning package when you initially set up the PC (also known as the out-of-box-experience or OOBE), or you can apply the provisioning package to a Windows 10 PC that is already in use. The provisioning package is created in Windows Configuration Designer. Shared PC mode is enabled by the [SharedPC configuration service provider (CSP)](https://docs.microsoft.com/windows/client-management/mdm/sharedpc-csp), exposed in Windows Configuration Designer as **SharedPC**. From 63382204e996b38fb6bed7d81923252128c3e954 Mon Sep 17 00:00:00 2001 From: Max Stein Date: Tue, 23 Feb 2021 14:38:00 -0800 Subject: [PATCH 080/206] Update set-up-shared-or-guest-pc.md Updating new steps for the set up shared or guest pcs setup that was a part of the 2101 Intune service release. --- windows/configuration/images/Shared_PC_1.jpg | Bin 40769 -> 0 bytes 1 file changed, 0 insertions(+), 0 deletions(-) delete mode 100644 windows/configuration/images/Shared_PC_1.jpg diff --git a/windows/configuration/images/Shared_PC_1.jpg b/windows/configuration/images/Shared_PC_1.jpg deleted file mode 100644 index 7b993b00a8918f4ad6e00522e458bfeea2927649..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 40769 zcmeFa2|SeT-Z(zCB>TRb3Qko8kqm~hWX%#nQ6~Eqld^APCrj4I zZe}FA8CeFi{O_LUInR0OocEmbod55AKfm95Xzouw?p#|o+hjA~{K4##C5)Ke84ILdVJ>B`38>2zjYOTn+m$)cQSfWnX&}_>_i@!qjXTZ zz<>8!Ma<1&|F5t5_S#rU#qI@~p@QBH?Gz(!pf;U8DuYM$r!K|k1EX4z zF7@zzQ@bCRc##Sk(q=$dY#1C`?Xc;Wbr)5c5nf=<8N4RvJf`lND#-HY#Qtzl1EmqV z+)EBdj~5~r(Tlws&<%UK=l}G}+5zmYZOoGekA$AQ$pCVqf&e7he}`x&(Vhw_Evp~5 zthW&&7!x3$m7+PJAF}3Fyj>(*BxXyEgh)j>6%w-v-|Eqf>V{Kfx~4K!BS*0# zl{;e3_m?`DOpoP%)YIIG{CY89gGT)fZ2mVwl|=1W7U4I#*!^|5OlGVsY_4l9UV z=(w$yq$=GdDE{?gV6ceDgVTJey~bwCy_R$AJVtbjH>jYqfs_i=YHl^sF}5Dj$$#SvkCE@ zhY87sWupTx6i?8-+%|LGxd_u%XWrq0HJ-=c4se*uCc3AUg@00cr(JaJd8=#HJMW<` za1q)cVGri^?V1okgdliH?Ab(vr3r=Xu2iNh|1iy)7e+ndaW8j_7)K}~#PulzA6zsJ z>l>fX+`U)ZL2|mxxJADuhspicyy$%`n+jBlGMIRH(tpjo;NH4n$Rvjnn%Sx{!&kDV zS4c*@DwQErg0q`9a0<*mfv8uZf^I{>^C?FLl+d9EouNy7Nxn%ekFXB3sAoI=BdQT8 zCq(mO$+^ldBT_As?_5IR`Z#Mt%uq1t03xgP;fTgF?kR}TNrtna;Seg(SV>5cu%sdKbYgqdk9{JacW1X4M3tVrGEt3>_TrZ z#ybR;!R=jFGmtIJCfqA=)Ql%JMqbtK9U*+%1_cN>$|Ps zXptSXmQ_()EUs3j_w?8?PqFxABtz|Sm_CjQ@^`K_pBg{yD0H>c*17%i`CHH$k#J8_ zLGUX$%?>S571tVywzHOV2?q11^QX=p#NJLesP5Hn9yoq)>+u_&>6n1yqrB_DwD_fO$j;X(O``b#ACv@MIE*2c+DCXArqRalwY=NO7D9W&^jZk92jyN%{ z#e%%qh-89soAji7+c_eTow91_aoRRQEjB=h{(6K+$}^fxR3O|W1AZD`n26Qbv#N1c zci^>UvgPybQ^(pgCog>Qg}`n5(01KHNv%;O$;>tShW#p@rGskfgJT#SRgP0BUrRh) zNZeXUhM&!lpzCKV(~mZgH$yo?x?u@K^6yGAm&vGU&gY?xv5 zgyj3AKAEbyVxJQRY|ll{-c4~HrIS|oYvo-=uv0S05)sd~azSuX^MLJ&dS_ zybhx<`VR0XU339IE_9bYyCZ?bSzBJMh+3X|${%BUJtqUFc6w>v;HGZ_ zDjU&g=i4WPJuXC?nzvoNxj+jo3X>TBV)xRv{iB-mYxa9Y&Yg!aI$U%_2Hv4)u$mvo zd-+2uF==SAza8{p_`?Ufm+sAQ>m3(3Jg^B_%HB}!LJ=mun`x}y4rQ!Oq2>@5Q)&;Iqlmi6TS7EKn2AV%tMJX`>;Dx?AavAIT9`#QGY&>qR6}frGkp0 zsURmyz%o!lV2Fb}1Lb3qNn~r-*9xT3K!$?Dwq`O-$||AN9w)NC-)^FuJ#ezjE`V|v zwmn)egbX3+<2Rc<@@!fS2zOGP#R#5Mkg4AEOA$6Aw$_oHRRDL%MbuxcK5mCu;hGcU z8x%gR-Gi#ua@u&}-0J&9dw=BOs9&qs3T3}&X$rm=q6h~E)U%>hr%PcAMc!ag~)*}wj6W5;;+ zPrKLvc;gdhl3P>MkqTmk8z2b!m@n@P5eGvEQo$BlJf{Zs9lL!77B$Cspqp*a;6l=7 z?u!Fq(=iDrdhXfT`n`6S*f#q(G?YjMl>`^KWz4NwIZQGhol%&Wf66UVD-pvcwAZpE z=la?6kiqLYxI=!&9zyx_cARCjQ@h+V;oy>|y1CTl8nSMC@@e2Ix^8NMEWY4|`q z`{9Ek0ohNrK@VlXCA_wDgW;eML%Kzk$@LG2r}=8ySNlv7FBY?nj-BxM0>U2aBpj8PNQBlH1icmSbsyWk}cs0UOwWvue`fJh#G6GzL2+&l3i{p`v`BgR0b9gE!_)f4B zXV%9Q`_+NGe5IT%0SMGDTN+(HjOt7@GDgQD5c715b=# zqafGJ-1N(~uIi4NxGLXeHyiCtM7@HqusKZkDt?^`3RAa34O@*W7sSqwynXesL}Lke z_)EU6-vut2#Us*mop9kDO`>fBg7!MmK)QUeT2?G&`&Ixsu`7wMO)Z>3@M{ijH5Ihs zP7YB&u%kqb+PRFM422u#43C|`Yp2g|2Xx)OTc~9#a)Y0Kisj`?v)%zC#x~#Y?$jNU z%0RWb4+>`6WTQxYAWI6i>@Z}S2Ry~H7h&B;Ox`LQg8Ys*dw17E`~ioQaq1hUn}uAe zuO}zA?77aIRi5IBq%(&T^N`h3xde_1E5q&3pSwmB<`Ye~rs-w;CJJ=NOcNT>2 z>Hx)rJK zLKcf(H*lLcMMPj$!cqjQ@hjmE^L<>-RgZrCJWgvHN6+~ZY{ZT^4d#H01JA+Xn#6iM zJ7yVms052*(ap0@h;yv8@y`=DTEedoQT#Uk_Lz5kz4H3XV_$lrejS8qhUktdP@k<8 zj_tFA$c?{0Bypy2C;6mXtgBm>J4F~j_+pB@r%}824X%GJf3NAp;2`JYaAg4#u{zUC zkSBC;bVqF#@}9l%ggPgtgRFbG|3F2;7rReFD#;Hc6X?^VTf81v*|m0mcENNn(O~V> zjdKu=M7!pmoO1-m;AP5(N2lk?r-H?c#8047XJ50Y_|j7vC)qXWh-of7!?h?ZlD|F0 zoWK}{G8q4Cbv@|BzKp0TyNOEqa3m1)3el8>Ly6u5{wo6|`UZCO^5UOIE!1yL+??i; zWC@BMr|?;9T#%+~2AnU{uw5gf_)Q8Mf@9vR@Z|*mKybDl`8h#4R;%nwoR^B(7tv#0 z-}DI`84IUaCv{-i$ zImJHWX7IL*5Fb=m)Bm|7DnGkx+S-yk;888RAZRK;@wk;?gUe^B1~4U5ebAE^qyul!6jLzC4_?v(js^N`#UJO74s&v{pvAs zda>ZN_wR#SCe*xPwgGzw4r+4+X&d)|PSCzF2K26px3%U-YZu=j!7}WYL&oY;xlP*y z+o+5by%kgY*R%`qR1mK^_iZ1iov@`sb!|J5nDb~E@xyUP>H_wv2OLIVa%-8Xpk5n1n8Gs%B|R$c zpF%cv88LTs(-7}0FXJ}*tqjvgt7Fw%J3FsPhDpSF&Ag(5_VHtoWNtJQ6*Lt!L@g!LtJWj7WhUsTpoXLlDkusFsS7@_Qsj6k1Zdg$3utBpEdGnsH@qm95G zQmtLMAoM848I$jwW7}WiaM$lyEi?QL%?XWWkWY}(9R1zZQ)%)?JL_oHv&ETs6rZ;1 zXff^|s@n#KmE0lf?OY&g!1X+F@{Ghs1KJr*s{KsUTfL;Vi|HYwC7zp_C2M9OzT%Ez zbj0KM84dXcp`i%*6(w((+cmv&<85U*>BTIaiXP+t4lI zSSyB4Dd7(%saB3qL0aY4`sQ2CM3`PFU%DkA+iJw>IRwNP?N>s*S{IY^oHlD&hF08R zN~QMepOQdjYE2atTIC!?&X;v)zJ`N#*n~gd6C6Bj8}k$se~k-mJdzELhg31hTADa+^^iT4YixE1$6_=WdU8z>^h zX|{&hyqLiE*|`fC(y1OrDZ^K``8C8d@gZnA&oW zW|0q(9UNI*9sx=&{788pA~WlxB4%m}m3lPn=~{dh;EMg#szBm$sDZ+S$66k(wEEzj z<)G4>VkVxJ7GNHYb!t<02S+J+gC7gIPlVx|qG_`HVjKs3*@Lyb%F>kfy?-or^ELRA zTO9Nz&O@on$DR&{7|zD{qB9+l;KgkGUJ~FimW|NrlwfPyOo5ZgOpNt9fk$H<(`R3zRmg)`< zpU~0T-UQueT1qKdsj?qE4HkjR;u%AWsi4nxts@MRABcFVQvbKZYJN9 zsd(}rg3a5k4@|qZP$NFo9RQS6-g#G3*1L2wX##s(B&Iw}%k;A1UX92{I~sHC$3U+c z{-4hG#D;?`4om+I1YH8r0)ibTo~D8Z4gxhu=Q7=ub6*{iAF{c^) z>zcjOefrl>qU6LnD(ErT8mMx@B-4qR*>f++xp78b{rWts>I5WB(It?3l{xr zb9Bk=D18!KC8W1fsZJs-UYWW|6A zLjgQHh1mr{T=$}ac#PLWfOl&xO|GKKSJ{8Q13V0rB~n4N3R7Sb-voj%zrOt^U$MiH zr&mW8YjE&gTk5l5Q$d!Kd!pY!zCc~s?@>YVKCMrwpr4SQL+K{20OXDSoxEmmEGI3- z-)Hc1boRbH)q)8pKj_O&UtkA-3>-y&fj*f2n|VThBJHPzwLcAMdd`A{Z=CW={>0La zI2-+GOI@YBV25Lun&?SgewP^4g*4xO2cb>l7kXR&Q+gLYcp&JEZeQGZb# zKl9h$s*a)A|9%erld`x=ivK=ku}ccTpzcZq;CuXyo!?bZ|EfQ-tDt^RP{#qUi{A$D zx^naM3H{pr%cw5{>P()zZw!u)w%+y-KA)#}RpFW6dC~h$Bl%LzQ-}tsf(KNP+!e&^ zdlR8e2Uk>i&Y*J!wicV%xWb2uf^)wn1|3}GzWOeF@!X{gE~h_}ozgA7A&0wkNz&0E z;L&6HP%@uPZ_o|XBg&Gzz39%CG~-<9!pJAuJf=D~w0Vpe{#efDm=Y)TB5Oot(7N}) zNFzNwy};_1_#VAWrEffL5~#Q$g>J8qBPz=%@gHm&CLfYzTEF*6Z*i_q?g+ZOkY!>k z#YuJB4(z6OR!&@&6M&A$y zzaTXxD-gqs*fV|fpsJ)Z#N${E%Z<=}m$e;3)w=D*;mHLzCZoNDZz6*CUwzf;yEe0Xo&$8piTj$(4}@koDXp*|(cSGr~diL`#hUY2~}qdMi~k=g@_)p>32 zXs;^hGU%P?wgAdJkK$`&W5dM@S(Nb++yZ{yS34XPu4BWAn&!w1BM+Hp@O_&?oI?oEVvmF zVsl_XU0_16=b>j|S949*^l__vbxD)aj+?2jAR2v6A=)^pl>bshw4>&AGL8?@;uOl>G`V^+)Ya zF8jzlO`ggQJwW6~nZIj7(KCz?vkSh#3`u`>Tq$D|ZvCFosdd7|p;u z`$|VdL!(nwa{dBBgTI|WueVc`uhH|yQ@rPDi!@zc+(zVpTr~t^UOdTesh>~G+gP5w z5WKq6R(h<#l1uOK*?@VPeKbF3dAGz@%qv(BA)y~z@M{f`wbX}y|o?oQ`_FR&tlizrbm+gMyE4DBciPbQ>*#B@z zY}Ky+;qW;b59!c%f>x|w%)k#h*gOk8T1Gxml6Mq|Dy^3)W7`)jpXl{cJ~8vgN+3IQ zZ;Pip%LaZ}6ei|h=*R46la~|STwK_us;2E~!I4&?iDFRao|5%E5m4 zanB7_ulbMX-z=*x4j&MKPd28!SbEvRNWy^MQWnb=1C< zU#A5LO1(6DHbN2|T$e>)X411s644Ecvm@ix+wtUybk;_0A?Iz#bP%P=_ctC~p;bA;!F7tOsZ1*zw1E&sv_)g( zcNnb@vsoxPqFn(jS%;kBD+UQx($~1NY;fo^WOOAcgCi$Yv~%#q+CU``m?|dS<7r^dl@SEXR zM+#mh4sjaV^dp-5i6nj^HIA}>-gV1js(mWy-gB@qo>zf+7?c~iIDP?Xs zqZh!>*;&Q!uwR6?t*zN`3L24em>7iZ(rMJkM^?^`=)8ZB2}D4mC? zQ`W$ubGT+Rbj9U0!>8&t>qJ{p2JVEqm_1#;eOfq3`v0;^CYczBsnKnoVEwcfDQ;7R zZ^?FNvUIj-I-D?aTFaEipZ?bM2v;T%_d+1vNq__*gjY(~IX>VQut$&0Lb)Fj%eL(I zjVzerPE@_O-F)W%?e)pXckHw!wW{#D(2xhiK!ZLI2YQ^06)V1I0SUp}v)t+L)ZH!@ z2OmGVRyX~rJCX{bdx(m(5e=Sj%8%r4^16$3?1gJ*KTY(y-L~`YKEx@ zKV*x^hb~YKe3~X8nhdVXZEy0(AY0D&>jepoppA6Dnx> z${>27-G$8e={_;Wm>ARM`w_8v=6huF`gaGgWH!CVb7&C=q)Ld_K{n`1fGn?*O}N@8 zEaVBqY%9@{_-_4XuQqSkQy_ywV|nR&_QM6pezch+rKejpdt?k7(mzq+YKV$G(Ecu- zp2KHvv&}D#;hwT_Wi0spor>(aT3&+atMT=cf&op*PwH)VUKkIl$~EqPxw;n;=^f~* zV5J&b%SdEw9?3|GdXEv6x?CH#GG=8dqvm7iHSzLw8cqXg>*X47>G=G^4s0Zt5-a~Xn>>_yMY+5!#lhbc;k2E8=oR`_QizI*`@c^_yW=z=gqX3zEjzi|Tl%>+9T z&8eU>Vj)zJ-xKY(L|Hf>zO!-2wbEAToQ~;*Yasrc>3<>EJF6X}vqWUim0yy(baz706 z%S@o(k@P=16IZxFI(X~JwO^4bMUtpgg%DJV03tl2f`l-@z6F281Qo>6kAF{jtO4}3 z(*UW%9drfaxkbo#^r*#Podpn`7OhkeEjP(t^H6UzsTrWONvTB z^bz+*Z0i4r=|W+OU^d2%yw?j%p_K*yK=fbPB`C)O0jS91<$%D)=>VyMl0*u9HnI12 zWXpf2SRwe&jFbG!IMII@=MR+s*T<>&u7LhJP9LH{KMlxin0`mq6_OLcr$4Z)?jM;* zHsm|k-S|xq5ST-~h*_E61ObVUot<3c`*(|p#e`#%nZ_?L;kJI+CX zz5Z*V*u~E-eh`tn^7XT^*p-W2x!9G9zjdN^b=va0>rN=yLIfJ4qz2c{1-ki_NI|izoGHEZ!0*ai1%E+$J=_6f0 zEs*wq#AVu#z%`6gD&$vr@8tinV*QuW%)OTwJfThOBM3}c!z4E(q}l+>-@hJ;u?#7V zHmE9>5%w7z=ebxuwTZfVFP@McQF~yRq(&}->w0)%x?Gxy3^CsJ+NB}c&my*@IIUbVl56yU74uBcP=*Aw(OKt<{6fk5W0a!g_8|7hu#x_eFzJ@4Zkr&Wjc$F ziMcNMM5QK*tBVM2xiw94s%zoEbd&)LQ&f)6yT-=(jmo>4=NzVW20NQQjs%Qt-ZZ!c zOWp{sCSJiKr;tHPH74pB9w__!T@MOAWOd{S%fPUwFK7uBc}NiA_uD3ccFu%v1#a9R zek&l3Vx>ai;9OX+i-<$%po32~F~MM;!Qsi7Q3=I!y=h1nO`1Euj%kMIG&OvyWEMf`1ladS!R#^_kQFDP0v(S zP*^AQcFtSE^@ScEY?s|Tx2N&OH)cWR71n+c9PhmEO@t5PlzJ0ooAS_6q<0wxgy(!y z$;pJm(VaV!9!-ps_a^jj_HQ0ihd@-N)Nke!ksG!H>+JjBs)=U^C-6WmWi|Vq(o%~` z%dqP&E;_~nk=Luv>0@R+Vn2<1f0E@PBvc4GDoGd$Q>t+_r+vdQC*)ZYE@J1#)!Etn zPHoCIeC2S;PmgJa+dW54LO(_;Kx)yighG_Oqtjl@NNo;%OaBEUI;mY^xY;bvF!DNS z_8a%k!d7pNn{N5`?m)XZ`Xgii2l0{O^3TBjE8qN8urj_S?lgW&H=40-?KLnP^SYAD zBgBsl=$MCV2LzV;e;cv zCf^tL$uow;>%b0pY0-sL(4;sO6rKqLblJf`N%Q2+G=gBVexrRT#tBl~5@MTgGi*;0 zCfG&rwcIJIs=_Zn-Bjs0kM?8k%3+&%yv*}JaGBVUm;p|EH=%FcITu~M7p{5=mWPA5i zitD-bx$vdq6gR^i7cdnBfiO_cQW}5_nBoYC890#MU=f1=rLgEtU~^+^&QJ43Y%S;^ zza>G+6sVwY-|*0B@Mm+xs;@k$`xycg*b3Bxc~G{%B$FTKS6etvant|1PeJ~{Q~sYc z51h>+UF;!=I7@g(UNNjhTfUw;>cp&*d4AdO#kQFx((zBvqfRu!L?iWmGn-7>m1oXXSb1-^U+ z+o^L0+oY6$1K?-9u}GHB^NHKClOcu6JjF@Q1hIz_T*p4+N)bYkQh@wFk|P=Y4-i`j zAOZZf06h8}sO{P!$^(4_N6}jleu`Z?S#h>M#sP_cPHHu12&*a&f@P>(xYR?9(P{T8i?(C6V zskqOy9X^Zr`-A=f&`-jFqJlK+Nsu2VbB+CyUp*@G-g=-HjOt#n+da6u84oLqY<1>EmD6e^NcVq+_r@Dn3*`uw5Hu z-yaeEFTrL^{85tX5Wh<3*?%mdz+Q6E4be-T2oj0Jzs0!0NB1jR|A_LR_2qZA_T~8_ z54{C{Afmr%8vUUDuKvJK+h}|`{s%SU_p5SVRmt7q7?~Y$o=Ej19JdPS8{|)MxNtu- z&pdi!k*3fVgIMgxL`T?w6V37HW+;cv@L4rW{Ta*ROR*rfeec;ivo)z8i=BHj6EYp1 z&R@gs1YA8V;mVSKSYUtDRCp^M;lIWnvaRosBGM=O&}mOhmc8s1$HWsI;45{cpogvM zP2Pfs4Ze+Ao*x-^$=tbyTohql3r<0ix|0#V=!D2Ws%V|xOh_#X;0u}L-?gIl&y11b z^n*pXto)lLL;S=Tzgei&kY5=g<}Vg7{TITW|4p@;eF9EF00;d&4fHFi{xYxMNG1Lk z)AqNd`cZ=%7W#V{1WNpwpZ-;Q_m83b-M;?{-CqpHKZWkUGTi?Ry1%a<|I?uRzf>2H z?f)IMy4?%t@jtJ6$p4cT1F%i(ga3|J1MC{#ojUgLx}fr@DxS)T2X$P!Y1~?gh|s zhe#TIPmvaZ>NznFnOoO2VQZ)oB?zZO%At}Z+=T(z66pge`VNvMPtWHcQ5ia;OE^3g zzG^sn0@0#EEQ{JeY@4%sd>JlPDOHR-5?6g&Iy-H+WZH8$$}k``u)y@CvvhMw{?fb$ zgkk*&ngcG0_svBpl-E@EEzKmE&VTF;FvL2Qpft!x#B?x`ol-Z5-acxUYSw+TFX~{L zr5mJkTV2?-@v@5t@74jJ1oDg8k1Ix#zZYiy-VHI`{ke>CA*5w;XCJT(OD|klQ2FEH z5V;-x>(^uTR8TpV46OVz#lHf+`O0TQbHtp~;9Xs>E!+-!3vfu=wLw&|ur%BmzrJiY zFw^&`$s#j&_13ed*6CNS*McOD%`%}<+m}zGxChX7zyWDwl!4)s+QUy85-kU<52TgG z8p?hc7aCW(V`9a{sLm$SsOeWnd;$ZuS8VGYU_I6o%@p$tXQUx^C;b(5x5jiZ*h&0q9XSqijHUjmma5F@@O-HulQ_I}4 z%3vLxNK!K>;N*%C(Q@kIh-#C@@s>*T6L&C|(?%)x+-jEx%Y%$CadFmM0cHW~Y`>FZ zu7yZ5I)pDd+aOH(Rrw` zT&`By9M&^&UQV_+_hG8T+q<_tP0wsCJT(*8e9e9YkA6~;-2Hjfh(JG5GFCa@CArp- zqtx{^#8B1A<)a4+n-{?#cpi6+fU2{6QWbWmva-iT%rf|H+sDBkuBPqj_54K0yQ&SSb|GF|#3>+nJp{_5slh3*KM#ORM_a~P6!#a3WmU5 zD#1F-G;Jn$-7CiW=xRB^GJ+kNZYmsU(^;Eh@w0x{czeM!U8@Klb4anYIM>2iz#CE8uJ&_?l{Yc=u-i}qhePrxG`AjiI z5*B#5-&X}L-CrPID7z>>Y0Pih+kVdNvHt}ZE6iIxaSfRQVk&;H6`L58tXorA@iz7( zuBxQ={q^@2V>4{P9Dn53ux846j zD0W{S?899y*rLK|F+`dZ{|1ETB7_S_aZy3c3-6rRlGGKtzRarP`N^H|gjW`KB=IcwGt@ruzL<%5dAvw=bMFX9)YWOwo!xJ{ zEUY9)xCzbSZtdNeu=ycJEA_)|XReUQ%@(0sTH;5Zs!ii!9TA*x7PJe$qvk=pM`VdS zz4d&v@YS-Cl7RV%xdCT$l?xf-xPXo!It}1V3m1|#LHsISwIRoyxj?^BQ({2<%(nY< zqQX&b{d-(S@ANp@?;Xh-^|b!9rW-&yGQr-nzh4;GI;CIuxbXPRuiX{!SYNxkHo+-d z|7$|o4alWXl8B4@!ssZ9ZIT%{EoCfCP;S!pFnh5y-B-v%mg{C-r-03a=u+pBhFaPA zU@aS8TTTIoAt)6vn)*mx>R%JiEEP`ImOt9+pvcwLP}bq!pY+Xzow(TqVbUK zsqbQ3&9yx&_Hd9;%{;_U!j8FZg_MxT8MWJ;B9bA=Q7NUH$ za;R2fe&R@J&^~QDjrf9ht_qbpk#r~N#=O26&x7fTYtG_CvzzEVPZ_dSwrtzewI$qQ zD;fiDe3H1mZQEnSD49i!yMlLV?&fnSJN0TKH_P6a>3uDS)uleqxTA?`)6?V)&O*a0 z{>CH;JR}tE31oEHU^_N|g%1tR%{glEv|nkVB*Y-uD$Eq#SCAE&+>L??SB z=Xx~Xhx`2>a_5fCDGr~a6Kk7}*|e*L_wC&%)NKIj8%m(`&=HGSFvofUq<*76EFF)t z9PJFPDibh$boOBD=slPS-Dxr9H}LZWcHkgFSmB)#VyxtPdh9XA0&U+ zZjYU8tVwXsF@-K4LAz};B7DjfRw@;#Q*ceEN3Kq71>3!O{> zBV|EEUj0N8#C2V%H+Jmz$p(znlI(K9mt>lYIqwgwe)c;a#UyyJMoqgPtk+j?_e)Lr zz^&k8k?s$*60VFVgIJK)89>ngn>NpR)6D_%z69*M<(Z&-y zHL;RxZ4kW57HeR+p*D218iI97j=VBevWT5LPY`VsJcM7U*phVt=byG(in{WuDxj#2 z-Vp|9|4HEFk|&cPXqI)pB0M>LZ?z%L>GHn14BESk$pW6w?|)Pjr~g*vzmfz9;loK@ z`?5-%qT742GbfsQtSqc`#7-JT@Lu-{&zyqN0Oz=52Oq6g!}uH-J=c5mSq7hJehIgf z#CEKnL|m-fhu3?EjCB_Ljq*%$z~L(sNU;|g*9t$sj_`^#f4+W4BKF#<-l6J_jgLU! z-kIPr*i8lLA3!-f668luP(gqjUA15bxSvmla)GM-wnlae@a^3BRX3L{ek`P3{=+Ni z;ttR+qFRU8*z>(#dg%wDkxTX%5aCy0@y^R$R^0@bN6Nv5{r1z4h)c0aK%#)EZd?!54ehsD17`dJIQj+1s#}C=QQDk-*QNL~6W1K3}nGMJB zhx2e?WyN}!fG(@ALhgKfK;c0&>XBT4SmQ~c|HAhkq@lKWL_>N+LneQL=(5caJt_YU z0Qvm`=o-I#C1m=S$E65pO6Zqv@>coxs3azXq6$DR0uBS24;JWybAP%Q@WZFJyx|}D7qgIKi!^A z5i-Of$ebO&ppkbyt9MSPcTRT*Ke@&Xu7%Ekhs#mh%!y;@wk`P|ZvC$?F1<|=ruf@# zc90r(RC$3u7+0XN1}sSh{Y0Q>q5}lza9PupL#%YQ63qsabu)!^Gr`bCM9)#*EyQ!g z9V~iQ4(bZzx~9=T-VEeoSbw12cE9~vI`H|O*zAjAW@LtrW#}%cf9H%{QtwLj|0<~l z^#30fc&6r`Q{X?|4=C{LT?G!9%v}Y(YpZu{HIB6FmhHM_|G)!BZhd$4v4E=|PkcoX z#!0ov(@(;5HZcY>$xb=NT7_u=R#_h|Yi;_88nJnELtTDZPsA6f_XP>IWU4D&P3yn3 zIu7rgzpcEW)t4I{_r%n(1JyRI$p!OTX@Ii8Wz(QRmgA610VB7sJQX#fJ-%L8V_&zH ziQ1PjZr+|zcJFJ?<*eK*ktY`8Yp2q}WsVyGD{k7-WMC6BzVAoR#+&E;;UvRfil1qX zlUT2}*GhgvwmZwTk3DiRSG85QV=Mr<+=&>10JUO?(s@?fI+4(3aJ* zf6ol7?fvp%gYvDN@!m4A`$X>SUk=Zu12+gY`R>P;M&@bp^l16qW^LDY6O6iQcDml$ zaQr&k-bJl~@Z8KCYsF5Q=&@`{z>)D^d)uBB8_^o;Yl9?t{$qZT{cF$CkJ~qvzG{vv zBfCMr{CY4kjr5qbOQjQzJ#3OsQyhMtoa-JPI3Y|RCpPHIN?i)r5T3i6US9oa;?nuY z`m0MeQ?&MUi{yrc+Ee80L&Rjf$HsAj@B)Nm*&V@W0j-~gCF)1-sJPKt?cdjM@YrVw zk^9~pFUc7HYHiB+i{#|wsRK7jMGfcvw>M!^3&x{%klmwr0p zzCB&Y_S#XYx61ee^mtn^&Tc_w*N<-spFkC8 z3QrjN;5Qpp&5r9ma8pTimUw@m`Nij^j0CAzy)Mwh0kbez<3>C2%9P~_*RYf3{)CC0 z#vvJ}9E(<4^>^a$To_C^5{;@8to$c(ohHjv>kU~y&z24ODwoAJnnoT9Sniu}z($HZ z&AM~$;L)eL-BH1Q8uPK`K9)GM$4XF9n0^DlMV4|muVt5ehPH^jgoi>?-p7fX0eQ#T zbT!3*PpzvVvT+ctp#&Kf zzeW__+2bIlIIu3<%}MOrUR|AN@UfPY=R1>lQQ>I1+L_cXkGG5hyh}FH#Gxrf1cbF# zj2K7ZMsgEXMqIefhg;>6?c8rmepz8$e3!o8mN{-9vUZJTotI~P;!~?R+#27KN;qpw z^k!Hn3t!vWyDswta-iW2+o;Lo=OdTA?UZPSdu=>3NN~Jn(F0s)`e4Es?8ptaD%k-S zmPZjr=*jDJtm!8&JIQ09OIr9HoMw$?495Dx>guwzK|@K)3pZz;-T)d{Mhx#Qk*KRF z#WeH4K`}PIBS^+#Du|z*-4HvVk1QsKPCPMBYPS10DLqcV8VEF36rjV9CG3re!0j&| zW3ZDPaxva6nN-l-6R}K!tYt60EVJ+gjFykE8D@gKN)BNb%zgO@DoC6>>s-=Cyh3^3 zx{UquQr0bL8!4mq&-*!_>h7r)#@a2t!WZ_*^TRIpx10fUj(i?#kaNa9w;Ubcn|xC^ z6Dlh)9zk38m4{~Sp0+H!W=D$TSki;IiKc@sU?JgmTnE((*PU&?%p}<<9y2lzv$F*@ z-gm0Rqn3Q|=$0h;&~;IH%Sr@Mw?K#rGA=6bzjwVld|c;Z+Qd1oQ&VClh8I8^UIvYW z)eG0iudCTp;Rge;&J#uN>)+S&cA9n2M|_Os;N}dP(360dcbB+Qga@nDa((+P8ZC%J zO~;*FVUC0IhD=srW`<>Dc9L=?=8wXJQw7`V+g`KZORLtzZS)bf*`v7|IAJeV*4-W^ z$c^|!Hg^?YdC$OEO-PMo!!mX@6jP*qKOtE)*%xr<2#2a9yxz4OO6qH9_a2tTX-GUf z6Zr+jm{9kc-8$_ZTngJI-l{43cBokN46B)LZK#2>=Uq&CJo_0|r~fCqG#NAwNrvbb zNABUgp-p#kN;*H@(g4tm%r4u&NiuJKU2mz5D-$M{Zs4e(;lyT(^~uMz$Cmrmbu)5y z#L@<@G6F>ShT>I zmL=(<&cpAY=u)tcH*G}KOS)GS=2=+I`7P8XsjljT1`K!_8zO>|r+lWTk`RZK#K_Z! zq*-=%A+5_sM|=!`{?!FV8T?B0& z)Jlo7@7XhLzp7G&giy!lZDxj^vsG1~q(4w#p{GK<0T%YXS)%^;Sk~*lB0VvZ^TOo3 zGH{`YtseIEuMt*%f24zfQA5srItD~xKi|u|IF349tTsz(q-?9Sirj0rhM-o0i9s5V~I-$=irx*2~cu< zcoyY~-}oTt)E8>Dbonr(mDOWzusNf=jv&&!ru)f741sf|9H2i?h%fqDpTcjna!cPn zTj17xn&%XbnU>JJwTwEQ-rA6xpV2`ae>p{U2R0qLddn=B$*02l`*2SYJtAWPYVAsU zS9V;o1oZ8;Iv!;7GK>6+=^JT~y{HUy{PD@&pCAXW8GO(@gpc};uhYKz2r(>`w0_tM zbx$T&D6bzjciTEiaCr{#ermXFz`<)bLF}OZOo8d35}HHf&?9Qoe5=LGVxb?wiST8U zp$R@EaV_JbyzBOmx#_U!EAnxJO!W}HH@Ye%zie_>z8{e53w`n$sb0s~gwJzs?feA{ zE;Q<>(NSL0zNlTaPeY;oMiNZ^o@}+iU@r~_fGpGiEeW&=+-B=#^l<2v&5T%WI zM`fY9+Bcjh5AG(@WoPag7PCBp15&5h{L`;yPt<*d^!f;C8HBUd>d-`T(z!aKbST-X zk@3mW#zVNcD9_(LPZtDW<`h>8cl@;l1OB;-W8VS0hVQiKCOk@=N3ii;p=ARm$S!o^ zvQ@uG3lqllt$uK~2tLa+98UCcJ#YW;GaeCpBDE)j2Q#?|2fxj+yzSRc@ ziSwsyTsyVvO*GWCDorO*FqQfQV{Z)^c)TfyFwh7LXpzP^J!uh!OAh5^`uWZ&j_JIvYM<3SfX z0+;u_gBG%#vcq`w%l^Zwd@w$IVqpu@oDRG~y1au$P+o4_KDtV`7d*Epb{**cOz4c_ zzIdGMFonMKwI(uXn7t6Zv^ukxWYzh*FiUv@W4B$9gQdA^69LXMTUfv`rUIKUNoDGd zJ%Ro0#nESFKILAwxSKZ_#yN>24OD^U&IAd$(w7NVp3w&S@gHqJ3Gd#IZXK;}rcC7F zI>w+szsMCt+GW8?N%igxZ^bFj*$GkUDij_HAKq7^4(IWunu3IQspuc%Jw^3;un9}S z-s!b{M!MOHDOGR~qzq1A33Y8X9kq2SdF|JbmpI&`PjbUNAVb+`UsE!nvHDcXUOc4X Ze`5{*ccy(p&3|Z Date: Wed, 24 Feb 2021 11:22:23 +0530 Subject: [PATCH 081/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 2017acc4d7..11753d97af 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -23,7 +23,7 @@ ms.topic: article This topic will show you how to take your reference image for Windows 10 (that was just [created](create-a-windows-10-reference-image.md)), and deploy that image to your environment using the **Microsoft Deployment Toolkit (MDT)**. -We will prepare for this by creating an **MDT** deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of on both processes. We will configure **Active Directory** permissions, configure the deployment share, create a new task sequence, and add applications, drivers, and rules. +We will prepare for this by creating an **MDT** deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of both processes. We will configure **Active Directory** permissions, configure the deployment share, create a new task sequence, and add applications, drivers, and rules. For the purposes of this topic, we will use four computers: **DC01, MDT01, HV01 and PC0005**. From 4a4ba2dda0175c1cb8e35dd47c080a6ae7b50f5e Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:22:50 +0530 Subject: [PATCH 082/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 11753d97af..586ec55aa7 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -32,7 +32,7 @@ For the purposes of this topic, we will use four computers: **DC01, MDT01, HV01 - **HV01** is a Hyper-V server - **PC0005** is a blank device to which we will deploy Windows 10 -**MDT01** and **PC0005** are members of the domain contoso.com for the fictitious Contoso Corporation. **HV01** used to test deployment of **PC0005** in a virtual environment. +**MDT01** and **PC0005** are members of the domain contoso.com for the fictitious Contoso Corporation. **HV01** is used to test the deployment of **PC0005** in a virtual environment. ![devices](../images/mdt-07-fig01.png) From f719cd43215e0bb60b0edad159749646968b00a0 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:23:12 +0530 Subject: [PATCH 083/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 586ec55aa7..47c87e09b0 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -122,7 +122,7 @@ In these steps, we assume that you have completed the steps in the [Create a Win 6. On the **Destination** page, in the **Destination directory name** text box, type **W10EX64RTM**, click **Next** twice, and then click **Finish**. 7. After adding the **Operating System**, double-click the added **Operating System** name in the **Operating Systems / Windows 10** node and change the name to **Windows 10 Enterprise x64 RTM Custom Image**. ->[!NOTE] +> [!NOTE] >The reason for adding the setup files has changed since earlier versions of **MDT**. **MDT 2010** used the setup files to install Windows. **MDT** uses **DISM** Command to apply the image; however, you still need the **setup files** because some components in **roles and features** are stored outside the main image. From 5429df8bcd62e94713e1fb34ff58d2b98b53e420 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:23:49 +0530 Subject: [PATCH 084/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 47c87e09b0..9387540124 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -130,7 +130,7 @@ In these steps, we assume that you have completed the steps in the [Create a Win ## Step 4: Add an application -When you configure your **MDT Build Lab deployment** share, you can also add a**pplications** to the new deployment share before creating your task sequence. This section walks you through the process of adding an application to the **MDT Production deployment** share using **Adobe Reader** as an example. +When you configure your **MDT Build Lab deployment** share, you can also add **applications** to the new deployment share before creating your task sequence. This section walks you through the process of adding an application to the **MDT Production deployment** share using **Adobe Reader** as an example. ### Create the install: Adobe Reader DC From 60f91e5deff68abb03d6b9b47b7bd09a0faa1f1b Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:24:11 +0530 Subject: [PATCH 085/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 9387540124..e96ae41179 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -123,7 +123,7 @@ In these steps, we assume that you have completed the steps in the [Create a Win 7. After adding the **Operating System**, double-click the added **Operating System** name in the **Operating Systems / Windows 10** node and change the name to **Windows 10 Enterprise x64 RTM Custom Image**. > [!NOTE] ->The reason for adding the setup files has changed since earlier versions of **MDT**. **MDT 2010** used the setup files to install Windows. **MDT** uses **DISM** Command to apply the image; however, you still need the **setup files** because some components in **roles and features** are stored outside the main image. +> The reason for adding the setup files has changed since earlier versions of **MDT**. **MDT 2010** used the setup files to install Windows. **MDT** uses the **DISM** command to apply the image; however, you still need the **setup files** because some components in **roles and features** are stored outside the main image. ![Imported OS](../images/fig2-importedos.png) From d027375bcff6484e46321f28cd8cfe38fa91d0ef Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:24:24 +0530 Subject: [PATCH 086/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index e96ae41179..300e73b186 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -137,7 +137,7 @@ When you configure your **MDT Build Lab deployment** share, you can also add **a On **MDT01**: 1. Download the Enterprise distribution version of [**Adobe Acrobat Reader DC**](https://get.adobe.com/reader/enterprise/) (AcroRdrDC2100120140_en_US.exe) to **D:\\setup\\adobe** on MDT01. -2. Extract the **.exe** file that you downloaded to an **.msi** (ex: .\AcroRdrDC2100120140_en_US.exe -sfx_o"d:\setup\adobe\install\" -sfx_ne). +2. Extract the **.exe** file that you downloaded to a **.msi** (ex: .\AcroRdrDC2100120140_en_US.exe -sfx_o"d:\setup\adobe\install\" -sfx_ne). 3. In the **Deployment Workbench**, expand the **MDT Production** node and navigate to the **Applications** node. 4. Right-click the **Applications** node, and create a new folder named **Adobe**. 5. In the **Applications** node, right-click the **Adobe** folder and select **New Application**. From 2932031718b27aa5a8947d1c082c7f67465246fb Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:24:42 +0530 Subject: [PATCH 087/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 300e73b186..fb16dd3c37 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -209,7 +209,7 @@ When you import drivers to the **MDT driver repository**, **MDT** creates a sing - Microsoft Corporation - Surface Laptop -The preceding folder names should match the actual make and model values that MDT reads from devices during deployment. You can find out the model values for your machines by using the following command in **Windows PowerShell Prompt: +The preceding folder names should match the actual make and model values that MDT reads from devices during deployment. You can find out the model values for your machines by using the following command in an elevated **Windows PowerShell prompt**: ``` powershell Get-WmiObject -Class:Win32_ComputerSystem From 04f89ef9c4869c381b7f9b277f4f0be0c04c7ef9 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:24:55 +0530 Subject: [PATCH 088/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index fb16dd3c37..6b18f752b6 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -153,7 +153,7 @@ The Adobe Reader application added to the Deployment Workbench. ## Step 5: Prepare the drivers repository -In order to deploy Windows 10 with **MDT** successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot image and operating system, using the following hardware models as examples: +In order to deploy Windows 10 with **MDT** successfully, you need drivers for the boot images and for the actual operating system. This section will show you how to add drivers for the boot images and operating system, using the following hardware models as examples: - Lenovo ThinkPad T420 - Dell Latitude 7390 - HP EliteBook 8560w From eda636b6ae45bc9e16d86aac34bd590d14d608e4 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:27:28 +0530 Subject: [PATCH 089/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 6b18f752b6..ac608d2f37 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -229,7 +229,7 @@ The Out-of-Box Drivers structure in the Deployment Workbench. ### Create the selection profiles for boot image drivers By default, MDT adds any storage and network drivers that you import to the boot images. However, you should add only the drivers that are necessary to the boot image. You can control which drivers are added by using selection profiles. -The drivers that are used for the boot images (Windows PE) are Windows 10 drivers. If you can’t locate **Windows 10** drivers for your device, a **Windows 7 or Windows 8.1** driver will most likely work, but Windows 10 drivers should be your first choice. +The drivers that are used for the boot images (Windows PE) are Windows 10 drivers. If you can’t locate **Windows 10** drivers for your device, a **Windows 7** or **Windows 8.1** driver will most likely work, but Windows 10 drivers should be your first choice. On **MDT01**: From b397cda4516761e21f2b62245cc0405b908d8c6f Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:31:23 +0530 Subject: [PATCH 090/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index ac608d2f37..3b90fab699 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -234,7 +234,7 @@ The drivers that are used for the boot images (Windows PE) are Windows 10 driver On **MDT01**: 1. In the **Deployment Workbench**, under the **MDT Production** node, expand the **Advanced Configuration** node, right-click the **Selection Profiles** node, and select **New Selection Profile**. -2. In the New **Selection Profile Wizard**, create a **selection profile** with the following settings: +2. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: 1. Selection Profile name: **WinPE x86** 2. Folders: Select the **WinPE x86 folder** in **Out-of-Box** Drivers. 3. Click **Next**, **Next** and **Finish**. From 800fe3abf2c9e38348d17cd51432f2b96ae58bfd Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:31:42 +0530 Subject: [PATCH 091/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 3b90fab699..0aa865e362 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -239,7 +239,7 @@ On **MDT01**: 2. Folders: Select the **WinPE x86 folder** in **Out-of-Box** Drivers. 3. Click **Next**, **Next** and **Finish**. 3. Right-click the **Selection Profiles** node again, and select **New Selection Profile**. -4. In the New **Selection Profile Wizard**, create a **selection profile** with the following settings: +4. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: 1. Selection Profile name: **WinPE x64** 2. Folders: Select the **WinPE x64 folder** in **Out-of-Box** Drivers. 3. Click **Next**, **Next** and **Finish**. From f8fb238d7997a6cc56e28f75a61f24c1ffa37baf Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:31:55 +0530 Subject: [PATCH 092/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 0aa865e362..c57ab65032 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -25,7 +25,7 @@ This topic will show you how to take your reference image for Windows 10 (that We will prepare for this by creating an **MDT** deployment share that is used solely for image deployment. Separating the processes of creating reference images from the processes used to deploy them in production allows greater control of both processes. We will configure **Active Directory** permissions, configure the deployment share, create a new task sequence, and add applications, drivers, and rules. -For the purposes of this topic, we will use four computers: **DC01, MDT01, HV01 and PC0005**. +For the purposes of this topic, we will use four computers: **DC01**, **MDT01**, **HV01**, and **PC0005**. - **DC01** is a domain controller - **MDT01** is a domain member server From 22a12e714123031d004e64c282ae1da811670de1 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:32:09 +0530 Subject: [PATCH 093/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index c57ab65032..b3075c2cfa 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -94,7 +94,7 @@ The steps for creating the deployment share for production are the same as when ### Configure permissions for the production deployment share -To read files in the deployment share, you need to assign **NTFS** and **SMB** permissions to the **MDT Build Account (MDT\_BA)** for the **D:\\MDTProduction** folder +To read files in the deployment share, you need to assign **NTFS** and **SMB** permissions to the **MDT Build Account (MDT\_BA)** for the **D:\\MDTProduction** folder. On **MDT01**: From 1905cb6c08e9bc2fc99e8d50223727abbba1e68d Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:32:23 +0530 Subject: [PATCH 094/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index b3075c2cfa..1ab83e7066 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -236,7 +236,7 @@ On **MDT01**: 1. In the **Deployment Workbench**, under the **MDT Production** node, expand the **Advanced Configuration** node, right-click the **Selection Profiles** node, and select **New Selection Profile**. 2. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: 1. Selection Profile name: **WinPE x86** - 2. Folders: Select the **WinPE x86 folder** in **Out-of-Box** Drivers. + 2. Folders: Select the **WinPE x86 folder** in **Out-of-Box Drivers**. 3. Click **Next**, **Next** and **Finish**. 3. Right-click the **Selection Profiles** node again, and select **New Selection Profile**. 4. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: From 112543582b835f1ac483441fa0192abfef96a1c7 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:32:40 +0530 Subject: [PATCH 095/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 1ab83e7066..ad33d40fd6 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -250,7 +250,7 @@ Creating the WinPE x64 selection profile. ### Extract and import drivers for the x64 boot image -**Windows PE** supports all the hardware models that we have, but here you learn to add boot image drivers to accommodate any new hardware that might require additional drivers. In this example, you add the latest Intel network drivers to the x64 boot image. +**Windows PE** supports all the hardware models that we have, but here you learn how to add boot image drivers to accommodate any new hardware that might require additional drivers. In this example, you add the latest Intel network drivers to the x64 boot image. On **MDT01**: From 5ddf048a4a6fb22960678a7bd1bd514b054015ea Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:33:05 +0530 Subject: [PATCH 096/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index ad33d40fd6..9fdb2b3c3e 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -242,7 +242,7 @@ On **MDT01**: 4. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: 1. Selection Profile name: **WinPE x64** 2. Folders: Select the **WinPE x64 folder** in **Out-of-Box** Drivers. - 3. Click **Next**, **Next** and **Finish**. + 3. Click **Next**, **Next**, and **Finish**. ![figure 5](../images/fig5-selectprofile.png) From 4aa7f8847ef6a7b141b9d8e6d0c9a36c8a6a0160 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:33:17 +0530 Subject: [PATCH 097/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index 9fdb2b3c3e..e2ca2fafc0 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -237,7 +237,7 @@ On **MDT01**: 2. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: 1. Selection Profile name: **WinPE x86** 2. Folders: Select the **WinPE x86 folder** in **Out-of-Box Drivers**. - 3. Click **Next**, **Next** and **Finish**. + 3. Click **Next**, **Next**, and **Finish**. 3. Right-click the **Selection Profiles** node again, and select **New Selection Profile**. 4. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: 1. Selection Profile name: **WinPE x64** From 7918ccd38d147a892cf0ead86df0b389af6dbb1b Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:33:31 +0530 Subject: [PATCH 098/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index e2ca2fafc0..b64a3b7a0b 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -241,7 +241,7 @@ On **MDT01**: 3. Right-click the **Selection Profiles** node again, and select **New Selection Profile**. 4. In the **New Selection Profile Wizard**, create a **selection profile** with the following settings: 1. Selection Profile name: **WinPE x64** - 2. Folders: Select the **WinPE x64 folder** in **Out-of-Box** Drivers. + 2. Folders: Select the **WinPE x64 folder** in **Out-of-Box Drivers**. 3. Click **Next**, **Next**, and **Finish**. ![figure 5](../images/fig5-selectprofile.png) From cc3f83cf159fea69f586d754c614dccbbe224101 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:35:46 +0530 Subject: [PATCH 099/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index b64a3b7a0b..bf3cde3a44 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -259,7 +259,7 @@ On **MDT01**: a. **Note**: Extracting the **.exe** file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the **.exe** terminates. 3. Using **File Explorer**, create the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. 4. Copy the content of the **C:\\Tmp\\PROWinx64\\PRO1000\\Winx64\\NDIS64** folder to the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. -5. In the **Deployment Workbench**, expand the **MDT Production** > **Out-of-Box Drivers** node, right-click the **WinPE x64** node, and select **Import Drivers**, and use the following Driver source directory to import drivers: **D:\\Drivers\\WinPE x64\\Intel PRO1000**. +5. In the **Deployment Workbench**, expand the **MDT Production** > **Out-of-Box Drivers** node, right-click the **WinPE x64** node, select **Import Drivers**, and use the following driver source directory to import drivers: **D:\\Drivers\\WinPE x64\\Intel PRO1000**. ### Download, extract, and import drivers From 6ab718e9dd7c5188305bc84ff7d873b8ea988446 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:45:39 +0530 Subject: [PATCH 100/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 1 - 1 file changed, 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index bf3cde3a44..e7c0e7dbde 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -256,7 +256,6 @@ On **MDT01**: 1. Download **PROWinx64.exe** from Intel.com (ex: [PROWinx64.exe](https://downloadcenter.intel.com/downloads/eula/25016/Intel-Network-Adapter-Driver-for-Windows-10?httpDown=https%3A%2F%2Fdownloadmirror.intel.com%2F25016%2Feng%2FPROWinx64.exe)). 2. Extract **PROWinx64.exe** to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. - a. **Note**: Extracting the **.exe** file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the **.exe** terminates. 3. Using **File Explorer**, create the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. 4. Copy the content of the **C:\\Tmp\\PROWinx64\\PRO1000\\Winx64\\NDIS64** folder to the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. 5. In the **Deployment Workbench**, expand the **MDT Production** > **Out-of-Box Drivers** node, right-click the **WinPE x64** node, select **Import Drivers**, and use the following driver source directory to import drivers: **D:\\Drivers\\WinPE x64\\Intel PRO1000**. From 8191fb51fe1df989de32006b8e982410342d4a50 Mon Sep 17 00:00:00 2001 From: VARADHARAJAN K <3296790+RAJU2529@users.noreply.github.com> Date: Wed, 24 Feb 2021 11:45:55 +0530 Subject: [PATCH 101/206] Update windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md accepted Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md index e7c0e7dbde..355ea08482 100644 --- a/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md +++ b/windows/deployment/deploy-windows-mdt/deploy-a-windows-10-image-using-mdt.md @@ -255,7 +255,7 @@ Creating the WinPE x64 selection profile. On **MDT01**: 1. Download **PROWinx64.exe** from Intel.com (ex: [PROWinx64.exe](https://downloadcenter.intel.com/downloads/eula/25016/Intel-Network-Adapter-Driver-for-Windows-10?httpDown=https%3A%2F%2Fdownloadmirror.intel.com%2F25016%2Feng%2FPROWinx64.exe)). -2. Extract **PROWinx64.exe** to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. +2. Extract **PROWinx64.exe** to a temporary folder - in this example to the **C:\\Tmp\\ProWinx64** folder. Note that extracting the **.exe** file manually requires an extraction utility. You can also run the .exe and it will self-extract files to the **%userprofile%\AppData\Local\Temp\RarSFX0** directory. This directory is temporary and will be deleted when the **.exe** terminates. 3. Using **File Explorer**, create the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. 4. Copy the content of the **C:\\Tmp\\PROWinx64\\PRO1000\\Winx64\\NDIS64** folder to the **D:\\Drivers\\WinPE x64\\Intel PRO1000** folder. 5. In the **Deployment Workbench**, expand the **MDT Production** > **Out-of-Box Drivers** node, right-click the **WinPE x64** node, select **Import Drivers**, and use the following driver source directory to import drivers: **D:\\Drivers\\WinPE x64\\Intel PRO1000**. From da74350012b5f803f271a68836a862dfb07ad592 Mon Sep 17 00:00:00 2001 From: Kurt Sarens <56369685+kurtsarens@users.noreply.github.com> Date: Wed, 24 Feb 2021 13:08:48 +0100 Subject: [PATCH 102/206] Update microsoft-defender-antivirus-compatibility.md EDR Block mode is a feature not a state... having it in the columns confuses people and creates support calls --- .../microsoft-defender-antivirus-compatibility.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index 3c97136983..f9e280a3e3 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -81,13 +81,13 @@ The table in this section summarizes the functionality and features that are ava > [!IMPORTANT] > Do not turn off capabilities, such as real-time protection, cloud-delivered protection, or limited periodic scanning, if you are using Microsoft Defender Antivirus in passive mode or you are using EDR in block mode. -|Protection |Active mode |Passive mode |EDR in block mode |Disabled or uninstalled | -|:---|:---|:---|:---|:---| -| [Real-time protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus) and [cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus) | Yes | No [[3](#fn3)] | No | No | -| [Limited periodic scanning availability](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus) | No | No | No | Yes | -| [File scanning and detection information](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/customize-run-review-remediate-scans-microsoft-defender-antivirus) | Yes | Yes | Yes | No | -| [Threat remediation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus) | Yes | See note [[4](#fn4)] | Yes | No | -| [Security intelligence updates](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus) | Yes | Yes | Yes | No | +|Protection |Active mode |Passive mode |Disabled or uninstalled | +|:---|:---|:---|:---| +| [Real-time protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-real-time-protection-microsoft-defender-antivirus) and [cloud-delivered protection](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus) | Yes | No [[3](#fn3)] | No | +| [Limited periodic scanning availability](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/limited-periodic-scanning-microsoft-defender-antivirus) | No | No | Yes | +| [File scanning and detection information](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/customize-run-review-remediate-scans-microsoft-defender-antivirus) | Yes | Yes | No | +| [Threat remediation](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-remediation-microsoft-defender-antivirus) | Yes | See note [[4](#fn4)] | No | +| [Security intelligence updates](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus) | Yes | Yes | No | (3) In general, when Microsoft Defender Antivirus is in passive mode, real-time protection does not provide any blocking or enforcement, even though it is enabled and in passive mode. From 7e282f5d33a1e22a3d046c8aa5e1cba7121e1f66 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Wed, 24 Feb 2021 16:31:08 +0200 Subject: [PATCH 103/206] Update gov.md ASC for GCC is now available. --- .../threat-protection/microsoft-defender-atp/gov.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 3c7f03cb83..c3cc42ac85 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -102,9 +102,9 @@ The following OS versions are supported when using [Azure Defender for Servers]( OS version | GCC | GCC High | DoD (PREVIEW) :---|:---|:---|:--- -Windows Server 2016 | ![No](../images/svg/check-no.svg) Rolling out | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows Server 2012 R2 | ![No](../images/svg/check-no.svg) Rolling out | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) -Windows Server 2008 R2 SP1 | ![No](../images/svg/check-no.svg) Rolling out | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows Server 2016 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows Server 2012 R2 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) +Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg) | ![Yes](../images/svg/check-yes.svg)
From dc686fcc39ebcce7a0c11a4ff31c3e1e94937c33 Mon Sep 17 00:00:00 2001 From: rbsec Date: Wed, 24 Feb 2021 14:44:20 +0000 Subject: [PATCH 104/206] Replace ANSI quotes with ASCII ones --- windows/whats-new/ltsc/whats-new-windows-10-2019.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/whats-new/ltsc/whats-new-windows-10-2019.md b/windows/whats-new/ltsc/whats-new-windows-10-2019.md index 435e7530bd..072625e781 100644 --- a/windows/whats-new/ltsc/whats-new-windows-10-2019.md +++ b/windows/whats-new/ltsc/whats-new-windows-10-2019.md @@ -220,7 +220,7 @@ The new [security baseline for Windows 10 version 1803](https://docs.microsoft.c #### SMBLoris vulnerability -An issue, known as “SMBLoris”, which could result in denial of service, has been addressed. +An issue, known as "SMBLoris", which could result in denial of service, has been addressed. #### Windows Security Center @@ -340,13 +340,13 @@ If you have shared devices deployed in your work place, **Fast sign-in** enables ### Web sign-in to Windows 10 -Until now, Windows logon only supported the use of identities federated to ADFS or other providers that support the WS-Fed protocol. We are introducing “web sign-in,” a new way of signing into your Windows PC. Web Sign-in enables Windows logon support for non-ADFS federated providers (e.g.SAML). +Until now, Windows logon only supported the use of identities federated to ADFS or other providers that support the WS-Fed protocol. We are introducing "web sign-in," a new way of signing into your Windows PC. Web Sign-in enables Windows logon support for non-ADFS federated providers (e.g.SAML). **To try out web sign-in:** 1. Azure AD Join your Windows 10 PC. (Web sign-in is only supported on Azure AD Joined PCs). 2. Set the Policy CSP, and the Authentication and EnableWebSignIn polices to enable web sign-in. 3. On the lock screen, select web sign-in under sign-in options. -4. Click the “Sign in” button to continue. +4. Click the "Sign in" button to continue. ![Web sign-in](../images/websignin.png "web sign-in") From c0f41ea1fb404c385a29cd40b27c477c493fb5c4 Mon Sep 17 00:00:00 2001 From: rbsec Date: Wed, 24 Feb 2021 14:46:33 +0000 Subject: [PATCH 105/206] Replace ANSI quotes with ASCII ones --- windows/whats-new/whats-new-windows-10-version-1709.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/whats-new-windows-10-version-1709.md b/windows/whats-new/whats-new-windows-10-version-1709.md index 1792e88bff..7da6279237 100644 --- a/windows/whats-new/whats-new-windows-10-version-1709.md +++ b/windows/whats-new/whats-new-windows-10-version-1709.md @@ -119,7 +119,7 @@ The minimum PIN length is being changed from 6 to 4, with a default of 6. For mo Microsoft has released new [Windows security baselines](https://docs.microsoft.com/windows/device-security/windows-security-baselines) for Windows Server and Windows 10. A security baseline is a group of Microsoft-recommended configuration settings with an explanation of their security impact. For more information, and to download the Policy Analyzer tool, see [Microsoft Security Compliance Toolkit 1.0](https://docs.microsoft.com/windows/device-security/security-compliance-toolkit-10). ### SMBLoris vulnerability -An issue, known as “SMBLoris”, which could result in denial of service, has been addressed. +An issue, known as "SMBLoris", which could result in denial of service, has been addressed. ## Windows Analytics From 9510405d2674accfa49c108f3832bd746b28662e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 24 Feb 2021 08:30:57 -0800 Subject: [PATCH 106/206] Update microsoft-defender-antivirus-compatibility.md --- .../microsoft-defender-antivirus-compatibility.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md index f9e280a3e3..531fd81b5c 100644 --- a/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md +++ b/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-compatibility.md @@ -13,7 +13,7 @@ ms.author: deniseb ms.custom: nextgen ms.reviewer: tewchen, pahuijbr, shwjha manager: dansimp -ms.date: 02/09/2021 +ms.date: 02/24/2021 ms.technology: mde --- From 772a032248229ca542396e2e5fad22257e727c8b Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 24 Feb 2021 09:03:44 -0800 Subject: [PATCH 107/206] Update Onboard-Windows-10-multi-session-device.md --- .../Onboard-Windows-10-multi-session-device.md | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md b/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md index 94eacf9749..d806706d5e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md +++ b/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md @@ -13,7 +13,7 @@ ms.topic: article author: dansimp ms.author: dansimp ms.custom: nextgen -ms.date: 02/04/2021 +ms.date: 02/24/2021 ms.reviewer: manager: dansimp ms.technology: mde @@ -31,9 +31,6 @@ Applies to: > [!IMPORTANT] > Welcome to Microsoft Defender for Endpoint, the new name for Microsoft Defender for Endpoint. Read more about this and other updates here. We'll be updating names in products and in the docs in the near future. -> [!WARNING] -> Microsoft Defender for Endpoint support for Windows Virtual Desktop multi-session scenarios is currently in Preview and limited up to 25 concurrent sessions per host/VM. However, single session scenarios on Windows Virtual Desktop are fully supported. - Microsoft Defender for Endpoint supports monitoring both VDI as well as Windows Virtual Desktop sessions. Depending on your organization's needs, you might need to implement VDI or Windows Virtual Desktop sessions to help your employees access corporate data and apps from an unmanaged device, remote location, or similar scenario. With Microsoft Defender for Endpoint, you can monitor these virtual machines for anomalous activity. ## Before you begin From 5bf4aab647a3622f775c10bc9dbc92ee715328b8 Mon Sep 17 00:00:00 2001 From: Sunny Zankharia <67922512+sazankha@users.noreply.github.com> Date: Wed, 24 Feb 2021 19:27:05 -0800 Subject: [PATCH 108/206] Update faq-md-app-guard.md --- .../microsoft-defender-application-guard/faq-md-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index 60b5e96c41..d61d6d1100 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -161,7 +161,7 @@ ICS is enabled by default in Windows, and ICS must be enabled in order for Appli 5. Reboot the device. ### Why doesn't the container fully load when device control policies are enabled? -Allow-listed items must be configured as "allowed" in the Group Policy Object ensure AppGuard works properly. +Allow-listed items must be configured as "allowed" in the Group Policy Object to ensure AppGuard works properly. This is a prerequisite. If the device installations have already been blocked by device control policies, the OS must be reinstalled to resolve this issue. Policy: Allow installation of devices that match any of these device IDs - `SCSI\DiskMsft____Virtual_Disk____` From 5de1aaef5a0df37715898ab2cb2b689cf4f4c3c8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 25 Feb 2021 10:03:44 -0800 Subject: [PATCH 109/206] Update faq-md-app-guard.md --- .../microsoft-defender-application-guard/faq-md-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index d61d6d1100..c845c37bc3 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 01/21/2021 +ms.date: 02/25/2021 ms.reviewer: manager: dansimp ms.custom: asr From 4c7ad9c7e78444df1924ce4e646078b432347768 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 25 Feb 2021 10:06:58 -0800 Subject: [PATCH 110/206] Update faq-md-app-guard.md --- .../faq-md-app-guard.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index c845c37bc3..0ab5ff8744 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -36,7 +36,7 @@ We recommend 8-GB RAM for optimal performance but you can use the following regi In Windows 10 Enterprise edition 1803, users are able to download documents from the isolated Application Guard container to the host PC. This capability is managed by policy. -In Windows 10 Enterprise edition 1709 or Windows 10 Professional edition 1803, it is not possible to download files from the isolated Application Guard container to the host PC. However, employees can use the **Print as PDF** or **Print as XPS** options and save those files to the host device. +In Windows 10 Enterprise edition 1709 or Windows 10 Professional edition 1803, it is not possible to download files from the isolated Application Guard container to the host device. However, employees can use the **Print as PDF** or **Print as XPS** options and save those files to the host device. ### Can employees copy and paste between the host device and the Application Guard Edge session? @@ -46,9 +46,9 @@ Depending on your organization's settings, employees can copy and paste images ( To help keep the Application Guard Edge session secure and isolated from the host device, we don't copy the Favorites stored in the Application Guard Edge session back to the host device. -### Why aren’t employees able to see their Extensions in the Application Guard Edge session? +### Why aren’t employees able to see their extensions in the Application Guard Edge session? -Currently, the Application Guard Edge session doesn't support Extensions. However, we're closely monitoring your feedback about this. +Currently, the Application Guard Edge session doesn't support extensions. However, we're closely monitoring your feedback about this. ### How do I configure Microsoft Defender Application Guard to work with my network proxy (IP-Literal Addresses)? @@ -80,7 +80,7 @@ This account is part of Application Guard beginning with Windows 10, version 170 ### How do I trust a subdomain in my site list? -To trust a subdomain, you must precede your domain with two dots, for example: `..contoso.com` ensures that `mail.contoso.com` or `news.contoso.com` are trusted. The first dot represents the strings for the subdomain name (mail or news), the second dot recognizes the start of the domain name (`contoso.com`). This prevents sites such as `fakesitecontoso.com` from being trusted. +To trust a subdomain, you must precede your domain with two dots. For example: `..contoso.com` ensures that `mail.contoso.com` or `news.contoso.com` are trusted. The first dot represents the strings for the subdomain name (mail or news), the second dot recognizes the start of the domain name (`contoso.com`). This prevents sites such as `fakesitecontoso.com` from being trusted. ### Are there differences between using Application Guard on Windows Pro vs Windows Enterprise? From aa3ea2b62115ba473fc3f3d3949f256c4718e9b2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 25 Feb 2021 10:07:38 -0800 Subject: [PATCH 111/206] Update faq-md-app-guard.md --- .../microsoft-defender-application-guard/faq-md-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index 0ab5ff8744..d3085c37e8 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -161,7 +161,7 @@ ICS is enabled by default in Windows, and ICS must be enabled in order for Appli 5. Reboot the device. ### Why doesn't the container fully load when device control policies are enabled? -Allow-listed items must be configured as "allowed" in the Group Policy Object to ensure AppGuard works properly. This is a prerequisite. If the device installations have already been blocked by device control policies, the OS must be reinstalled to resolve this issue. +Allow-listed items must be configured as "allowed" in the Group Policy Object to ensure Application Guard works properly. This is a prerequisite. If the device installations have already been blocked by device control policies, the OS must be reinstalled to resolve this issue. Policy: Allow installation of devices that match any of these device IDs - `SCSI\DiskMsft____Virtual_Disk____` From 1c4c612185e1d7b212ea02615073965d7f1148f9 Mon Sep 17 00:00:00 2001 From: Helen Allas Date: Thu, 25 Feb 2021 11:14:26 -0800 Subject: [PATCH 112/206] Update reference to the portal Should be "Microsoft Defender Security Center" --- .../microsoft-defender-atp/microsoft-defender-atp-linux.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md index b9232a219a..d858fa0862 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md @@ -51,7 +51,7 @@ There are several methods and deployment tools that you can use to install and c In general you need to take the following steps: -- Ensure that you have a Microsoft Defender for Endpoint subscription, and that you have access to the [Microsoft Defender for Endpoint portal](microsoft-defender-security-center.md). +- Ensure that you have a Microsoft Defender for Endpoint subscription, and that you have access to the [Microsoft Defender Security Center portal](microsoft-defender-security-center.md). - Deploy Microsoft Defender for Endpoint for Linux using one of the following deployment methods: - The command-line tool: - [Manual deployment](linux-install-manually.md) From 6f7b3d2e1687fe3dd6ab79f6a06d670dc5a12e79 Mon Sep 17 00:00:00 2001 From: VLG17 <41186174+VLG17@users.noreply.github.com> Date: Fri, 26 Feb 2021 13:23:49 +0200 Subject: [PATCH 113/206] update port number https://github.com/MicrosoftDocs/windows-itpro-docs/issues/9024 --- .../microsoft-defender-application-guard/faq-md-app-guard.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index d3085c37e8..8ce4c7a158 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -131,7 +131,7 @@ In the Microsoft Defender Firewall user interface go through the following steps 1. Right click on inbound rules, create a new rule. 2. Choose **custom rule**. 3. Program path: `%SystemRoot%\System32\svchost.exe`. -4. Protocol Type: UDP, Specific ports: 67, Remote port: any. +4. Protocol Type: UDP, Specific ports: 68, Remote port: any. 5. Any IP addresses. 6. Allow the connection. 7. All profiles. From ba81ba81eb7b76a5b289ee3e97eeedb3dcc6fec5 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 1 Mar 2021 17:11:13 +0800 Subject: [PATCH 114/206] Edits --- .../microsoft-defender-atp/tvm-hunt-exposed-devices.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md index 0ca6c08b6d..eb0649ffaf 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md @@ -38,9 +38,12 @@ Advanced hunting is a query-based threat-hunting tool that lets you explore up t ### Schema tables -- [DeviceTvmSoftwareInventory](advanced-hunting-devicetvmsoftwareinventory-table.md) - Inventory of software installed on devices, including their version information and end-of-support status +- [DeviceTvmSoftwareInventory](advanced-hunting-devicetvmsoftwareinventory-table.md) - A complete list of all software on your devices, whether or not they have any vulnerabilities. + - You'll have a single row for each software installed on every device. + - EndOfSupportStatus and EndOfSupportDate will have the end-of-support state (if applicable) for specific software versions installed on devices. -- [DeviceTvmSoftwareVulnerabilities](advanced-hunting-devicetvmsoftwarevulnerabilities-table.md) - Software vulnerabilities found on devices and the list of available security updates that address each vulnerability +- [DeviceTvmSoftwareVulnerabilities](advanced-hunting-devicetvmsoftwarevulnerabilities-table.md) - Discover vulnerabilities (CVEs) in existing software across all your devices. + - RecommendedSecurityUpdate and RecommendedSecurityUpdateId will have missing security updates or KBs for installed software. - [DeviceTvmSoftwareVulnerabilitiesKB](advanced-hunting-devicetvmsoftwarevulnerabilitieskb-table.md) - Knowledge base of publicly disclosed vulnerabilities, including whether exploit code is publicly available From 5ddd559443f25d5f2f66de48b5aa40ba4397bc70 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 1 Mar 2021 17:52:57 +0800 Subject: [PATCH 115/206] Updated page --- .../microsoft-defender-atp/tvm-hunt-exposed-devices.md | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md index eb0649ffaf..0ca6c08b6d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-hunt-exposed-devices.md @@ -38,12 +38,9 @@ Advanced hunting is a query-based threat-hunting tool that lets you explore up t ### Schema tables -- [DeviceTvmSoftwareInventory](advanced-hunting-devicetvmsoftwareinventory-table.md) - A complete list of all software on your devices, whether or not they have any vulnerabilities. - - You'll have a single row for each software installed on every device. - - EndOfSupportStatus and EndOfSupportDate will have the end-of-support state (if applicable) for specific software versions installed on devices. +- [DeviceTvmSoftwareInventory](advanced-hunting-devicetvmsoftwareinventory-table.md) - Inventory of software installed on devices, including their version information and end-of-support status -- [DeviceTvmSoftwareVulnerabilities](advanced-hunting-devicetvmsoftwarevulnerabilities-table.md) - Discover vulnerabilities (CVEs) in existing software across all your devices. - - RecommendedSecurityUpdate and RecommendedSecurityUpdateId will have missing security updates or KBs for installed software. +- [DeviceTvmSoftwareVulnerabilities](advanced-hunting-devicetvmsoftwarevulnerabilities-table.md) - Software vulnerabilities found on devices and the list of available security updates that address each vulnerability - [DeviceTvmSoftwareVulnerabilitiesKB](advanced-hunting-devicetvmsoftwarevulnerabilitieskb-table.md) - Knowledge base of publicly disclosed vulnerabilities, including whether exploit code is publicly available From d30a971b6e33a93af0b063f7f0d25dab6d52ea85 Mon Sep 17 00:00:00 2001 From: schmurky Date: Mon, 1 Mar 2021 20:04:24 +0800 Subject: [PATCH 116/206] Redirects --- .openpublishing.redirection.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.openpublishing.redirection.json b/.openpublishing.redirection.json index 76f303dc00..c4199cc4dd 100644 --- a/.openpublishing.redirection.json +++ b/.openpublishing.redirection.json @@ -16535,6 +16535,11 @@ "redirect_url": "https://docs.microsoft.com/windows/deployment/update/waas-configure-wufb", "redirect_document_id": true }, + { + "source_path": "windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventoryvulnerabilities-table.md", + "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table", + "redirect_document_id": true + }, { "source_path": "windows/security/threat-protection/windows-defender-exploit-guard/troubleshoot-asr.md", "redirect_url": "https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-asr", From 6834a684465f5c150880faa3fc62a2596770e8ec Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 1 Mar 2021 09:31:11 -0800 Subject: [PATCH 117/206] Update defender-endpoint-false-positives-negatives.md --- .../defender-endpoint-false-positives-negatives.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md index 5aabbdddd6..f5c7c3085a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md +++ b/windows/security/threat-protection/microsoft-defender-atp/defender-endpoint-false-positives-negatives.md @@ -11,7 +11,7 @@ ms.sitesec: library ms.pagetype: security ms.author: deniseb author: denisebmsft -ms.date: 02/11/2021 +ms.date: 03/01/2021 ms.localizationpriority: medium manager: dansimp audience: ITPro @@ -37,7 +37,7 @@ In endpoint protection solutions, a false positive is an entity, such as a file ![Definition of false positive and negatives in Windows Defender for Endpoints](images/false-positives-overview.png) -Fortunately, steps can be taken to address and reduce these kinds of issues. If you're seeing false positives/negatives in your [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use), your security operations can take steps to address them by using the following process: +Microsoft Defender for Endpoint enables your security operations team to fine-tune your security settings and help address and reduce false positives. If you're seeing false positives/negatives in your [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/use), use the following process: 1. [Review and classify alerts](#part-1-review-and-classify-alerts) 2. [Review remediation actions that were taken](#part-2-review-remediation-actions) From 610ed7c979334bd26486a399660b08fd36b36f13 Mon Sep 17 00:00:00 2001 From: Manika Dhiman Date: Mon, 1 Mar 2021 11:10:21 -0800 Subject: [PATCH 118/206] Updated TOC entries with the correct file names --- windows/client-management/mdm/TOC.md | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/windows/client-management/mdm/TOC.md b/windows/client-management/mdm/TOC.md index 3675333e76..b0304c8c7e 100644 --- a/windows/client-management/mdm/TOC.md +++ b/windows/client-management/mdm/TOC.md @@ -159,16 +159,16 @@ ### [Personalization CSP](personalization-csp.md) #### [Personalization DDF file](personalization-ddf.md) ### [Policy CSP](policy-configuration-service-provider.md) -#### [Policy DDF file](policy-ddf-file.md) -#### [Policies in Policy CSP supported by Group Policy](policy-csps-supported-by-group-policy.md) -#### [ADMX-backed policies in Policy CSP](policy-csps-admx-backed.md) -#### [Policies in Policy CSP supported by HoloLens 2](policy-csps-supported-by-hololens2.md) -#### [Policies in Policy CSP supported by HoloLens (1st gen) Commercial Suite](policy-csps-supported-by-hololens-1st-gen-commercial-suite.md) -#### [Policies in Policy CSP supported by HoloLens (1st gen) Development Edition](policy-csps-supported-by-hololens-1st-gen-development-edition.md) -#### [Policies in Policy CSP supported by Windows 10 IoT Enterprise](policy-csps-supported-by-iot-enterprise.md) -#### [Policies in Policy CSP supported by Windows 10 IoT Core](policy-csps-supported-by-iot-core.md) -#### [Policies in Policy CSP supported by Microsoft Surface Hub](policy-csps-supported-by-surface-hub.md) -#### [Policy CSPs that can be set using Exchange Active Sync (EAS)](policy-csps-that-can-be-set-using-eas.md) +#### [Policy CSP DDF file](policy-ddf-file.md) +#### [Policies in Policy CSP supported by Group Policy](policies-in-policy-csp-supported-by-group-policy.md) +#### [ADMX-backed policies in Policy CSP](policies-in-policy-csp-admx-backed.md) +#### [Policies in Policy CSP supported by HoloLens 2](policies-in-policy-csp-supported-by-hololens2.md) +#### [Policies in Policy CSP supported by HoloLens (1st gen) Commercial Suite](policies-in-policy-csp-supported-by-hololens-1st-gen-commercial-suite.md) +#### [Policies in Policy CSP supported by HoloLens (1st gen) Development Edition](policies-in-policy-csp-supported-by-hololens-1st-gen-development-edition.md) +#### [Policies in Policy CSP supported by Windows 10 IoT Enterprise](policies-in-policy-csp-supported-by-iot-enterprise.md) +#### [Policies in Policy CSP supported by Windows 10 IoT Core](policies-in-policy-csp-supported-by-iot-core.md) +#### [Policies in Policy CSP supported by Microsoft Surface Hub](policies-in-policy-csp-supported-by-surface-hub.md) +#### [Policy CSPs that can be set using Exchange Active Sync (EAS)](policies-in-policy-csp-that-can-be-set-using-eas.md) #### [AboveLock](policy-csp-abovelock.md) #### [Accounts](policy-csp-accounts.md) #### [ActiveXControls](policy-csp-activexcontrols.md) From 2d14f9caf86f8bb558a7e046fe83f9ec4fdc6d41 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 1 Mar 2021 12:03:12 -0800 Subject: [PATCH 119/206] Update faq-md-app-guard.md --- .../faq-md-app-guard.md | 67 +++++++++---------- 1 file changed, 31 insertions(+), 36 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index 8ce4c7a158..3e780a9cbc 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -1,6 +1,6 @@ --- -title: FAQ - Microsoft Defender Application Guard (Windows 10) -description: Learn about the commonly asked questions and answers for Microsoft Defender Application Guard. +title: Microsoft Defender Application Guard FAQ (Windows 10) +description: See frequently asked questions and answers for Microsoft Defender Application Guard. ms.prod: m365-security ms.mktglfcycl: manage ms.sitesec: library @@ -8,7 +8,7 @@ ms.pagetype: security ms.localizationpriority: medium author: denisebmsft ms.author: deniseb -ms.date: 02/25/2021 +ms.date: 03/01/2021 ms.reviewer: manager: dansimp ms.custom: asr @@ -19,11 +19,9 @@ ms.technology: mde **Applies to:** [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2069559) -Answering frequently asked questions about Microsoft Defender Application Guard (Application Guard) features, integration with the Windows operating system, and general configuration. +This article lists frequently asked questions and answers about Microsoft Defender Application Guard (Application Guard) features, integration with the Windows operating system, and general configuration. -## Frequently Asked Questions - -### Can I enable Application Guard on machines equipped with 4-GB RAM? +## Can I enable Application Guard on machines equipped with 4-GB RAM? We recommend 8-GB RAM for optimal performance but you can use the following registry DWORD values to enable Application Guard on machines that aren't meeting the recommended hardware configuration. `HKLM\software\Microsoft\Hvsi\SpecRequiredProcessorCount` (Default is four cores.) @@ -32,29 +30,29 @@ We recommend 8-GB RAM for optimal performance but you can use the following regi `HKLM\software\Microsoft\Hvsi\SpecRequiredFreeDiskSpaceInGB` (Default is 5 GB.) -### Can employees download documents from the Application Guard Edge session onto host devices? +## Can employees download documents from the Application Guard Edge session onto host devices? In Windows 10 Enterprise edition 1803, users are able to download documents from the isolated Application Guard container to the host PC. This capability is managed by policy. In Windows 10 Enterprise edition 1709 or Windows 10 Professional edition 1803, it is not possible to download files from the isolated Application Guard container to the host device. However, employees can use the **Print as PDF** or **Print as XPS** options and save those files to the host device. -### Can employees copy and paste between the host device and the Application Guard Edge session? +## Can employees copy and paste between the host device and the Application Guard Edge session? Depending on your organization's settings, employees can copy and paste images (.bmp) and text to and from the isolated container. -### Why don't employees see their Favorites in the Application Guard Edge session? +## Why don't employees see their Favorites in the Application Guard Edge session? To help keep the Application Guard Edge session secure and isolated from the host device, we don't copy the Favorites stored in the Application Guard Edge session back to the host device. -### Why aren’t employees able to see their extensions in the Application Guard Edge session? +## Why aren’t employees able to see their extensions in the Application Guard Edge session? Currently, the Application Guard Edge session doesn't support extensions. However, we're closely monitoring your feedback about this. -### How do I configure Microsoft Defender Application Guard to work with my network proxy (IP-Literal Addresses)? +## How do I configure Microsoft Defender Application Guard to work with my network proxy (IP-Literal Addresses)? Microsoft Defender Application Guard requires proxies to have a symbolic name, not just an IP address. IP-Literal proxy settings such as `192.168.1.4:81` can be annotated as `itproxy:81` or using a record such as `P19216810010` for a proxy with an IP address of `192.168.100.10`. This applies to Windows 10 Enterprise edition 1709 or higher. These would be for the proxy policies under Network Isolation in Group Policy or Intune. -### Which Input Method Editors (IME) in 19H1 are not supported? +## Which Input Method Editors (IME) in 19H1 are not supported? The following Input Method Editors (IME) introduced in Windows 10, version 1903 are currently not supported in Microsoft Defender Application Guard. - Vietnam Telex keyboard @@ -70,31 +68,31 @@ The following Input Method Editors (IME) introduced in Windows 10, version 1903 - Odia phonetic keyboard - Punjabi phonetic keyboard -### I enabled the hardware acceleration policy on my Windows 10 Enterprise, version 1803 deployment. Why are my users still only getting CPU rendering? +## I enabled the hardware acceleration policy on my Windows 10 Enterprise, version 1803 deployment. Why are my users still only getting CPU rendering? This feature is currently experimental only and is not functional without an additional registry key provided by Microsoft. If you would like to evaluate this feature on a deployment of Windows 10 Enterprise, version 1803, contact Microsoft and we’ll work with you to enable the feature. -### What is the WDAGUtilityAccount local account? +## What is the WDAGUtilityAccount local account? This account is part of Application Guard beginning with Windows 10, version 1709 (Fall Creators Update). This account remains disabled until Application Guard is enabled on your device. This item is integrated to the OS and is not considered as a threat/virus/malware. -### How do I trust a subdomain in my site list? +## How do I trust a subdomain in my site list? To trust a subdomain, you must precede your domain with two dots. For example: `..contoso.com` ensures that `mail.contoso.com` or `news.contoso.com` are trusted. The first dot represents the strings for the subdomain name (mail or news), the second dot recognizes the start of the domain name (`contoso.com`). This prevents sites such as `fakesitecontoso.com` from being trusted. -### Are there differences between using Application Guard on Windows Pro vs Windows Enterprise? +## Are there differences between using Application Guard on Windows Pro vs Windows Enterprise? When using Windows Pro or Windows Enterprise, you have access to using Application Guard in Standalone Mode. However, when using Enterprise you have access to Application Guard in Enterprise-Managed Mode. This mode has some extra features that the Standalone Mode does not. For more information, see [Prepare to install Microsoft Defender Application Guard](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-application-guard/install-md-app-guard). -### Is there a size limit to the domain lists that I need to configure? +## Is there a size limit to the domain lists that I need to configure? Yes, both the Enterprise Resource domains hosted in the cloud and the Domains categorized as both work and personal have a 16383-B limit. -### Why does my encryption driver break Microsoft Defender Application Guard? +## Why does my encryption driver break Microsoft Defender Application Guard? Microsoft Defender Application Guard accesses files from a VHD mounted on the host that needs to be written during setup. If an encryption driver prevents a VHD from being mounted or from being written to, Application Guard does not work and results in an error message (`0x80070013 ERROR_WRITE_PROTECT`). -### Why do the Network Isolation policies in Group Policy and CSP look different? +## Why do the Network Isolation policies in Group Policy and CSP look different? There is not a one-to-one mapping among all the Network Isolation policies between CSP and GP. Mandatory network isolation policies to deploy Application Guard are different between CSP and GP. @@ -104,30 +102,33 @@ For EnterpriseNetworkDomainNames, there is no mapped CSP policy. Microsoft Defender Application Guard accesses files from a VHD mounted on the host that needs to be written during setup. If an encryption driver prevents a VHD from being mounted or from being written to, Application Guard does not work and results in an error message (`0x80070013 ERROR_WRITE_PROTECT`). -### Why did Application Guard stop working after I turned off hyperthreading? +## Why did Application Guard stop working after I turned off hyperthreading? If hyperthreading is disabled (because of an update applied through a KB article or through BIOS settings), there is a possibility Application Guard no longer meets the minimum requirements. -### Why am I getting the error message "ERROR_VIRTUAL_DISK_LIMITATION"? +## Why am I getting the error message "ERROR_VIRTUAL_DISK_LIMITATION"? Application Guard might not work correctly on NTFS compressed volumes. If this issue persists, try uncompressing the volume. -### Why am I getting the error message "ERR_NAME_NOT_RESOLVED" after not being able to reach PAC file? +## Why am I getting the error message "ERR_NAME_NOT_RESOLVED" after not being able to reach PAC file? This is a known issue. To mitigate this you need to create two firewall rules. For guidance on how to create a firewall rule by using group policy, see: - [Create an inbound icmp rule](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/create-an-inbound-icmp-rule) - [Open Group Policy management console for Microsoft Defender Firewall](https://docs.microsoft.com/windows/security/threat-protection/windows-firewall/open-the-group-policy-management-console-to-windows-firewall-with-advanced-security) -First rule (DHCP Server): +### First rule (DHCP Server) + 1. Program path: `%SystemRoot%\System32\svchost.exe` 2. Local Service: `Sid: S-1-5-80-2009329905-444645132-2728249442-922493431-93864177 (Internet Connection Service (SharedAccess))` 3. Protocol UDP 4. Port 67 -Second rule (DHCP Client) +### Second rule (DHCP Client) + This is the same as the first rule, but scoped to local port 68. -In the Microsoft Defender Firewall user interface go through the following steps: + +In the Microsoft Defender Firewall user interface, take the following steps: 1. Right click on inbound rules, create a new rule. 2. Choose **custom rule**. 3. Program path: `%SystemRoot%\System32\svchost.exe`. @@ -138,29 +139,25 @@ In the Microsoft Defender Firewall user interface go through the following steps 8. The new rule should show up in the user interface. Right click on the **rule** > **properties**. 9. In the **Programs and services** tab, Under the **Services** section click on **settings**. Choose **Apply to this Service** and select **Internet Connection Sharing (ICS) Shared Access**. -### Why can I not launch Application Guard when Exploit Guard is enabled? +## Why can I not launch Application Guard when Exploit Guard is enabled? There is a known issue such that if you change the Exploit Protection settings for CFG and possibly others, hvsimgr cannot launch. To mitigate this issue, go to **Windows Security** > **App and Browser control** > **Exploit Protection Setting**, and then switch CFG to **use default**. - -### How can I have ICS in enabled state yet still use Application Guard? +## How can I have ICS in enabled state yet still use Application Guard? ICS is enabled by default in Windows, and ICS must be enabled in order for Application Guard to function correctly. We do not recommend disabling ICS; however, you can disable ICS in part by using a Group Policy and editing registry keys. 1. In the Group Policy setting, **Prohibit use of Internet Connection Sharing on your DNS domain network**, set it to **Disabled**. - 2. Disable IpNat.sys from ICS load as follows:
`System\CurrentControlSet\Services\SharedAccess\Parameters\DisableIpNat = 1` - 3. Configure ICS (SharedAccess) to enabled as follows:
`HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Start = 3` - 4. (This is optional) Disable IPNAT as follows:
`HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPNat\Start = 4` - 5. Reboot the device. -### Why doesn't the container fully load when device control policies are enabled? +## Why doesn't the container fully load when device control policies are enabled? + Allow-listed items must be configured as "allowed" in the Group Policy Object to ensure Application Guard works properly. This is a prerequisite. If the device installations have already been blocked by device control policies, the OS must be reinstalled to resolve this issue. Policy: Allow installation of devices that match any of these device IDs @@ -180,8 +177,6 @@ Policy: Allow installation of devices that match any of these device IDs Policy: Allow installation of devices using drivers that match these device setup classes - `{71a27cdd-812a-11d0-bec7-08002be2092f}` - - ## See also [Configure Microsoft Defender Application Guard policy settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard) From 77c3fa78b9078157a1f2bcdf9b845f54e8278e18 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Mon, 1 Mar 2021 12:05:13 -0800 Subject: [PATCH 120/206] Update faq-md-app-guard.md --- .../microsoft-defender-application-guard/faq-md-app-guard.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md index 3e780a9cbc..938a3e95a4 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/faq-md-app-guard.md @@ -136,8 +136,9 @@ In the Microsoft Defender Firewall user interface, take the following steps: 5. Any IP addresses. 6. Allow the connection. 7. All profiles. -8. The new rule should show up in the user interface. Right click on the **rule** > **properties**. -9. In the **Programs and services** tab, Under the **Services** section click on **settings**. Choose **Apply to this Service** and select **Internet Connection Sharing (ICS) Shared Access**. +8. The new rule should show up in the user interface. Right-click on the rule, and then select **Properties**. +9. In the **Programs and services** tab, under **Services**, select **settings**. +10. Choose **Apply to this Service**, and then select **Internet Connection Sharing (ICS) Shared Access**. ## Why can I not launch Application Guard when Exploit Guard is enabled? From 27f70bb6bc973c5ff79c880f374bae46dc31cf00 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Mon, 1 Mar 2021 22:17:23 +0200 Subject: [PATCH 121/206] Add files via upload --- .../downloads/mdatp-urls.xlsx | Bin 39387 -> 39404 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx b/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx index c622cbae6ba5145c511c8b065959e568c371f6c3..689175f3e05c5fb56c8b674c798934809caa0957 100644 GIT binary patch delta 17582 zcmZvEWk8f&*Dl@NAkEN7D=FR5A)thGDj{7rUD88$gM=U<-Q8W%B_-W`1|Fa9{my%i zzxM1|d+in1wf36LeLG(X^QRJ~JOB|n^r0`)9~KJg8#n@y2$=gk&x_~D#{MX>ofgfY z!n}qz{Th7*Pjn3w2~VT)6HAtx!428>!JTc>#VWMD7wzNQHG9mFH_oe@GYa#W_z9jb z>!U?kSzwR9W0@=tNp*K{_xSj@b=Akb%3h~gkGt%iDF&K#z6W@?60E^Pi_AoZ)v12% z<-Ro>{xGc{3=bTB%)_ZLK?$@sy+G~Lo*UuQ{ABbielzK1v4GK6tiCVo5*kzRN|HaU zT?>9v#_-5P-+Sq?-H^TikP17)d0nBiB36a!?eab4eG^6|g5}q3w`t_Q^cS}7;yP8) zN2e=FEH1MR;Ey{UDxY*^#=gqwLRHn#-nRjUN&cxa<=2Hko2$%ZtcS)P(Sf$?A-JUR zO}sM{%`_lI6ZKyFy9DJD{n)}Ap84APlHEYz&uWA}y4D1&9CJxvUzKQTYcuObpiu-G z4k^)X*kiNpA-wxUUmk3rw?A?Hj@ny8XQ|(TnxXYnT< z&R=~%G0682*mHovJD5X3x=xpJ8JV@><+?hS^2l&ANM5ls&r7`Fm`pm%=XF|OdFwIa zRC+|;OWRb4W&Q2<;b+UqXi>+HUi$S0DT^pSvQ2c!i5k0n4&kVVY)PZg)GXn-Sf@zOa=GE0=Id-4 z(}#T6>^$Ef8_YCHb$^HnJa9?n;|*_uQcLLO1-bg}8ui@JJyXrFNH>=t45=Kc*O!kcy?&db>lN(RPnZCm{7?Ugfwx(IiICA9?S9K)o>AfB%ZA4*&4CX(m^{8bg>tR zlRxal)C9iVvkVz(nl&`bWIyJliOJ&d{905_-UL!*U&WQU__*&!XmadjaRzy?`y6u2 z&7vC)K!q#%bhddK0T$hR!JCOw*GP%NT4dH=a7<|SD zhOjQ@s9-xpJTPiBMx_+03=B%>z5tdKArw?|IT(|c7~o)a`D9&^rfV}VQxSMbIQ#f< zTj*z@4ZIzJEa?a8TT+(cKRwmd%s;T^IYG2ZbAG4GnBQ1`CZ7|0t=>a$>fzchyls?y|A& z;Qj~S*#rB@!wBGZX;t&+L1+@V)!}%!>f+(*?&zo`Y@PltXkc;Rcir94%;JNE zBg-TBBL)#bymauA&q=@K^Gr(0;!V%Q@9S;wAD+l!BkjjkgIoK;$~UDichcY89t!I% zl{hQ0nS`><_v{}>s*NvoP2B9C%%6U4xjE5lK3J|Cv-CW^ZN6L1yn8Gs|BV+Eo&Iz0 z{-FHUt&xRG|2p}2bENFIX0cV zy!8Eko?`xXZ|QN#0$>5gqvww7*@>0-Bbb-}OxSIXoCcrU z>AwzI-~Z`GygO@RQb4+?)X$NwkFixbX8S%cOqMP-_fEUTTU0ytc$<+-_aQe2F=yb| zPQlU@P7|Np31t)udnf=%hXE>@oYj1z2#6Y477@Ef}qrJI?C2TV!7D zR&{5{5njGr*1cyLxp~DXlx?`6?r{=&f{xBtk-vt3@0Y(;si~efRkRb(?1#jLEuM9n*gynKIbjkoLXfB zdzH6E1D_qgv$;}k`S>EHV#+IC`XowU(>1&8YVh&fx`c#wyj3TymguBHYg4=gK4d97 z)i1k-gyzJIitjDyH24t{b%;izQ@8hQ`WQ3~2S{uLf#HkGWY7^rYW zdvXSs)@zaL5!(r}RGa#66OlSa_cz&0vWV1dD%cRy3*&o(ZNs1&{FV*#ynElOOH_j> z*L+eDQOIqDK8mVqQ+ud9*py8cfyjazB_ua!nX=zg)3kFSczp5(;$WVXOvQKy|J}zM zUZrlp<^QApL(1a+SN*3oy^-zMJXjnHb-7#>4*2jvSt8Tk8Aq`?@#b=x@K7dm80O#& zEJjLIe#?R{g1=u0vU!s5DDkN!5wivO%wnj#ypqS9ds6ex~2>isGZ@jrDKPrCs6lriQQ1 zXT%qF%octOG)ir4z6!sFZ?sexxJL~lZo5Yvkknfc*BV6)cC}L==O!t;Vff_b8s5qr zViZlxf;zt4I9kvh08vF?}0gH~tP8defBk(`}o@I2X{WhZLq+wJ{QP$BlE>wQ##3lA(7l1tI62CH~l zlgw{w2fiXnYMZ4D_wtdjf<@k43gnijI55{@qux;L^i{QTugVhzBPujS zGE=TG7>Xr!UiPAOBU(84n|o4`D4BeA804B%|V`TrK2cKN68Kf_^Py z=$l&M;Q43I`G$$TKL^lz$Xh?Uph0*EQb~Cv z@D(-ep;_Ur^?2vue(YkjP&AzsuL*N-N~VQq@WnvvVP$}Q8zGf~{HR$30aIq5xP*2g z5qAW4?RQf3lrzmTW+mRK291As8E2mot-PuPV0b(Kehfo3_d)MRShk9 zA(Ih}M4H6M9tQyOc0cX^`Pkuwo?5V7MrpFBpQXA6wm>+=8<6Z@WbO6s9%ppk>O*%$ z@#~J3%1rHyBPP-z9^d{#tV^6r+Q50m7{xwFnvDNr0eN0}Nrn9Wpzl+X32#wz#%~Da z))=TqWewZW${Aq=xyH90%6;H=w#h*4>|dPloACQ3`GG(>oPOM8=B#iy?x$G8@ynvc z`?P(e3Rgr#C&{=ul2$81`LOBr`mADZhl_8iD5&bEwA8`;(x5E)VF-S;>`g2A^7k#qu zjzc)NGPsa7soQ?N9YeBjF_BGL=j(k1z?(lieHWkAW`vN;g1SwB2E`Vi>!2!rX**>hQTASlTzXYr0IT!cMD zi4&qYcMO@t1E+sN4l6~&v{CyhFi)RxM?{ZgeWg+_nezE%EoDXy(Sz?BnSWuk21Y{{Lbh<=N67F$sTx0KBym_FH#?Fw zC-O`f(v3FZ-EEXxO@`r)pq4RE81V3AHeCxXmkKV-J~}0OAvFd;xe!p-9S(<808&DiUnW2 z+^k%zry%o_Li+ABY9re3rjHVblOd1WtcKMeFw!ZTGh%Y^ouxx%tC(X3FVhYWdmD7D zDuuuX1aRMwO0dE2Y~MpzX|(hT6#MlVSs{mU3%dW5qbJbO6BB#jKtMN2FUs#G9Kt?G z^cy1{wZR$!Z?c2XC&hIW`#yMqKS(X$d}TdiqTA>p6vpy|l%UI0q>eCy!;eR@43Uah zZi?+HX1+RV-rdh&2L2z#iMJrJI^Gtvdr&NW^Npx5q_(+#5f?_@6!l#P>GeaR?l<}b zeU(c$QJONUof!zTem4#ML*6@-%=R?H8A9C(Y+sSO>Dgr%Ybv;5kig|U+Hol zg`DIAqs(HihI*sSINZO&p1BDr*2jQIHv%T4T8D{a!XfXH2Xmt>1IU}ch+-t3-Hx}Q zx8mvlsnwXq)=&6Rlfr~!+#?TWAB+_khwylA^oy9QdciHcO>$W}AoC+th%8nk-Y6cH9iAw_4+aT6QK_dv^O_b*F&-P3>*!u|yB0=1{O^oKgN-)t2Q3dQz3G$U~j16gfOBK%F0%6l+gYuKf zhcN#3(H|F;vK^XK)6Km^K|#-1@lmY42CBbs9utTybVi@gh3?UW7z!TM3XXTWR0z!n z0*i1e18CxhpmqK7FUj&IO2;6BHTHJ4ae{aI&e_tP$2hk2Zee|?;A~C zCcu*soUSC3{&U)q1G1zcy8}P2Cd8r;f10e^iM*vAa3N$0pPr_XZ~1((Vp_&vh_Ox< zvbKkRX5dZt*C}b7!;jQ1h`k+O&#rxb`?QKXV-_aTVK&3#NVfVN-V!=!2?}SP!u;Js zcELAfg@6*1ZQRvG!IeO2*$DAe{1WwPg%-ex+I2MNCY`i)4c$bL*+-@NbjqwmcTyxG zJwTltQKtpXaJwAYAT?x--JPQ}=SF(X6CpHT$YHe+Mn}`-Lwn->yC^f-xJ(%P;zp+9 zs{@JNgec9@J`K77(F3|sjk>K4>iEj-1w0wPe(^^e%;#9i7$qCq06>5H#f6BU1QYuB zHn+?qCr_@y%6u0b_9&$SH_!h{LpbR6>|42#G|6l@6f?8jBt-qUj)hFTA!dAiEoACk zmBYyn{)C9o-v|=+!B5b_HdjxX)jS+1@M11G9FWZ&LC+|Z^%Eva!>KO)l4p11zIZ31 zU<%xY@vyda{CzK6eqr?!SKLsK4zn-yr$-cf;8=%XOxam@w-MI7#YVJ$u-swmPLx~WlaA~E> zukOyi;#8B5=M%ee0Tt4J=l-kF*0yau`5!O%`%i4gKe~LnSMy`!64ZWgC6I zb-kdB#!xvz;PftZhCy0yRpW;bhZ-A25eZq-MsN}xWf&qw2&X|8OQrpRr>I>Y?*US! zijm3yLO_-u@=@1Y{rKV0#X!;gxPEjc<5V#(PVgY&;ZPhQxEz(d*r0K$8woP3^K@tf zQkQoHnb?#h$p{Q8+_=wO7w%Kn1#O4}Yh=p7E|V*chlW<0s+v8W6ubl{_+70~(p$?N zS8fZDHk8UY2l^kPW`ZKR2iMGjC>cZ$FA0*&AveTHdM6YTXyrwTOz5?6gtu~@Qt{%s zPa%Y22=U~otRja9Z{RxWAe>LbLhLYy*a0=A3r|A1cF^CmnQZSrt??LD5Y%AFL&#HHQnXuFewOxaf&d?ZIj|#am@S&mN%>kvB{pWXVSkaR^p5gIiu! zd2&?&^XN=5ivZeiKgb*_OT+j7Ua(d*$fAe}Ss*3=&-&h>K$6I8c>Wwd9Do`-A|#Au z(9>ww*YSSF3&h#4oRzf7{(~LLblaCwnVjVTnMnj0B1H0G8gneH5cMFCxv%(tDtE9fX-r)g6%`~bYf;MC z?}BFmT$qt9Y)eQ!Npa-xhB*IniW*98&1>-G0b+=Q2*ITvPBo0!B`oMoyg%0@~N@YI+LVS({v@*`6(PukhnOxWkh<%0lSg)PrT`GMb zM)ab{?JK{vjS6h+P5xyKg4Nz_MVd}I30vzBBtu&2(C}jN&ym}^N9A** zHt%{MSEK-2u}#Y3`~8+r8JL8TDP^1b78h&-FXp{&_p=@@*AF)FUTVhaJN2v|e0wMh z8rt@>|ZU5OZt}=1GgniZqSgc*`6VN&D-@=!=~F~op`NM z46!rnLd1du_xOae`Xdu431csIs5Y28oPBsm$t30)r z(H^u85rONgEn&|qpnB1BS@`=*P$g5xz=P?L3vXj{OYLkK`OL_`{q=?8y=v2mV}rXM zc@c2Xtoujbd2h4hICHDu>)naH{c+<$Bbs&KWkW3Ke3?E^@ws)w&2gg_-z=!%eBwm; z9C)mCUF4Zd*JRvDPiTN#zb}{m94XTXWlJd-T8%UsZ<{*>cJJ5b2b^l|PSl$YA@}e0 zju*GzZ`jHnC|(bdu1}7inpV#r)aYYwY5Yc=H}krkA)Fx`h#TlU6lPR-T|Zk2e75v1 zP`_@O$+P}rzgb}10dUQA(iRJUU%aJA2})^u91>bo6aq-}n^Vld*9~JXu}uxl_4oUW z1;u;E9ycEVFM)f(yT`U3Ow5!}+xzdsPJ3lMe#;e?rfzR)udY^IVD3ju@2w8+@BdKD z@1HJf4iuaNlV%HQj;#9cw(LFQz2-i*%$!J0-I%1U_;L)SNHAur<2IrY$SZ2A58uo^k%)>5R{$TV?nu0#I;_>@uPr4FROvDrl_QcT@E?8#_( zjTzLF(q`)-l!kU{@vcDoewO0r$fK2hpKartiksF*>370*#;*lO=+|X8YIiH&kZay| z+U4w)`2-eyCdDlDTJt_Wzdmx~C(+Z$V%xhnX#TeB!rlibTa=+-b6PalnNw!#aE>dz zm2-N04rtshzUvtKaXK}UzgS!~a!CTwp7Q$ilm%LTI_le_uXsVimS)Gmm@&y?FY6y- zd%-Q!fsT{)pv8+BZH+%uh>d{mw7A(tv!ZUsr|YxE-Q`ug%9{rZD=G%FrCO#)jkL8I z{+^-C8zScY=Fo>bm+RFvGsn=f%&X2&yAO6&0R9x>uD$W6t}uMp565#%yWe^4iGJdL z8RoELJ}99sE}EuIs-nFN-6(pg%@AYpL6sq9?`N($DCx==oqH;B0@3+qgO#Zt!%;Fp zSrc|3x2VQp+A+qG_c#TYNJv}uykJkoi}B;qdxhc|->H)5$*l?X#{H26DLR?qxb#r) z0Wd5l^^k%MI(#AfrgxhDRty1!n8BoVwsnJd_g17x>3FDGb1V3$Jcb>!82Q8;#Dw{o z2ABR$XXhL5>R}0}Hz%5xoKv}1gb}tIAyInjXdX3J5eM3k)`0RIF5I|`I_3KphU^>Z zzq92b(nz_{yp;b+6Un^dY$5|>(m*hsa_u4|bdYZ+MWkpr(mmgiVAE`+HY9&#aejvb z8kZr(CT3WZ?XT_BLRKp_HL@vqM<1eG8N>dn7+KW{#Q!P}+cj(T`|lGmBU(|*@J0h}Q7SZJ#Ejv=16M$5gIpNIkHTnP zsedg~C7Q|)N=<$oIIaHg6}`wX&T&NAvJeG!VaAzJKB@>|=(+4g1TSpN)agUmD`MDb zijg@jLHsm%*c{?1Uo=Ca4U{}tds+^k}EZT|qT5t$>Pgqc*H`(mEAz&H;T{*CY#9s2lQ(u(z z-I$h>gRsj%P{O@aVEem7=6kZxfmt%{oE$SvHt9pgicFbR>U3#J&IDuHOoOWydJ141Zx8E|Wm(C#5Gw0E(R_ott#-hpX zl47mNf{P@6f+*}mZdVCg1lqpWPzrEF^O$HX+rkV(z3{U-d*4$F#n(@%dwjS9zWTd# z4WUEC%iIF)F0i9D?~=F=Ig3M%DyUmpzjxWb7SA5WRDr^v(M^e*xF?-@?YA(v#CMbzXdKN= zD`ZCT6ekAtOF8z1iXV=Fq%ses9M*5=!K?ISf$QF ze!F1J(VHW$<;EdZ0cQr6jKp~%g=cKwEMc{+dJ`rGL`riT$=b?9_2|<^Nw0BJ1t0%J zJ7Mo^BwXJ}q`ioh+et+s=zA1RVm;>F9!3A%qPs_E4Yi+_TU;ME@kx?jJ}TKVQI)o{-!7z z9Yc+P4X@1BE#HL9TK~4klG=MVQ6*4kImzGkSO`?ZVSW%Y z=P%*BDCIPnK~%Dy4OO8GY$9^Vcl@c-Z*v$+&eeG}9O=GsTpV_h$gA+tDf!8FEcau> z6F4@6WEt8D!WLVvX;f}( z5$h%f@Ajpy(@_gC0uX8MHP-$&Cs*F)Eg=*BMJ!A4qU7*~Y)fy`SDHj{eG=E2DAf`! zvtPybv0Xk{;=j+(yDpxK&Zvm%o4C?V83{3-hfc}XC^JMv-p(lM8*cW{n5DVIjKBeh zxV){=C?N%P-9J_s03scFsqsefv!=E~7TDeEFLA18Oza2zaCa)@8W++p-Ug}daPXy$ zx?s>t65uiFfRxpq!sA;)IAWZ*k|Z+mol&eiMcw`y{R%Cq-crsgm{c*ZXTw$uR|koA z$bueN&#ujL5KHG2HOf?>oZh?U0Wx@uoqd`|{ODlD=t6->U7FoOfm{1xs=6}Z`&nWb zn|V9dCnM1yE-IzyOh#O81QK`$w&s5JHccNonD?g|=HBSHOz*|(7DTho5=H5+n0j#$ z$VSva8~@5a46?UnJjjaq|*XTzA?%gJ*8j`XhOqn zBs8b?<~|I73TPrM&C+>4Di=wt?0e}exTF(H4KMi@Kvzs1aQg7cNR&gGR3ZlYl2#1h zukd+2Ra)M3I-=u}+O;`~_;{CQ{r*4ExKTRw8WRkBFSE_<>uRnEvUksf7Lz(FC(18< zN%up-7tX&26B$13;044*U#@Xy(Mmmi`ga+OLN3m$!vLlq*p7pWah_~OzP)cugOQg| zm*Oy^8wtl_@i>ARyxop90+E|hAn-{p6Z39w(5VXKtQ(Nr;eeGp(unFolxPlpLXSZL zDumA}Y)b@{7z0J#)OWFILbtIUW2a$Z0=7YhHwo5h3GQ!b7qQ@&@y)KyX}9Koh6bgnhOSjsZm4mSaFB| zqUQ{2v!%=4lNN5na#S@j_{*QlBWcfaiJHCNLf}i4i|kwVrxRrFPoqb5p0xNF=1ylK z_5lJ5LpHBohBizeI#uUn3Nfq>ui$B{XYngvIS{#+|Pb^A9QJcBc~@U zd-q8RRipTKG1hi@neQ-ArRg!gs_r(JiR*#Cft-f+6;9zluzMI}c!HAZShBEqX2(O= zU;QF}bUI@jBan=DR7}R^{*w$nDM*4K$@tYw2!nT_R~6X%q}Cg!k#OU9D|@3UDj#y1 zNB_fMv=Z6Jp5S%_vI z6^(|RX;A5X7LE0W?1D_q-DZ_E!Fw3+3~k`KI9@TWKVka`5^&0u`1!C=o^`q=&vEg_ zfyCvwD2zJbD_jxFGm9_Qn!+IaN_L3TN~~t#WU~h0vei)ayA$AHi&q^o>6nE7RyW~P z%`8>^OZ$tp?l9a1B6I4v#I-~pu4`tWnW6j(YY0w4C+r!8 zz)D!vNMkhdR3|6~Rz48pU8w z3>xPr>uAbrERv2|9u%w{z6F{ZObN@shKab@F?ENkwTYB4!1$Mj$_veS2L9$}V_Hy- z@0(YM&QVY(sXCxM31Zn1XOU5R?wur{$G>txHb6$m{?oZa^|cfkUS>8~#O7DVtD%}Y z9&IU+TwuU9a=|Mg3Rg7w`DBw}W9`tgBPI&Qmt^V;y{oH)0a7FF7BvoHxzQz%6CnPyG0jgyv4s-O z^HIfE^k0@n=-v5*tYNZam@F#70tB3rwpR$y>nl#2H=Hp0Rm14*V^^@B0|RmzcQa-F zp10CXte&T=Uqf^ke>!QiV=#xR2jNTFYN=>C+6oYRo_muA+09CLIrjF#xGE<9Ed~*K z(|>SHhK6}#tGP9w#IHUu)biJ+?K+2sEVKARmh?_tz5yamiv8Yg|8peTo>hot@#yL0FgnW{4cj7~0{L+WMSBqns*+`TcXg#FJCW`$0JIF~*RDfjS`D zltlSupaLxSWVTEsovMU9hk*^u$rWCoB&7l*3`n^3yIqpJrXjk`c-XkU3_505j=If9 z_U_{^ZAw)oB#@F<%y+mySLMn?M-@PtE_1xlrbJ9l#@~L_fGWc;dF;^DMP&0r1(l`q ztl&h$_5-+$RNRo)Mke+Wi3`8C`w&d`W~x>*t<`^cCgTTv`jpEGuOo=V!K0yCOt zt^oMo^d%zJWRwbo#FIe^At4Ok5oWa%fp0M@T~zTHbPTJd27PWR!Aul@+lE*}tF zAzsu{oF95c)>DMaWSMhGLaqcRWyhKq>OD5OkqxjhJ>KD_`*SBxfFz_)8c+XLBZiAL zf1NyQ%O^il7y&Vk#&6K*)ePghH=)6duYXDx67-RXnzj(+<%7aSB_J-mvX3(iha^Ec z^p&rCnq$6oLFW8fG>zc<*L2dsSfAWQOf!@Pm3AU_KM#oHDF5jqsgwI5g%>Tx(M2Mf zuNc}-j#jTk!Pkz5TY|lDTo7U$&a1GUOlUJe841ZSV70;2MWP~s(uHRQm&DJ=^nzzw z%5wurO}<; zp%e`-i4ywU9YCrTUp^yi5G0tnwWPh1$P#k{qRZ4Y(&fgP$cngW-3qvjs*s)ucshOq z4B1$FxVttXA?d0MXLeM9~ar;*ML!{yaVuqAV`AYqC6297ceA0@}!K*E)K z@(`d04aKxuh&jf841W%Ym2vWOv<;u5jrYn*!Yd`5)F2dj8tDn}BzDPIU4N6WMKghC zC4tR|2T^aln_Fm&ljS}gMI+DAMj}d{kiH+Slx` z3E>EiY6*Z{S7#YPDwGwLJ^&vrJV#IO&;7UMqim`rRqNXPNXfEx&cP|^?a$*)DQ$I5 z>pV4t9}OcxLU74DScb*<>bVqWL+x~xCo%=X!x}_$1~LZ1Ys$E=A-YZIVY~(FVKa*4 zUfM=>cu;OAJu{;d*8T^eQ-)c&2^d@-ckG?a-;@n3)(j0i{IR&Nb}KyEbk#_17^>;{ zeHgUA$MHU`UjJuM$3@-s%(~lk`O?&5k!iYq&Aj+&q@}CY*8T0x(K_VrZ@xqyW1z$I z)}G5{@c^S?^EW%Md&%14>^nBWAw3=*KbDq~KQS45iw2dJ0ZxZJm^^-qYb;d7&IaW1 z`svfahXah;%BhQoZQ5_gBNh54cZ{E~AvsZ>oSHFBEK| zJw34u#)^RlTkvB77VSYu8c9{jLVwJwPS5}FBb3nD8K;a7n?Ky@^>Dvz6M0plZn>7~ z?h$zy{v}cOjYi&OZ|++5u<}MwuhA=f_%co6n~QTNcB%C7Tvi!I%lIs_{L!hq!xqyI zR1}lR9Q)AXrJPmM^+^am*;encH@^l>*_tsLOLFV4@Qdmt)A14&G3LGcrLH-8vrISS^`X5%3S61lmfmaW2|B_xxxK~PXP-4t zWe?tt-s2gFHPIsj93C+VCcm!z;+PcklnuXme#EdI4mzQ415s8P@lQUoCL7 zE+vWV+6t7d{f72!rc&Ck-3-t(W01YGOYU6n9UToH&%QA@lxT2yfqc6t)n5BGY#a<- zUhoMjticve@+@A5AT3hrz}sNVpkSm+Eqg+` zT^AVT$v)q-7OnVI@8p(f{H`~;1UPM@vXSHIoP-FM!S?hFc2<62tkb5v!{(Jy=1PEm z3ap=g<>v+(=i^4`{Wx^~BSVY8^)PN!KHb-Z2*CRNuiuKJ(G_hpjz3;^*h!@Xq_U=< z`bod}q&SNG$+lj%WXLvk%#^BN?|1u(tWpZDgT#weD?%$SQnM=U-kth7_FCr{hz9IW z-B@~VH!mW%ez9y+K{Q9YJAUzvFi*L|{Dsy-{E5K+Jw&a$86y#O<+RXP8=u8}gr^@5 zVBGaUW#47B8D~95Ld?)yWlDcGgsRQmy+ovB%f>w$mr(pF(HY_JU^HmmmC@g;4(f%m zOAC9Gg&-9lQSNl4Ss}LS+xAz9aEXtMD^f{3q^by)k%NaALv2+}Nik|hIGeg-^)#Ob zFU_c{PYP#=mhpWww@sTc$ZEO|@G+#a;ctC7A2FW^su`y1&j$wuC4}=#(3e8UKn_2a zr~b|ZVy8O{f|w9qh1}cX`5@iWgQZBb1l|yh)?QwPhT{7}XM_T7Xxt)&To4?uP&yaa zEZ3lLi}APfLE}D2@;T$}UjzfVKi014Dju(Iz1V-0s*ZU`szq1!dYR_xEHH)d`ab;s|br12UN;Q4@v?C3w_nx&RfzOC1N-ZqZi`e~Zj z7ik-Oo=nd|(8p?2Hx7!)Q}?;wj3?ZD@gd&BpEc*iLK6)q8einNSM9qVv+8_*%v=W@ zVT@3I=4}8R_YXaghv3zX&4l{Q2QCxA=xjWzS8%4%^9%99j`F{L!_vZfrwbHj#uw4*Jl`vWjol7z{nsLDMITp`^OE;`yJ3xkJJQdY3a#3d3@c$yjkEwR6b<|3xm*^ zF@iB7Pk>1FPeIpu>}{T$5h<)$IL7#1>^UPMoH<$@PrceNTg1L#QY@ZNo!fYJ^HNcn zZ8$0Hxxej1R9>PA0zX(byb~$h-_lL}RVj(gw{5vc0G+Xu0?AQ6fv#Ce3PTOy!i=Zcknx@q$2@d^qr7Y!RHM|B8X;M|*A1yE z!pH5kLL3v>gb&ZAd#yODQJ$&BrZgemXRntHy>T7>Y5!+M!RpHqo6T<)?TR7541-Q@ zmOUTa7!;=rch;{E%j9ykwO9Rw+qXhdg$Pli*~n9h>J$DiL+T?Z(^N!x{-DOaNKbgz zKds@1H2-Z8aPF|o|%%_}#U&^+U{JS(-chV!Uw4tPPPSKBeE2A3}>-f7HyJ1XtwVbZXm zH4M6E@gXm1wwy9AvrJrG9nGAw@gjJHeJ&@4pw3}1JQP$E@$(x>ub$sf(w_fZ40(}| z!r}q?I30_16^E9ODR=D5AU7wcPEc(PROn4Z*<|kU;Q2Egw{@v%wMuoK+t}6h$K2Au zlD3!o5Z8WEtcKjzxX+4a^-`h!2jgqy_S}MeBxyW>u8T_u=X{HRp#dFZIo@ z)ya^*z52*d6z2sh*_&u*FWQhfsZAcoWn2Njd3jnJShLwys7M>)?4g`aJZ=3OEG#Yx z)E;V1gy8O1`%|EL?GJF@)pM$))6tf0H>bl?j+wu+5oU*>QT#5yd%rAU#4jbAu66?>=DNK1>6^bRDU0Q1=79Ybhr;zLUR)FJ0F%z z_dca%+_=@fT}7^J7?-Qi-*KL%uK2X51+clo+=F8hicVX)PmZI<=`Y$~2f2)t#oIo+ z3VE?rlg;&Pl{|>*KTz(hYKfl+s99l%&4Km)EWOT^qwMmw*c~L+7UN39ez0`ypGL`* zx$D>0AJ_HN*}1UZo#W~`f0HRYtf6oUq$tUAG!r9dZPKi2gq`irONo(Q%edgv0E^d? zRWFx~`==PgrMM#7>AtU@SLCvhfJo$Z(+q!F55Y%;%scz!3g!2y$!H6XY7MTAfx^}z z?8*z<665sRHn*zzGG2z81-ny=WI=JP5g1>HMnl!p`SPGY>+IibY3gbJm zW!1uTeW#g-F-B2tl78{-N2h2uktllCJ3;iB@L4}|S%9j81?$Vxvh$h-6jzJC@MMb#*#|3B#RaQ=!dJ{s&GBV%M zJ0?du&%JdT#4GnMBbb=P#<`(eS&P?Bqx$pd z8^lx*F>hZ-ko3MiWo`@ri$wVpm&&K7mNWEg_%859biPtvO~M9#5%b9|ldvVYEp5ww z#?n~!@9npCUIs+62RK{=aw8v|WrlHWK3V9)S1$;TP9#23O+=?AYV8Y!bc`uh^-HUfHwk+50PEAVdP8&h;o-3!M7Z2m)As<$n zkyGWn&w_DE*ZhE>G*Ejiq7quVt^-@w_c|;?SOdvuCyfY*eS@5Va_|HA9_1I7z2FmT z;&tkJ-rlfqVczDNm3y&UP$q*9d!3YPmR@ob>2lT1c@wAdJtI}^TZR37r;0cq|1Oqs zNafp>-;6=hXnA;asa6cq(skGaY$kpslS+7b{StM7F?O*pwA)3O$}$-G6D~=4EkCAM zhuhOcJRFSzf!XRwg)h)kSxQwtcaBlaD6MMWqrJ-x$wqKGoo3)!+s4GSVUP=_`z`g* zDp%7}tI|0}IiXokcR@HS*(qy#Q&za;q!yp1$A`Yb?i8@U8YnVwMf!Jmp=!oOk-z3$S)NES;{_hl?+a5dBeFxosKgY#44wX} zFjXIE)sxtX^3hm8KjmWC84Wor7d-ByisQ>C*eJAh&H+yGjQ;R}4xexn&tP7Xfccw@ zYh7yg;qq@kByBk`Cv6?W93EMs7*Ay+1)TuZjAd8iPjBTS#`hMw;bhWd_yBWog=Cjp zZ49zD7J7mGPN5uU%rp;v-BbUD=bunW6}I^bE!rftLSj^*O>R*HG!TMtZ`sA{n2mo% zq9eNDriNa~z$C)rGJKvDNL`${9%RA@(%xV{d~<c#AkYzL;~(&HF!yZ)k6>E%vK}u= zOsf)tT_OlpIAqIj{+gY1MFnRW(aRQ~@CQb%W9$pdlj3N#UrW}wc<_h~TdUq~A({zH zUEAE_WV>X8%=E)n?aM1r-@T^OMf&l274yh;1}YV`z47%oys!eLTSb&V4i>XWB(!E}`&cmk+*aQ5nwgS(wZ znPl{MFcM|Fy35F1KnI~2p$L4T=mH6X40+odwcL*`0;hMjYt~fYGa`o>I7cJfKQ$Z} zy%w*0BAV#{^L0%NPP9?HDNB##Q@`|dI;f5;8n?3wO7^V=cw#Bd(b0WmOBi<2_oBQ) z#a{7LkE&6Gb1O-EUrn)e-{>t&Ouz}g#fliw@XYTasyU>d0X$9m&~kH-q-zTbk+)5@ zDQHn2{mRgDm>ITFEn(akL-j7Ocpn#0huHajb;{VDWprlqO%

O~~u|8PaW)nj5d z(_Z`uMV&JJ`BnNz@(0})f+@&ZO7x>=XqO>73MP;~hHSdw z5KlwQQdXokPzrXv1x}|I94h|Rr-?kN25l%y(m8Nr)*AVQsw*GbvT{lY=Ubd)SGR*U z8fqh1^)K_X&+A*Z+Y*dW-TJ?)+Zcv9i{O9vWyDyw?Lx=#P4 z=q>r~1xU*d#)39fYkz1~oCEaJL<#x+)^RQBCz9Q1%H?m1->&h5hq@mcMT5KN@K;f# zP|Eu)jCh#sTbfx%WU*D=zx-fkAnAnFCwY3>qw1Qa<1O6gieyen(AOuGbr&i~<0fjM zJ~G-@D}$2KOHT;!had-{pQ|?YqmPFE;Q9qE_floNt^BN#CW)mw`Q`oVsvMtpc<;Ac z4Rbx(cJ#ht)nA!(^pY|N_z7ecHp1r)!F6-eKze{~+YN~so`7)fW zLRBO=?;Q;K&rz10ha^3_+bbB9FRln7%Fv+ts1V}ZM16x9pdr)9FhY5E3`>KZd}3>} zIY&&jhI8%H%@958jeP={&`bcTa`nP>mAf z7CEQp@0KcDcJ?F#rPO-( zdwFU5AeJJ-_K9vRl51Bqy4Y{sA48c5t;!^7yXj-KX1oFK@may?|)wC zV9^+Suzxf@>Hj>>m-gR6H=t*seu&V2Zms@Xh@byi2rCAk^gq9x|62%F2qMHp`k!9- zzXj~Yp0%VxwEU-h|F@8U%(Kv13>$PQ7zZqZ&Y}hd4wf~ONjpxwZPNutnHVC^JPn4ZYzjarlN5j3Kn*8Lv~(z8(j delta 17522 zcmZ8}1yozj^EU48?(ULe#a)WK7ninJp*X>;FaI||8h<^ zH+yGiXJ?*yW_OdzK@HSG4OCSSJmR=iRcJ6Y1Vkw)3Z4L{ue{EO<6~^|9FX7&nsuqj zjYwT!QzN8gIN{?8o0O(;+-xjB7y&M?$Nvc)|7NOf3%a>UA6;&`J6kCHG^SVFp13qi zg&!3psXb7Av}Lw$lDOU}-nL~pNIVzz{gTdOe_=WcXwWWydB(Dd4CPxvu8&-v6#MDA zSG=~hBSrx@-lasVIsArYdhsYp{-oL%A!nhlFlv2{weszUuNWntIm|VugJdnf+e#HR zP{;!epdWoy+3!j9^wXh#J6%@mt%=tw__|f3>2;uHy4DPd5ndUC#^ zOyV}SBv*C0TU^f;e_&C-4l(~H?rB5B@uRqsc-1WlFyK5UxxA;Dhkvm~?GL`LyC=&r zgmn6IgmiXouwEF2o3Z5Q>&0Rh7v1Sdx5Y%Zwc$O~rlIRPwY?kt2 z7Ef~-O`{%6sIFiPx6db?my1J`1~qG5rsCU=VdF7L^=e0EirE~a!8C0LO}(in#y$K2 zEXDOd2JSl};T+u(A>5Mj8Tn`&yh$f~aHDS@ZRJorp>bCG`9N^@(^Z`$dXYuJE4o?f z2Kz@rYjKQM0Y14M(bV_eccwl|&8ulkXpXs>hGYb-AuK74EQQG%@uobE5`w1_7~4I= z)2M;E^o2R(A5Q1Vp-dC4&ox{Nyh!zvRe&d3ht9VGABCq2j3UZaS2$JXhMw>) zy&xkPbEFZ%cz^cIc*X@Ena4#s5P3pcilT+kD03*%eOFG->gOjWn3IVQ9*3L?=G_Z+ zUOo^&Ey%?(WW@1kO#4AV5dW@`63E0A@@?Nq_L6W5Aur^rp;I;4YeP0pPSUW*h$e5c*k`gopt3`}m|0x;>1lpELH>J1=_k*+FSGOEFo; zPH7x^mV%UhD;vC)!apOLSdZk;xT$fC<3~|IE*5-)-ITRn7 zeRddcsj~;1;>@JQ;rqY$SEX%H|E9NzYr6F-bL_ZV<3m2^(sO82i=m?sDx*ICDU$DL zQitm`^*Gpuu~g7aGOzcXwkG7Z9Lk+=-p`E-I_9lO<8~>UJLp#z#+k5hTe9pH3?Zt9 zb>(lpg9kaniGXDp#`X*HalOmeaXVr4GWr0q+}dytC>A+&u^Z!onge=k0Ng5Rgw=W(!cvYc$8Ov zam3ysB4qTic!0jJbne35a&XPYGrGU@cy+tra-8+t=*_)vND@`LeLuZ^yW8?}D+6gJ`tP=o_0!G6>1mV4DtA3nHdpqv?X%d*mdD9GohOhH z8UYZ^{u(cO>38MA<(6f`(`l`{um|XI%h8499_TjPPGZ|oRM&fCQ}_I|zB%G?eW9l3 zH79Hr4NQOMiLbohFl;~C^0+r_cH0UZl`g&PJ-$Ed5W9V@vfI)KNzAO@e>|$X_h@Cw zsPxJ@-5ssm(k^vz__1wYJt(bxKQj6W_5}Fx&CPXld}P4ym5)3Ryd!j7Wgbme_P~$F zm7dR@=eO%2gB--Igg%*GKHRB3WbG-JB8#nrio%g}bN%Rfr-v8M9>>c|_6k3yYno^6 z+l{V;&Fu|mMm@BTmot84KmW1wA zB%E011WHR3lTmbXi#h_~|$r?EcjgCmynBx*8js znkPrTqs*s%5hoAZ)q%535mMc!d}?6L>gIc%Uwxoz+QWgfI$?05V1v8x+3=P_>yp-} zgbU*WUsJrupoL%u32NV@u2!ABb4rZDZH*6JK(%pSUXio&EhvgCf~|kj$Ng-FUCez% zz@_~`m-lU5+rejnYVZ|*<4@_w3VfkbcTHdpwbkRW%}f?L^TZu@`&rQlaF?Z3mlW)+ zL)Q+rp?$Hzos;Ts6%}&}LrntD!3Cdo-MnTiI)IDrF+XnkSVG2{&u&yw46cXpzfX}3 z?TubPx@wCI*Z3%gM;842i0PJrp6fnV}7Q^iN}~9B)H@=0@IBf&zW5{P0`8}S~~@ZpXFu}8WKXabJ~*AS-gjG>FU0@w;x*<~8P_Y~&_tX#d$W zFg_Fig$&EiXPlgV1kD+JCgt@wTl!AG%`I%GTS0@YPI7}1(DmyYsGpN};MH-Cl_0~4 zDCkDH9psOn&Q1|sz4|*kdMH02B&k@iRdQ2RL6U5?#}_q6|6s@0(DC@S2@2h4z&&RL zb{lyhuNA&6Q^sPV>qWOw?pZM{ZuEGl;fSyqG4z+Y*4|9C;_peZXUP?wg4g0la`32;xSt}-#%o1cAVA~ubc<& zMHl$(7CSRC6{RVo=why2(G6NADt1-OX)Hp_dd~L^C;A7B6lYkts;r2i|4c;(Lo)>- zEAe@^M9*TvZ$Lpq(kPee8!Z>rN3+gtxLKh3i;`SDER55?{Z&Q5ltfr5qmknLqAE72 zIMg;Q0%3ums%eh(3J1eIEW9`oMzS^LT)YeU7d}hqH_gR;!VCieidg9aNg`bJv4QkJ z%U~}fdS}-G`Y-vas<4XhVG~H0U^Rwh51pg>TZ6Ytl-K*>HNVbj8(#sH*bG}As&%)e z6!!U)R=#T3GQSNX*SqCeDqXa7{!pJAgfa^5oka*7aeL#g*RNuljrPi%XQAn#Z!(=V!mRhp+(d z#n!F1SzjWl$^DYz`G60*Hd2T?W?qn$dXrr3RVkQ@9aSv@U#$?3J)k(* zD+U9k*EPutBH1f3-Du@lzBK@w>4Ngd-A%0h))kal11+UL0@)myon3pBD&J1@{FWGC z6a|HZ_YGrc#zc3P>T!4Yc$vWYt|R9KMp&(-{N7nFoe3===kKwCMbEX9n`~V8;T#Zx zj4Z%JW`v;%6B%48EKh9Y5~tc`Pqe+M8@IByG4VzSAc?<$y`IXQ&nq_R#NT7NCD?}1 z{MJf)2|Q#su=MS?PH^75?#7CNXs;@5=E~?O?|buDu`SjbWvQfqRPc0L~wbX<~~oipb&-#)V!P ztj_pOm=irPZJz~go7sB#9UeyRPP;@-1UeLz0_S`ph8vn6^xP0f zPEd?@fJdRq8nSs?QDUF}ICa&4NC2=JB${idZ){T%HQx4Nop5bX6(y$fc4!kGwFUL;#1-@78~+t2P;=D zB#cl$U{gC%62qHHRBBqF=e@y!i=>Ve<(FgP=E&#DAMfWXBH&kGl&mqXz0R3wZ^iIpx2AeN1ZY7daKw)|C*+aT@= zjEyqEM!fC0mY}1H(d+~IqUzubk;(?qC=e1=<4o*0qv#^t z)=r$_IdXG9!9|Z5=9>+u4bT^=ljCm1h~*hRHZM4BP-DD{1EHYuBicCo2d4*m=^>hu zaIbgFGdklV5;5`i;i2L_c8;kFj*0xyztKzr_W zp7z$)>;s|${Ov%Odz@7Uiy9;w7=JmZxExA)%1EWL7*LEdv)E!8*Ls>};1QLWgp#=M zDM4U5jdd;OtMC2Z$FW#g52(rJVFSz=HzwuB^nrk_7zgs6BdV?=FEcSiurbcG@QRSQ zGPr(9ap~sP19Gx?lbjngVBvm!z)q*ouNaUD_Z?GO5!JB6lzZZjH?Yyd?PH^Jr{m#-4PqfbXUsz)3=D$NE&}y8is8+bV;2GG- zEVstVMMIWv(;Cx>jE(-9o2zIb%np6Tr6AW%xxA>tZ2o5~!R4U1fWj9%TlD`Z*7ND` z2pJqK_~3OL)c$Mu!^P=KN}F(--Sj|Js=Bg_sZY4OXYKsKi9*sA2~ak9!2~s%92^&y zIRzL*rf~k$6*ILMJt#o)pX#PLEhk1i;P@=@4^FIrhyg)j>$21;N^u1d;0W6|4<#2+ zZ0b#l6V}9YD#ryKQCUbNiVM%DRDlU9ppe6w#0F+a?kq8u(jFWI!gIX*vSS6z)RdD1 z|1m>1<#fQE&erY_7l}(d(Pu?SqF2wdSeU zzeb@e9p-OQjxSX$RYP>--UlZd=7doK(HTc5`5d*Ivaeu^KzRjQGKfOVdo*n9C&3Kb z3-Fx%tF~!KT<8W~BL*V?#!W0GJrHa%{AaBEykmOIRKoLg$sM*R_HG}nv#?5^sw^;a z>Y7YM5N|2E9OGCvHzqE{tbpSlxQ16Z9o_)|_!!ElIUn~(&`;cFzS3`$55D!#x0 zT=X6~1o#Qfa3Jrsu$xAnRECVWhb<=JZB zr0k7zjs$Jcfa^*rIUE6BI|sd(k%yAFq0Pw}vvp3(z;KmzpqHspl{R=nn7?0XsE2k? zv@aM17znrv?M8t?+#?K~LNNw2P!P&X)BZ2HM7XTQY{r*$hM!X$iuuO@QQ188J`@B8AZG;mP-=*Kd3?d2Q?N#FF^S55xxZ(Ocgt3gjWTDdB0qhD;P!B zi>b!s;tGHfufhUgh>^YupIzgCbCptIWuy#9r;<8@|`4j&cCIa1{S|2z}00FU|YBAZF;1i*D?pm*eQ;h@W8}Y=ym|oT@ zjs{52-{kCl#kWOMrA9&SLQ4iX8;T;cONV*Uj_fR(_b1JtZi7Z;5LNg!E5K}4@a`om zrcR}ZGP2u|rK~N7fb60>Y*=O2AchvBL3$!%mBE~ss7Ph2vpyMTq`&hD#IRo*xck_5 z87s+2cGD<0(c?CBEN;3?hy#>lrADa%MF6{hl~1Ka0CTy*a%+*96pA-g7{R5V>O?j! z;$0vq%>Z;B=7!&RXs5)ebTK#Tk)U=9u2g5hHVLu-3mJJ#knbxsbW+Rx;>2`9+gO#l zyXnl9SjnL$ol2oYZx_Up>dgDaxpzP8kM`BwK@sh*QWs4F4C|4UrHKi_-xcJD8{le3 zPSE?XK>ZG#*ZrhQ8|QoAX_VyYCDN6NFWuj`mWexfPh}22(EZh!jDQS5@Z!Q(U~;1? zNi-M1?Zo97tiB)qpcUdT3YCegeNUAS`zmato*6WbKi73Lb`G`o4g~)$CFs{l3viB< zzjqz_O7A}dc)h3Efc~q`( zdy>@Ir$%L;uyIp_k94bx1_WB(@J1}Dg{-$zptjo?kEx#4AS8QL_Qpda>NZ@04$#m)Yn-ec^0!ze9pq+Nl^v#Zd#(nnt%sImks|qH_tM>Wm@} zjp$UKv=2@fP^sZ%N*fv@-KK_qZXm!!MEq~yRas4q+t{+S*fPwzzg~P_eWOV95HMa+ zSMSaywAcf=yieyG46KOpB>qCh}tTI&w{1M_n%wMwSQtb>-WL|O|+1;jOz$!$D zzcQTcAH|&LHz;Nk015nLlAQ&Jz%MJ*0I8r&08|gn zT<26AYK&|MgE=&z=#(oI!eM8TGZGPGt_d>)VQ(JFnt!$`&*v9m1jj@gHNGZi#ar2Y zahgbBEV(HjMIipXANn2+03lX#PZlMWLm@=o?&Ov9AWh?FOfBW8Wb-91q)9O@g`maX zp6F)yOZ!^S0z{?9Wdr5G%WPS|OZf|xgNjI@?WBlBQ$^rdagvuVr^c*7ylGU*VTbAw zNK^UZ6QhcPiG@1$iYEwKIe=xNWPqdq1toA?RP;^>I*0V8M@ftt;u|lfweO8|0IhCT z?B-t#03nZM{F6l=T{a*3Oqw)F%zNK&49&~BC>s-Ex&;X!>b2b!S7s)HE zfq(&$B;;0z7o#H0<=yk$kt$CTd&ju)`E5`;0>=KLcmTp2oNhlxi+8v~Jlr_&9xT5> z&aLqDw|wz7x%gXdG8sf7NK?{J))?*&-)Z&{VQ`4#hJVJ@zJ%ywQK#J3%vyxQ zpSNGU#i&IA4}Cyb!rmJBn@Hq;U88E5h!X^MjY7D%ba@_1gAQ0&4(vw?32*}^g{S{ zf~`Fiop4?pz6g}G4FPtrvRcE41_uU4n2HK=gLllt7OzF@|JR&{f{k^9Y5;bGqy%^* zPRY!ajaM$Cf{>5%`N_HqALc9yHabENaK&VNE1J14Ld_!E&>nxuDaJMJ%^3~yyF^+rHFgkX-3WYB+aSEv29Xe4ov+pLy${@DK&%7g+w5bi-aks6Nav`&>#M)zZW#?P>-jdD zsGt^iG&c`EXm>#HyEcH@;Vf-l-`G2Wn24tEqn3R-Nm|az`sGvMdOvct=@FBG4sW%e zG<{`qes<__65TPnJOXER-+i`ea$D=IYmEM+a|{o>y*YlqS_S_8a_#-xXhi;tDJ1Ff za^=*)%^T?W-B_q1E9w6HaR08rV`Klzb*rGp^P+dlY{${eaLBsYs51Vo17Dk)k)09T z%<3asui5?OzGYqe68Mz4(im;VyunA0?Ay~ZIdA2C-=TYg>2>R(_w(tUU7fd2IZOM; zOr8*tsKS7n?P=hBZ$r|d-R)+H$DacY~rfd6f5kG#lRJYRVFlf0J;X(f$ z@Z9$3%>DRa!{x<0T6pfdKFH_k>f(OB(4w5A4Z1yOc(4RsxnBSSqRGj4a98hiGY)5r zE8#mVjz-c>p zHGNmb(?}6=d&=^-e{^8-=yJQhdt$s`e7!%?&@W-ZU2_TzCUET zZS(!qrCEGj#2MQ)ay%(otU*y_M)T{j)5;|L6;DLg->Tn|sXX>Tf=bUFg`3hXT-1$c z?z_FzMNYGaaoDCu3%lK??bgPV_?qv+^3G3hH=Ou@0$(V{Zue}R54oOP>9yt-8;LKf1m7mJ^(H8YCnUMZb7>R`qaW((ve_6?w5Yz0|?B zzi)Zf{-r{>PSrx6pNx#R^f;>?&(CQu@>|#UZ$dt$iWTtFUv+G*H7~dOS3|yLO(VAZ zuVFI-=|1&FYHCy#oe#{1>uYU%>a{8@HqzbZv}N8p;Iv~tDx)gxE8|Y7r@ao}sAkn= zh||?qV~8uQ&)1+yakD@LOh->5yLxQ0G5w5k2};tj0*MSZ^OPuIcJTYHf)X@<&19Pr zkmr52dTn@RcEobt!XrJCPd`7I`)?TRmhkNYkIKvsLWx=Ud8S?)Q z3#azx;R;hNP109Kjv#az#t(pn8#)u*NaUpanN#Vwj0Pb;mXD%ZWk8$}xet#()`i#u z_%>#q2C7H?hiDlc`0kWwpP8fBeHnm?E#vc%Et|nn8I3Hs6IHcJkK#~cj}D@GDV>>p zkye^yv94Tl>NHHr8?21fiO|+b2kp=9Mc?Bn>ZI3-2mhW#@sr?^hjLBQjCpoyd0U3+ zCoB_lS`%q4Z1X8uXK8urHDRFeb_EtSGa{EQO;qgP^9aI`cG;q&-v)a80FOfe9w&Ah zh7deX>_lifg@bljY{JXOepx&uT?UJ;S#hL1+q%;)(sgoyu?c~Mx{5KX)Z>JVk)ee1 z=`HdRWi$iDv3%11Ok0g$y0oc5LZDfaK@7VO2%{PUn%v0-uR=`20NQtN<0ju)`+&7CB!ko;gZkp0G@4@(yKi*@3)wj$7$hyR%B6kRt;PQz&7bgnay!Ntu&F7T`drX z8JJXDxYF2}xsF9dml(E@wG|EdGX<5pQTjQsVFTcZGEb++Rna>S#Q6!>Nc5Y@Bz<*( z)WE>Vo{=p)>5R^@pygjW5t;lf4^L6O5l?7DM%2dm1X ztkr=hkf{h9QRD6kiKoHFlZYjZN$^?5MnrCq)LyVhbv~P${X&K zKNecps}@pE5G`0qHTncDXdLCFO=Q8q5Ro4hJ)-Raee^RM$V&jcqhdQnv0t>BC`?a= zhkF1k+vRBwIqp4Pe^Zc@H5Cf~*!$pBNr_J(T&_nP-0_ILLS+)%ASwSshg8ceHMQRC zxSlE_lMZhZC)3XLFat1*(V#R(9wGT3MB!sTXghPNeGMOO4p*$qlsjy_=6oGYI z=w+O8#Ggtp7>6}w*L{~6(<_Qi7?$44 zfYEIdF%x4T{4;@!yN8Zz*XQ(jbzLH#BN*@kF{EsuQErkTrH3CKRA?SPtO}p!I8mIZ z)3$sxp^BhXQ%E#==v5k@qIG=l0@sNu#Z_F}2I3qt05gL`a^@IirdXgt@(0NzQ@9f+isJykpLKY@{QXH6s3Inl;*jMvk^BJa3 z!@o~7k7A#en~>I=ZmhN+hjLw!smTle0Z+-$O#VYCmQq1~yn{Hl0RrEM4LuN)+gRZ2 zubh(2ImUpofBBGh9)nqgeBna|zyyZQFmN4#L(y1+-ar(0e+QmA1mkFKn1Rw090A#3 zBZSuo3~iDj74)OLv_|vd7yM0xV9BN-21@N$Nlmb%_BhedhN;*tCo5hyVl+icF3X~7 z5hl*4)lgtP*o+>d>LgY1t6XcRriNR%+`S87Z>}(_qSXUfvcs^*#mkCN0#k9|6%-gh zs#j}(99n5{@CR_*{&ROE!g121@JxV8g%R=y3#V9;dx(vQKNfIZit- zz>;270MbetBD)JN3h3{g--L%!h-0@d^N;LeuZ;X5aP3eyVf-7@Hb40&BmL+Eu_%$) zH^4lgVT-D0{;vE5c?a*oUcxF-Qz^&~7n6e2pog_r((B`~M>rDnD@2tw=(3}*g~n39 z(x=~p$fse&=05~S0+AkI^g}KI7N`kkYXgGUQFPf;}-{pig z9t))8(Un>0mPGuUY`|R8w!yR>XaJjvV9lycIksv5l==&;C<5TXD({%<&{+Qma#nqa zw_v&$(-W4+?!Jwf!JthC!&5YXPB51-%TXqSZCFh`t}iU+`wSiFrP)xd|l8&&eq;;k5p75j-beY(?dAeCt-m<+tULgU+B zvmT6|V7^^iPyXhf_BF+YYpNsy4x~z?jNUL>>NTGjCQ=?ezejayy>xQfF_>%L^Y=mD)~3XM5?crbec zMiBVzLYwZ^h^p#iDTc`@d0+M;uWUSBI;9N9nt9`|bnG#jNR|UrlA<|HVLqqBUSM&L zF!n8>5IDm)O@Q#oUJtPh=PCYw6QWUEVpv=)O7Dj=#N00tv>j%IRL^?4-ujIYv`&JWXr#LH$O?zJeP(Fr6-(9ln+bQH;@|hq7XH( zT{_V-55k5kb}RP_x;-#ZR#7bVWoZK|%MKjum6T&62*s81b#TssK$OAXQ6xq%>~7>m z!bss?>|TJUdIM`C|BXNchoX%J7n`=^Jq5Tv{ZN&n6B+jWx+P%Gw5XCe7@hVbPf@X~ z_K4z)U6(6FC#LXUi_A@PX|Pcw=fcF6C((;$gaZ8n^AO!?jX$K?f3~j%M)(fIuaf zTmoeb{@vlt((nzSaeee1M}m+yXEGsWEGwTUa5P>kuERyOWfs$iFMT;>1@6u|sxToP zLH;uE4eF2eET?HwW9uA1w5GfEe$}U)Y+QlA+)UC|Hde&Q>>Ns!*DX-zIB={Qr2gAk z+lFCy^FSVVu#z@lfSi2f4}6km?EjpMdk3%xstCRLt!AUt6!9)yHu@b7`kmdEa?(4e zE9t3bl;LG%7px3|)lGsXc0_g^O{YO?)Gyvr_rThuf`@Th0o3(NVIT-6T~ES>Vc933 z_%j1zir@7^bjR}twCI@)cLsbWj9ZB?9@2jz%N6gTJEW|hcor@TX__&Qj7ucHY6x## z?2Va#j4LI1%K_+$S+-Gv4*Nn%a}$q91RW{m<2oIk8#>B_iB>w5OPoW0*d#qfC=BXUeJ{AMDTOPb{3j)GrbF4F{8rYfl z@~z43mfD?C1FJ&Wy|l110|BX%G?H3Kg6A=RtwC@+<;2<4dEPKk1p#wi!c|c0ZAB$m z!!H=U!LCi4r3TP3=|pQ9KHR za{da!DobUt$XUjv0bG$7uCO8v3MHw*1|?%fc9wv0tKkELi_oJvdIPP&>uf-5E@lzp z()rpa!W#x4j%S!On|dy$RKCi)FzJ;kIn}vFG4iPpnPgLO02Fx^l@#@Btv3;`G0Kh2 zQ(z%dm2A}~$vrVA&t(&LYjhDI9#r0A&W(uk4s9I-Z=Xr&CCgm~(t zEbV|7Gln3^kAKJ{{LqAIsDz31lg^n{z~WMn6MsR%+?W`$J)eu3MjXanCz0R}oU|n( zzY-cRukhObfWIg`2W+>lJRmm|N1SmSAzc6w{P*zGS0-5nJV79NRt$;)QW0Wg&5Luu zp#MiW{8gCIc0AOJmzc~X9B~{0tQ9AcPchWAl@*#CZ1VU33oY0kV3Vz3UQAY`x=4BB z7RX2^Nqut4I7E?8@mh4ni<7L)6JG-8a}1k1V{Tk{)_~!HrIw4?)C9CeL(fu?ULJ;x z6`3od2?YF2kQ8nCBsKBz5}2oV1i1(?CvX^UwOYnb+DitQjH2f69izJ+FvWA={;3Qw zcs22z;+TxTIcTd^FtPp&`vuPrn-ESgQ^AJ*Bs+3UMh`qgoQMZ6w%tV8uA=uZSHHOH z_&l66lRwlyMQX$yv zu!n4#)Oa_Mwc5FcEIEB9NEgz&1lpCtXWAL_{tjRv*K!;jy*#SYt&?xLP7B%ZvOA5L zZs9;5W>?(5oU^@OFW58nK6RSrF8cN1vRBUNaUFaH`FQhFhh7K3sC74P?lB~3Z!L4m*tf8_Yfb%S#&P7aKwFX6qJE&p{`21!8={9>N z!UmndHX)~OW(0tMV^|Z;U<@b=eyc#qoV%)40W~cv4GiZgW(wd#2@#WWi)886Xb+KK zNlLFa7*p)E{Uk@j92R_A`o?|=Szl^dLL2k8$_7qD165`5JZ^tG5yu@j<4?IQ<)AlW za~9RR;%k~!>~3Cn!ooulf|4~2B-+Gz_^r-gw<=FG$uNOm-i6#POJT2yR?FC7-N@rU z&&B7~t^>o32jfI&h`*RyHf=a}e?@t0&YXD_*pLMWs>N)&Srce6=Dgem%ZfV0uPjLI4DuY1w>G~9hs_GA# zmEWa}?jG6J1L_NQ?m52+<*|V2g>HOgkf=)xtl!A5lxn{=#8%CIqN!~euy*5uz^g^| z{esUC*g-Gd*#cqh3Td;p&PN(aJ+>B#Qr7sT+$nd^i>`MjfCx6>8|7A5bYZ6@{va>Z zW$Gj_B#5JQ%b*sfS{}8xZgpS`L7Xc;``VH0m%ofG>JlYhNT@UU=_&^1Dw)F34@pvG zh;RYjstf#KE|QoF-s;@OqG53=Yk}SIs-mAkT|&8wi1Lf`@1^lSaFbZo>dMv@bySY{ zbye2bl~TK&wn82jpfa79+61ph0Fe1Jc<|wX>yL|DN@KCLUDPh$dAc2?(}L2K(vSmW zggz;aVScJ=Gb|f%NFTSPEIQx%u_C9OhV3j#eDL9K{R6wLO&pC4Ag~6^Pkm@c&G*Dn z-196OwP4NBp6;LhqpZ^&(C1P52|wXE>4DXHdNR&Za?c2lcM01pMG18g1FKD+F`Cxu z&gAPqW}wg*>y={PZHeMVp7L(-b>I^{3=K~cmAwt9d3#~vX@rzx%+?7{_=o+SJ(033 z8d{0VI-zagRGb4U9poJlsZn(cHH0zXT4t+U;&atU`{s=)9Z7fX+ACS&{l^s9azQ4Z zJ~ycq+-9RniT?6(&!B+V9atmft!K!W?=8^yaiH}0VIUv`vHpHa02c^gbNlqMOvli^ zln=uj{5TKvnh+#3r45c#LZa3}h@s)(QnVF*dJofk^Yp?t?fYd{xFP@~_O~=yIRuBT zSu4vbD;+QQ5$^q3 zMg!Zn!^zdYImJ|-r5Zqf*L0@2>U1qL)oQ4tvY?+O{_0JR-_*ELXQbV?+$x9#_&0;f z3AfI;Nle?e5Wh-Q59{Ut!psRZIi78YhxamAm4zje)NfmvWx@s&vfb7Qwe8=OeA*m* za8yT-%iysl*Z{^Lo5C+1t;Eb;^`g4XY!9uF2b8OaKDc7x@4-$<22nQW8)y z)%a1657}ovcJk&E4({aUPv9R}p%OML{BjkHJRrZWaoAf5zRuI!>C0Q8%#5=96CjfM z=l#51W?dj5`7Z1hGv|TN8$uVFB35Z{dKM?Y(946#KrG z2h-|ul5ikjW9IFf8_}7u-*=7MCG*nt$I(_GIgDS0qM!pN+B4uKsXw<3OV>gjEeU!e zjo=3evU1cFHx7i=;}lH)07w#aIBXz^8)!Ge7cZb7uNOGo9$u0=9E9VE9EYQ!McXTr z`O{DFtxW{fbRzv|15}%(b1J%tVvK1JNvseoXrN+cZ+OCxj~yd*!?*E}imoWMh0Py^ zHE}kO5;Yn+oJe=&?yChQJj|mk-l<+QAh0th_Na+m{oB%KE10^AemD$7uNuDOiQcss zGtuA1~Et5JOw=aOfU)bJiwg70W9l3i4z)`o!Qx??(&^)g8-w5 z655a3SC->b7`MMiPZyT!KdrIgR)#{o_XB?%?!?S>?I=unu$%N~S1 z%n;4h0#67hl+ekT$pM!hLb1aELQ!BF^3Vuw4`shEA1YyJI^xvaCQ7!EBh0tl;Rbse z!WeCIn1s$jrR|VIMFZ|Sm71B)R%?6OZV6CQ+Gth{PPv@r2w!kgRWd?Gd!{Q-i0Y7< zNz4#F=&6S}f5XKd*oPYz-GnXArQ<=H)vn4`XIGw-7<4kqh1|F;|8!W9sXPqS&s-i< zpY(0Rs#I-^k=T5>X&z%O?t(oHcwgD`A)bBK50(Dg|Jr17kEmR%G$v5*Glo#vnV8M? zn^;KVNo+j!O;yweZj8Cl zRPs}`;Hb$B;fer^9UfbJiFFN}3_gC}4f@R=F2U^OEcfgCbz-#5(ibMLqSFLk-ea&F7bLk9M4;9ufl!0TE94FRi?Jr4?O$`@FxN5(LxA zYNA6}Tm+I$t+$R1V1AgJR>>cU4{GA8*7@@FEFa{71aV(WB72I2<(*tK|2 z!0KD7dlO$$5p8pZqlSkFz(51G#s{h{a-xZjy#Fa*xpI0wpPHtyPDquBpu!*;(Fm*S ztwJMehY$E51{d1S1Yeh>^@~rmsec(!Ux6W0G-ZFFmNo?n=Olg4)*r+9&Fb!FL}KV} zWM8a>l%d!k!Ty$UWH^8he-D!Ye1{fEIJmGF2-2_$8cf(hEY+A0g}~oH;9t%Bq+#uU zHLLh4T=dDBzvmCHXcgfYGe`{OLOnp=n##y{^kL(wB9YRTzsG=P#8NHfDfMh3h=?8N zl*cK62x2H+LTojXVkjQj%alZ}-##?iu%?arlzM(EK|)*Fqx#A6+TsTuDJ3W;L8rci z%{-SuiZ1vJIDc?79DlI&m|siucIWt$@>v9i%pfhX4C+R~CGMXeaufrd(^_=ON;){3 zOk#EGjN z^Qz33t6p`FpJ|pnJ>mr#*=8t~&reTCYi$9>u9ayJ@PeNS!TXk6h=@M?*-Biqx+$4(2Su-id#^QBqsRGKIou5p>} z)q5gqn?U4Yw+2$tT9|~zh{+8A-7MP@O z=wIqOg}7ll4bV#KGgTUb4wFsP)Ds^qv#}LZIJwiPwI}t&6t~t>R%+9;SWRbXL0n%1JCFjRPte5fBvCiFd#{p%BTc}|Gu?I8lNk>cdb2&479 zx}LF*-{sT+JIwNW^-=lrU9F*b%^e>Y8e|fi+l{+v>chjvFV5PkX@sJ z$RWZ>Gz_LU5=}FgJubK-KwY^hm8mj+W@bu-+*OSVLrn$g>aD_R2k+6ZOK~Six<4e_ z11Ytbm2{bQ>dh1CF$R%x#X5%E%av;5+F`V@n&xJpnTCik6pS1mXGLSxCkB_AvEo>e z2kw0(#4`c{qtTaFE|M)D*5qi5)EK@`NKmwBom5C!ud z8svVc4xf!ytwdHe2BkO+4klW0Uo1q+s1gP3QiM%9V-yaWI`5Jk1My_AyT%J9>`E8etuZ_SSj$FVJsex9*=YImD2!H>#B38FJFO@hwcH5 z?1<3UQ%nay*OsKz2h=jx->Ecx4m)+JfW-E5=Dr3Ua9V`>??P~2P)p?ILSUZk$1j$V zaiH=8`h`ZF(VkBnNTf^z$snb7W!Cd4#L$+QSckIuv#E!~vyV_=qGSg6h@z^JV1gap z^FBxc_zNUKw;JJX&_+;izR_7)tRZ%O} z?QUrz?^Ab$*UazFCMKSW?2?=9YosWeh7q_+6(2a#OhthPL=wL-*$Giqjz;Zt*Z~8Q z9UWk`?X+>Hg)Z^{^N=_e5?;2Mo58KY!loBcYP+Iwy7uk7Pr-NpKv> zBX|q=63csTBvRaeDdURlwH7H8>!)b zJ5PFiw%7KlnipZ5uf??YT@^~1)BNm6xKLT;IqWc%e5u7cOW7+vOC)Ig!RZC_nwG-!z`rPVyb)G-!pTPaTiH`%$rP zx#UF z;4fIxFn;l=Jj!qH1t+!(+Vh}FhzU;`!-o4^0+1Q=*?6z7RBv-th15(^XqUO12Y%v zSLlA_01rONuqsEBMP)_nM%Ay*G}jD{ZxQK=7x4?a6)IlouI6i?2Fic_-Na6e5+oCd zHD32pG#u^6&5RGG2J{zprZ=@H6qapoLgml7A1UQ2u`*Zh==J$~at- z|GQKEucil~S0O8~(EnZc{#WRO_^VJkSm^(9_kV>rWnYEPG<2)B>y zpPk)5T7bTTa6z($7|8$Y!3fF%i9u$ARzWII%^yIJpNK(9@c^i)kKjvM&|N$Rs41QZ z>iE;^ofGgKB>UG(u>=5=y~FEe9QZQa5j5^i13E}xhr)IOi8|qdoIx0%vIHV1j4!Wu z0utFFQ$RI|Vo+HguMH<2upsgzCP-G0e3BSczBjm$5mXOu-~z2Ci9rT|sFPWUUy>;r z5&{AbT&FPqXEgY#5M-My4EYgMk}L%20@_X%g|q=Nq=-RcfNWF5pz5Pv#~4q+g_DeV H>G%HtkG)Q1 From b4e21812a6db6b7ac636de800cb20442db957416 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Mon, 1 Mar 2021 22:50:02 +0200 Subject: [PATCH 122/206] Add files via upload --- .../downloads/mdatp-urls.xlsx | Bin 39404 -> 39447 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx b/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx index 689175f3e05c5fb56c8b674c798934809caa0957..d620b1a2708d98abc1c1e4e8866e9a430c7a372b 100644 GIT binary patch delta 20956 zcmZs?Wmp^wuq{e(cY?dSySux)YXlEYURL4re&5Znn43GVLhcgWuR+;hM8{=hdq z)zww2R;{Y;nK`NlPi+9N35J2HV>bC5k{AI)0O;En@?iQJ+r9?&wIM*`gWK`JH!sWW zm)T9Xx_KMa@CdtGalbP_1@hWvCnK0{gD5l_r*NYfag8B zA?ZkKW^7fcZjAK%1I|;ql|iMbD(*@B)#{h0%?r)1sn)c{s9-M73wkykQ6Jlw-xq8@ z2LlEX$Xayedex?7J6}3A0#cvFV3)a?4tahoU$oXY!N&8!h-+yYhH1R7&~ouaD3Ivk zoH)h4u3OD-?BjJ{)Ml=rWU^?34BKrjzg`5h%Wn#+-p$r{`u?t&J19RoAQuJL_}R0Z z4Jn@+V|OSvWTf=~o_EZ+ul#~BK(!?iFa}s7jf)pFp&$O~b@(NBZ)~xBTKfcn8vy?koOzi=ts~>d0w3XS^N5%$bq3WtAjv6FAPWwj*1<)`+_% zcg=w(d8p3KtWdT+7Pt=MOx4%@S}nlpc~`}o>9vemL-hP}>0N{6sUnUKQ(i@{UKf4D#TsmP&URTWY=< zGC!swQMi!~77D0XI+>Qw#y$u0OnzlTL0s8fxUCm(aNLOoR}k!WNV8%^E<5yi=Zpha zm)nn_J`vmKevA^3M*2r!){xeC;5{;sPu!jzWfWRm+B$Lx$^k?E@Ou2*_8#i$PHwB^kO5uD1>ZFlhwXZ#NnBbxd`p1BUIadTB3e8m3 zR$9VDmx>T(J;$w%$P|V7y?>=+=YttL{_nuXHP2!a1rbji>78_7^n|+NxL0~5cL{#d zkk2K*>bmn&JIpD*bg$CiM+53Y6jSyc%Thf8p#*hMZmjJOFo}*Z znDtx;THsJ3gw1l6iSbC3fW7^qOhW%EvBPTD#N$H23w>CA!n?Zpml+wCZ!rYQHT1JaI31s%b4Ijy&?!C=q(vj@>P-SZxm7{QT;)I8y!C zQE@zC^;+X~@4NW;xcdIos-t4l_W7d5_fO|XdoSQ~Y)7Z}(=G6L1~>zE$9FBuIn~36 z%ma%noBLM}FFQLe9!o;sV&@;{kLB+(?H_wCA2eQe*B{5uuWJm2vrs&JTXC-*6EkYaCj|@@se$1UKb$S^XSU#*BziF>6@-ia!eLR2oTo3p% zs(UXB9xDMki8s|b0Qaf(s_{+e^?d1t>uY@UTxNwZ^7bqA_G{=h%PvpURr?~r&A@Z> zv}^i(|1VtQmnSRV`jsGsy9Y(vy2&xq$H!`LcUjK6`I4k)@#-$h-)F`OTyR5Qn-9-k z22R$SZadwKg@6pi`mVP1)S*n>6=UNW=*e|k+$<5m7*UunbWHwO576yuzFZ!7XeVoUP*uJ1ygq&R;t^cA3F$ff zZNZafshKeryJ`FSB>cj?tBoDQ0GAcZ08GXIKJ#S3RpyJKUp=~X-2OEZcI{}~JTPsh z-GS(O+TMv3LiR_HZ^-INv8-Ovck-#`)g|Te0>Q<&c6Ou+Vf(=cIZ3u`AODU2+)1^ZsRnGFp~h!>zH156HGU(ge^#Oh~Z1C4Td|ol+LM7a(rc zrD&us9~c;)i;P1+q3{r=Wt~E>#$G6TJMU}q@;SJNNA$>R5Hw2kk|K5~-3GI$era9x z3XdpEfg})!yA7ZX<~>^+DU_S)0+|vS6BXUK`oGyQJF>6DT#P7mGh zOk^dyXfK6_S=44*?&x^pD+S?1yF~B~C0&CanRpK?^b=JeJKE_ zp#7kEE!DQuOhA?}Dj>T+$5LgCM_b2%_`&rvJ<%ThJ-}Z;CksQytcvCl9#NJu80HZ5 zPCt{;p~P=cUPGdhf@H%#3kIIZLC8c@?!V5}BTPf?yZ-0WBNb3S*h{z^|vX%)D0{i2k=RK1Rll)Rw zi7H~cJ&LAMrx>87dapSljeIM$j9%uEj7GofOt750gdQ1oP%Dm(SpSgF${P}w*woy$ zo#z=QKTALi1w3`*aT#Ey_Sz?0aO#4)2)AvwgMlACajPvs`((@~Xbk&hY1lkSqJ`%N zHyi}pXzrT)o6W{3j-|Pd15B5A*{Sm!2MF%787Yt0$m{`+*h<(Qjwq(G%p^N~oE{T4 z?FWSo4;Og;+UNsh>^kp@COz_P{jZDL-gmQ*H>K!+60Ds*%;7k{M)iiD*di@BXVbw- z0;Jb8kJDF;jQ8G|_~a+YIm!!M;&uG6i{5)s4Y{jalbQ+Oh;CzK;BNU|Q&hNd0Uk+a z!(ni(s^>AQBz0YD`!Us8HY(CNrFuKRt2Ix6wVGGl6PtrERh+O&C)%nXT2oM9K z<(Pgtg4uDh&`~G}0?7@imnSET&*%ypzy}Lx^FWRVDD)~MiZUgMB#jzNf>T)#Z_k4FWA4O) zIli9aaHPf{oMdn1(UNS?pwG_(WtO^XjZu_qmS>XV~v zFaFY*(m7!3%Ns(<=+1L2LZhKR*Z#UPH;&A8H2;%N5`dyTe1TV_6iT-OR7!aai8$1S`;X|xQhlKB_>4nP2WfsLkgWXdO0MuoHA(AgwQaxKpzJQ~T|0;OKzhD{-PplQkNtK$PsnICY6Xuc;S@jFA zp_N3sAR57Mhwslw2Xk6X*l2g2)Pl4Emg-zK1Uff}gHJS2S2YyK)b zcQ3QqrLfYpV{}FTU-xG9!%^H7u+x$Opo?Dga>5G9PS|k%#U8wi;@{Y*ZT`kCnp;pC z67)!-gbnxQ5nnz-P9d(1p4SFGj3)vXa7nnM5C?^fmmSkZoi9-3;vE4^*fN0YjgBX^ zYU!+PffdtQsn+raAnX(_C1|$jw!Wm{WhzOv*C$-`K7K=EXE_Owx)Ir%XU#@?t8Q=% z)RY7v0;;Yk1q#}>p7jLJ6l{9}4-t9brf5b#K3x06xyV~%Vt+}Cx&xNw(wMx#mGBxf z0(LH>&)N|vVHDrQMt-2X?2m8f_nxh+;))+nQpUU6oSr_j8SjmFMsad<);R43z&j|i zQ-5JBXLhTuA6O5n<8Z`qi1mR&l!69H5TEFkNX>?wA_C}t{}Sc<5`QXQyeK7zoD{X$iVn6Z>c`zA8}PUxM* z-c9o(;ly2Hi6PT!um}q+x=dx0NNkn)h3+i8GQ2&Pf z>DupR%DmWX>@kejTYP*6eGVpI%mvvVf?` z2)`Fi&``G1-nwv#*RHZ%-v*X(LiiKAUAp$kqKy=NEB8EcV&L8A!`?uuzw*Nyo(ghHTQo^qm>Q7e$}EXv1z$m!#pDiZ@o$!U@^I3ICpiY{e*J&tRvs6> z9rI0XxX6zeq*~@T;54BY>&cs?Z2wijtNp7NM@+NPUFTY!j+xIr>>72 zuVhV1MLcG*-6sb5`5yq+O^P+4a2CTnalGplOpY#Uf0@t!w9;Q4>3!3{DrOMJu9+}R z(`aAYz}~d=gj%)Lh*nv{`0u{=Hc!<5mQ$fU7?s=6!l!BDL7@N#MSv-mgEgn}SCgrm z=!}}_Ube*(!k70`7HlsPmgth7L4*MQbFdcQi<=HhNHGXeg|_8C7xq*9R?3DA>10V; zKa6ax%O{4C@clfDJL%uSO?D=;;j93e3*q4&Z$xb40xRHB8b~$0)zvIr0P8*@B;^C> zPMNZzR1b;%opvDS@nt^6i8~8Bs44$Eo2(y|H0ZQZcMV^mg=iLj~Kk6%x0Ng=fbPx5yR3y4jb3XhSoxlnm#y>E(AVLz0_p zS92`YMJ0{)EG3%z?xLZA|37D_ellBaXU=`7s`F>&IN~~JB zy^zfX(`>BviWRi*Jw2Hb2_*EWzOfyEB$B<^Rv-D1CBcW1TQ(F3*uzlTZId3ouH$zX z4V~GSwo=C*NJ1-~k&z~d7rkwX#UmCO7N@@BQyu^s*WDA!T9L$){N+i2%uQ1e!I`1y z6i-+b)lv(`**Dp0cBCF{jVhKT^Rl0DZ9z=>{!QNyD}LMwboKqJ8xlsDJqHLiifl6y zyfH8&7}p@#^MCQT77bnfwslc1xZ4z033-CR~j&NksXN37JpjmWj$_*)TVd7K7reTk@M%_q%2Vum=!a_bxi4 zpuc}h1AwSpH+1r5I?c7o#JA=HWXtbO>`RRu-8eaZE(SmMpb`Ik_v|4aYUd z>}~_dutx5D7hjbE95Noff0`CdZo_7jAqG0!MI@lm-|tEZ!ju4THv>ftHmeAUN3vp5 zQ!s;V!7K51Gx1AUz-E^}dJ9cgm-jJ7gl2&!|Xbw+dQGd?5>OJDV-44-p8RQcEjGy*G6J&^k;O z@H2MvIImPQ+dzhebhhM4oPR}s*#N-*5q%L^gQWC6Ns#-&jRKW|Il7+rk-YY)Am?Cg zEi_3q(2z{H<7&jURav=fbxlBy!Y=6sOEdp43P;1cQPIddQq4fK;K;-e77AV3e> z3K0kv-IO60QP_wZWkiMxcL{qR8id{`)|-RsE)>gx{jQ*kG#`*qO%|mHm3dpa-l;Td z1I~~AOQ(0&H%RFFe%=K!be9EMA}{mjJZE7yp@2RKQfxLCNE2*@~4iZ$Y2euY|mc9a1j*uX=PRMt2=LF(W66AJ`52k13T z$e>^%!GG{A#eVO5CV7Jo#5paIg$362F=!ACMWAm3LD$P8q_AnAJ0u!WeJjkZ`DaJr zH@7VSaZ(u;Su63GTgw|~{~Dv_hyFW?MP#$0zps5nOwT;iML)NaWJLq^3{Zyz?Zsl= z2?!bxgnjyU`eCvd%`rS5E5r#A3&$yXV$AgQax?UTSUYraMIb!ealHG>h>YZ!fL}yj zcm~Zc#u+!$hWB)7=6(nswj_CgSV037BCUs2HtXl~Cx?>7L|uZNCpz6&YXLocr1 zs~($Ha}Qo=q`zLgv_*)|CI)D5MXxufTRw8H48?en$mwQVWLE6Kf{$a-?H$ zWd7ytdH2(>@QZMw0}K{aS-^WDoJ1r_b|B>mz0`(}NAX|*eb>xk_lNfvjAqu1UjO5! z-O;}1Q}T3qj>h@-L+P+QrLs+_T(-i0FuyB|5WieJUQYl1b^W>X_YVV zJ`3&MZA734>|?8A(AJMV2ivCC4L-WYC@(svFu?uYuCUKtJzdYpizjgA z&eQ&*vtZ?`nkn;Ts>#33GG)RR8+4dZ@{!qB z+UsZGWd&i-v-j1p`u(S6cee2rL&KG)o0IA7Sqq^@#?EvfqUYDO&CpOq$riv@%ew7) z{;xy8m!i>Hm= zx{X4W7zQdK_vZ}Hizi2>&#u>-`)9d}#*x=Mi<|j!>_We&HE%z>oD#pZ7@nS1V0;^P z5z3hvI%!tc6#feQ%Hei}(xe8)4{kSq8E1y}Y+jpi@Z~B>-!oK9FTE}hH~o73Ks@Bo zE?DQ;6)UYJ>}bKo_p3C~cB|!}QIJUcxz};?U|vLAlRE}RL)h`>)`7PRCw?qb#YF1$ z3(M+^vOt0Cd1(^I7*D*21CB;ZTn+j6Iyy>YAJZPr&* z)lwUA0OiVC*R+v><)MEL{H8mo=6=R$#Bv^I{Y-ySNmlW7jxxQ85<$}GcM1d6P$eTR z=8&eo8eM`ydmVJf!N7hne}@w`mSt#bfqYqozop)+KHnjqEN9l;7#w15Wzoa!Od0{wmoFYL4(^u=n86D#q=E=WOky+nnD;Pm=y5q6+{}qx zM)kqoT7x>Ar7nSmyaJBRj)IT;GX-|)Ij>tXj;?H+D!F46@Lz02EMFB-csXBFcR#o$ zz>?F$vDamg6iOAaZ%8@uimp|ogARc_#KixbyFaGXtl8#q6euhyEp#gjPEo073F}@^ z8X;V}|9{rkW+%sSF}h?)d2r?dG=oF7E-G^T{t?>ds^zbBv9z7rGOEaHY!o*V3+${6&Y zxjn82}d@7Knc76hw5+{$Zq_*m{#7O(>@;Ts&?+qW}k z%LmYn-t^g9GkmpB>;R<8wS^8p?!( zU+weHp8+p{Q&9$fV~r=n;d~rI%uWO{>Mb&1+Dl6;gN0{bwFm8q(LDNcWiOfPGhmtN zFAx;?yqjfac**RJ2X*U6h z1+fLWimH1eqT6-BhL6cbkKbu7*D*9b--Y}=58bE=k!DMwQg2beNTNg~b}6}h4Ihvf zj%r>XSiyAkh2~hJ4QC7AaLJU4sv{gqEi}B(C!u?rmz9DTGJ_(dgNIZ%01G_&7fULA z1%BAm*O6_7=ecmcVWo5N5RR@bqF9@5vav`gy&LK@3x6I(n{IS&eZ&hIj1;4&c!n-q zf2x3}4m2p;1;R-@JUJNS{qr;{1~>p2?&1!0h}0I4fHka6VKWRF?JxCiIZ`!|S{;XTLPBIw z0&OC?45GoO#cpikhnFy8g{ zBN}s0>dng$qcr0sET-+q#p0?giRzLhJ~I#lAN#h%zdI}KpG#z9PXy7Iv05wPf3+x* z8C0jTLF9n%HL6VWl>gW;oMcGckS9_w$bxfY7FQ^UIF-V4!YZz?U>eZ>L{}(CrG$}| z{qGs=X#!o5{#0t=M}0KOI9%opA%p!|o};MvBSnvW#w4*Q@uN6X|HcW_8eKphLS?{` zG#O!vn4U_0u%StTb}k-3q&X>Ih#P>RFih&U71MlgKSB}q_AuyszFfWOH>8V2_nR8dqfNAn9vZs-iyUQBN2bUy23F6oMV zR>RYl0YuiWXi;PDuq~iJuB0eTH0WKlr=wnsu32UmXQ?DkEVs-|HQPOME5^QNNa*6U z@4f?_AXO*^-YJq$1Ou&Fi%eb#ItMf!lrD455KR}me~F=bP-U%ndq?gS5g(iDY|y3&ibZ;yh zGCvOEU^<$k3L7L#r`o)$wD$-g2FbM2$h*yy2W-43q)(*yOZhKE-m=M^8DT0iac8WG zXk@RHDpNTo2X|m^*(iV1ExIiT!!ZlE4G{26j=$aD$fuNgdjTTezX27YbDjp%u^x5U zAVtHG-KLRJxij00hRUoU*vduVNMMR|{D%t3m^P`%x*?OExRdjSLE;JXd%%%-WrS7! z$a!_n>wG?3K!Z%xy)3Bg18HpNqIj{lv@#l+giXLae<`mIc>8bs&1$!Q!2<=2&#vTP zo(HE*Cb1sejdMScslCPzP(tANB(hO;fFJh9 zuQ%y=4hZK1qg5KwQF=@!O6-A)-gQv3kd5z_1cxwx;{nNGAA9*J1Xc%WNE3E&oNW#q zDS{W(p2Fc0NvQfhD{t0B5RBCKON;#&KBOqeUquQwBOvk|^`YQW-;qv894K9i!(Um@nHZ{3n81X~U=uaZQx&=0_!Wimglj{FRdvq}$#?Y21}VO${0hVy zn{F({mni-N4hDHeS-ik7@G|UE%dE8y5sY_5$6lm=`!|f>%`HurmnabcFveJLRGQ+Ia-?+a)@O2fZ9KCeX>>UWD-M_j&PJg)eU?F5Z$+Gs*y% zMp%6DKj?aU7{knYZB;!LQ1jum3Z{8ZgUO&I|A#(_Z*iTez^Ov2)MJ%E#DV11(uG>+ zgcU;WOmo8Y+c3>r#}EJQcry^AD7w5f!IVc`TscR zceN3wfGHj1Uqe{{W-2f74!ucYB9jY1ZFQ&ZFeQnmodS&|q-_ijFU&0)^+e+H&_Uw5B9vMR#eWtf&^hD15`ZJsKPPeKgTd)z>?uAr zrhMt3BO{q|(^+Hb6tfA1`KO6VI$97h`YcUIv@qY9Nxm%Uf)c<5C4j1zPuDR78|H%e ze()HARNJ3}QWB92(c({}xx*+K0R%X>Dh{j!BgvF|Tks&V?v>$tJ${Qv8nRY>VU86) zNg$q5^52oj<9QBK5+VGP$9;L+nZY7r?Fh5({D?te0n z?qKq{WQr^|TyFZJ%YsZFp%IED>7b*k?MibzXfK&oIABV^6(1`ul``l&^{+NMT-90S z(tY^S-}S+^n6DC`3FuiB>zd7P=vfWRV>l}3+dA;_-`zLlr%_WW0?i$XuE`O2pNu-O zP#QHtE_M9Smi`qo^?4WV4}*_Wp_`c)&YBdbj7agu#A7R=(+-s6P=uOly(9%-`VO;ERHwlHhX)FKb=cVJX_Q~?)g%;P3mmdV zXE^mX*1u#A#cI)#kwGc~4h=4N+yW9ALyQNBV zv*A0l`b^|1j2SOBX%%7cqp~cqz^BFaKEWP;Y%-HYGLuH&j5A}JLP822c-tfY$;Buu zZX`(&DMBXShFy{-gqt%j|HdM>B;jM~8AVa8pje~K9Bjs|f%`uTWRPdA6q9--nq(2G zT&+}GdHp!%hajPnSb}xF4+=4;qXnDqr=+GfgrJV}{fm)(NJ~$&A-z>Lv zC7PJejR{m@f7nW+v;z5BVMJDSuR~GACKXs}&6(83r!R=g@(F7n0^Rjs(*6TC*nZ!3 zT5$^j2*HF6Cy=_Lu9(M956s4q>#$8gmWC^BmV{%{qF*Gz;Xy=;)nccbr))U=4RgdF z6ed<`AQuy3ndsbFjxUAme<<50D;D ze19QuO?kru6v_vSl>dzw)`uXjI#OvM%`AX3KtM>cPAZE^f^{WDlqlHjfBg3S^-D{a zDY3`?;XiDZRWm4|{?Sn}5U}ihc=63(&qZN(9oS)di9YwLkNRQ%#1bZsoU6ixPJhZD z_B15KOIq~5QKV&pfiOh_zQxAVf>X4=gXH~F!R&EsC|Lv+AJPXNdXFVm0{x#_D8zt|2zC5nIf3EQnl&Vk%Zbxn$7KFF~!D?-kL&IlnPVDE_ zWugq>uiK{Cx2K0avGeuEpX+^jE0HsgN3Pdg+xU;PGJDpJY9n6F^##vd9$UW?SPV&^LH>dbAK7rJ(3`AY9fwTr|8a+PN*{F53g`8itiH%-Dj?2klzMSzEKj zolR}frvuh6=ed8Mek#2b#6%@3@=*hSSTKEZ8(vZGv%N8dB+BHb?R*wAsvh0H5JG4r z^3*BX@*j7e@`W@YL4Rd~V{sf8JpX>%&zqhlm=b&`5^T{fr@Hnqn2)v2Tk)Ru;ePWg zw?vFa%dle?eMSK_-Q@49%hI8YNU!fj8oWPMhAREWu-dYwhf-HYqIHsE`(dPEu+|3dA`Hz+HD2ha47+OMm2Ty`D@RElATOlN#NuT& z)^;JiGT2jO`DgZ(DTCw&(#NC~@MG3kA4tKx(yu-XW_Tdcol4ku2|th6rhRbcj6i>7 z%e-dt0VX1)O&9QynPECuGAJE^l(Fi9bz_d~EkwFXP2PZUbr+(jdbEp@#1g=lwKe72 z3;(aI)MiNRtIW?W;CjD9wdNE(2ktvUjC=Zg6xWVf3^)}%$+NP?&%dewtM?BGmXXEa z84E~{HJ*kqjxR~7vU#U|L(z{JQD@+D?>d!+u8<&o0*Nyn$DA4!R58EzP{4=!myptz zyWcNn!Ev2ap{Ab+;N?MZ*;!0Vs<*~;ch<*F3TdZCDcL+^shY09~h;fli_-FLh#VusfDfFEo>E6X84-U+^xdNT&O!XC~Jj zMTMYFbo2|_b8}dvp#-WcOFB|wg8&hYou%lGa!N68-p)4*C{yWFe@K>wslZe$&fni_ zObfd73r6Ab{xo()D9x4d#@MjOtwq07b0JX0@J)Rbm?W~D@TZoa1_-2!a0l1xezQ!L z6^_CGDMb2Qp4ey`L;eSG%i;IOw3g|`bfkuFpKIE(D;1pyCap+953PE79ZNrRO$dFe z`S$-D&Foxl~`^Z9TH_Yr;}OfH*>R zv>u!$M`w6TU(!xrx7~ed+aRtK)1{Lvw|B0>FBZo5Nl4MPgHyfVtV{k!vbo8ZhOtlg z&VcnvT#J?6;VUN61)->M8vI)N@FQ>HMA6R0xWygyP(X&lcXj*!>0n0t?i)Mf|j770}Rq(A0rjP7tSi-5OY>Sv;nk zxHGp0->JA`PG}BGVWl8qiGCi=NGmmgdD6pGS4O2k_Na=HP8syEF&D^zTF4}o#2}U% zst2wKi=xV<19~dr9R#8!x@O<4&DenvC_{kXd09fga)8B@zQYjczf6xUm6|4~ssb*w zBq($lp@j9~N=WJ$!aVmT!3UK-!~02`=stN5B(FvZWr~=XOV(-;Fq<{Ng;rY5(! z7?JRt!#U1NDKMdBa)GZyQ?Z!_WDLBMY-BilGSQ8IFnbYwe}UJ^0oj$G60>8SNO$`Y zkwk}uIh_mxBPYGjUpBChHipO%F92X7m_WA%yKl)Klb9(+a&oBQ>YFT76!!$T24D9O z&qA9)<8l8A9jQ(rxWQ3G?LZZ`I(Rw=c@RNR>F}?QDGXkW!CU-zcK_Dit_?1otc^Xi zQc~>rO9%7v1sst<`)X<`l~f*0Y~*DKOzBu2r0-z{`XI+qS?_{cf!;BD5+%p0u<5v* zL0r)>!*Q?!%+Ne0ydOUF2}B;V5-M=sOZx&*8JQrK+@+nZDAfGf1@o z^JrNQQ?yj>(I@&0Y?s@1D}^`H7)+EqeP@~kW0T>?{}XPPQKP=WIE=mbC=_1?9Vc3V zHY=ww9mE*k8atD%D*ENhjqD2pb5+vk3TU(@_54g3w@N%hqp~K|YdvKHG5kBr!}F3XDx(kAt!K z5=7ab))REfPV@z+H0Nn&^`pN@3{FMdi(c2mde%IA)hz7zYAV!|FIutsRQdAvcSp!H zxk9Z;P+(wjxc{k2Vxbr&aDqz7OII{`Wm;5N_+3DKgQCojT-`pg z`u@}PqkSZ{LQV#RSk*g3*Ln_=PhMI2T8YFe$(-um5}e+3Jw?NM?tuJ_mNNy-Vx6d_ zEpNT9iKebTAOeV44Q7C!Jk zbJh39_~e|?bh*Mu9~9~a(088gymUXequ)8M%?qxE7;2wrVDWY#tu(5eH1UlcT$$51 z)jf3=jlWXiErPIO0`?$|%Cn3UEgrF%N~xWJc!rj^Nr(9R@&%@`*9{YlfghO)2@A5+ zInKLE8_}D}bLHmJN-Zlv_@|}c^*$oFce`joi?$Ve?2f9>b5_j;P)-O#dD>RLaN7t8 znLSAeyZb$k(#)vU;HSi{hSy5A9ceTPpN$ZgEfDL;_}U-b0VGL6`}a4WqB9885YtL> zl!u%Qx(V06sbaZQi9}d@JGw4jXbLUfA1}%0zYL&(%y^no04V!9;-N+I<#j6pLAfBX2$Smzh&ZB`&UazU>k4XP+D4AeYHGmI|D zLjl2zuO9C<*fyyboeL9OCwSk9oE6Q`R$iLrTq6~1S0j}Vbasza*BMyegwZlxLU##N zUjh-~V6LHv*uvVoC8qcQQ8Ee<=E-KtaK1Qd`587|Payp4&OTM9iv*2rSFV6wcE%qw zT#rhbnU#P%J|LN9_)r{1jlwP+^hLYt!;0i*UnaF0bV=G{3__XsGRuQ{y}>^BC<%D2 z0-9po0tl#QIg@L;*?@=2_Y{9>1ng1B#YY?wA2_UUm9J=Yi-~5fn?N6f?7^mEG7hlq zsb`PO6abj%dK$UQ1qwr-SCr-2>LDCI!6aBycqSRtU6=W{H*|LETz&3FM<+-2?)JHgz zq6(J=*O4!LpJxilJbvX%BYjNFR{h*NK|H6-D3@IBTxhdqu^;6`9`e%S>+}nqO((fr z66t8?9~+{T1{zH&VSKp9Ai&0?xXpZt#?mGZm(~#D7U77@lEU-hTiNbs?G(ZMEGegK zzQR^6;!iZiPv}ShfEX6ysn;49ilI1gy_v@^7m0;*H_K?bD^M8J9$kz(sYJhtjv>aR zW$4xTfk7+mNHt=(j@8M#z(*ZlFCev|J^YaG5>iZDzy8^8cH``e1W?3qKy6cF^l}

%L9$(S-tQk z7W~A^4X;1UWnd|@lbR9}P)FC-uX(@4;;s@zEd60EZ=s=vU1X}$k(KNpnT7Ouf&0?yDmgW}smNK@pMbm{h*Oo~5~By39r`Zn$)^G(8gB2|+()mK4l zU}BNH7ubC$4gVvAE0NFg^Z z8b@{6b-WY{?Vd*EW{SG996U+PL1;}t_tDBywka!5Umyc1o}F<1<-Y5;k?V_oXAlh$ z?a*&*^A>{2qk!aSS!}V73U`76OPpZ40W9AXA4saA7>Bs#jr(3OHY*yT6->NH%ec3R zEdga(bxdy<3Vv9ms0ad=pWiec>ivFlZ>bR93QT{v3q9t!=)l2`no{mp@C{&S)zrfj zjun;GfbgH0N97?Rb+ke8;SSp%6=6Dc!Na<4S1TBDVdz@{7xpL6M62gJhqW1ilLVXm zpv28?YIV19BvuB-8K&O@HYDC+9e{~=S^^mP4U8kR$;OJ-QiLEXNL9i%m70Sjj=hk6g3%lLtu-lCRsg(vjb-#&=ck1g%KQ4aiATH z{B$;YEy*5MO>}Ay)%vxbYE3u5!KwOyU9i8!2mAX8y}T6(p(M|Vei_`Jk^ z4XKcx<_N(K+>`dg_y(2dbs1rdg)hM18}pkH%^sXxtNt_;U7cBOxWT!aF0cOFCj^o@ z+fUV><|@h**x7w7NjY4Krhnr#*+Cz!Hg?s^lV0sZX5_33v2|22kn%S4c;05`$;mLn z%}>~vJf(uZ#ir+I!&);>ewmWb%h0el9!HSQD7s?3z#;Of=?@H9V_n%o22-S|e{-Q0 z{_*UmCj#W`G9SY97pT9#t8SBzMuYQoQ%I6U0t1^(R5c_4TF`w_;$B6z)=4<$oQ_J` zmOp1ou35N6Cb~fIi#qy&Bj^=alA@PKBoLl{6JAwGU@rJ5uS6Wd1s_T<9?ib0ApG)z z9{iCBosi~!zw*=|iu;6`t})jnl_aPB^fh!JVh+`+1J(cLiI4oU+X~G zx}GCi_{#GSkR2ZOLAp!>i&N(X=2Ls?)&?Eb6{#pO>dVz2$#0V1DaVH6KK?_`FGRbq_Ppq}(%itJ-tUxEwv3 zxlR*7DQ#3Ze1j{X>a$AqBh<(W|FdDI(XqpMPBgSmWCwHw@N7WYw)^>d+K{9kTRw~~ zB1oZ8lDH*&$}VH$LY-8Q1tq#pjlp%1M)&!EDjy>mpSL=~^W1r&XWnSwj|hb=3zETJ zQgp8Yuue>I+$K_*;i^ma!&;O~Acc-=*K}=?&rQ+%{Pp_7bMF#P2vQ41LpEH+>Z8L`-s}$)I zm^0_F<*X6WMPOh-;oSyCt)t79s6VlwDGYRT0#0x}l$jw*x98c1*9CO-k$v4M-y<3s zFR1zK>nw`jFgF8&NqO>(xW6BD)KV6<;j<0zY;sznCNC=O zs#WQ*{ZR04YGH(r>-15_l<#Hz+$lH$!50c)B`KyXY$-zADM*FAnRR9;EdT8Iern^% zSq7Ykd{E6edEFE#_IcF09#V>FXK+Pni$fKDEnw>@^~-VT1yPTUclzRX`q!>NIkTA& z(wA42andoSFWG*e^g;~}&uC%c@AUuPMvGtFyXqw~GlC8u`F)N))LlKyFJ-un2=U@lqGVqddljmk14+4tR`BvdZhvP@$c+fT`sb>=r?OGwlx%P_Kx zeP2Q}G0Ji&ge1mVqPM*Fd7pdV^VjG3uID`GIe(n*=bUd^_t$COJ2NL#YDHK()fblq z1J~I#5RZqCPbGcq9%}dTs1Pu8fcN@j!#5z!W^v4Ed4CA!YS?Adwix@cFy3Zy1>TNR z6Qk{eI8o>G7cIru81e_2m?eW7=|$9pzNP^kE*W*8!(xbvi#)cZEBSgQB6K5mCFB}? zvmR>I!QSRTI9*jffuA=>dg*=S(}{6PLzpv#xsU@`=#@L*$`g+zz)IcewWp+L?-l=m zr)`{9n*}lazCm{RwHayB4Utun8KQvq)42=Yw^HYf8kO(#e;;_(9jxja6&$W~vtyod z{aYMR=woISX_gvR-(zz_X`?Ncy1U<7&F$#=;k{B_#wT-K6`e-YPFeWaJJ?a4O?oQk zWc;q&!2*+}M*Q?1T4!`Nn ziSL36mvbBSjtp0WrdVYbMPqbMXQENE3KDpKfX6$F3+-LJx>W6g9a}GYD1!Py1A8A>m8<*fvVE!WRUg93b&)!Tgw&w;700iD8_nUN=H)6!xhYA* ztEd*w*NyI~=y*d9q+b254jfUAP<#8iWSITS;Iv+CHDYRd8tuBKip39D)G8zN0422# zxjGtT)lZF@A98Dra_?X|)iZl2B@b1Ck%0j+G9;mmwKp{vq;MIs2#Jb_He>6aE*Q?~ zRnI4vS$i86!Zb~q+ZM09LsPLYpff*UE#mmWcO>w@KMqfXPeNYGEZSIAx`sgtnDfK6 z_-85(M1Q`5Wf~GgkISN>Z99p;AkvVx0M4AiHkpW4q<3l=HxQriK8yBa>(^H%UJ&a~ zW_0@Xy^PM-+mCs+3b!E(py{uI%+w6~D4Q*J(8JDzAcwG{XN#Wx*tRzCd+ZW~mL{9d zecU4asd?g}`OXHEIHO$|{*$p_{e^uoIu|BC0SxAbk_#qfQ8NC;zBzzwX@u5`_GLAL z*+z6BgKn2Q$82cb;J2;8NABLc@Y59?b`sqR9mgY!D7Pwt9SA6JSt!$nl}|QGdl9)l zW)bY#h+w;$SnS$W1j!34|27jK9|-boBO=%Vpr#}3Ce~tGqm2T(1aykV#c2k z@tVQUx+bMC(OOPdfd)hqhgjvvu`;F4d&acm3`A~7MVr(G20e^Xj!ro9LN+1z2{qP! zRjhQLWaL?GaL&c>1lO3K{_OcTt@*Xb=x+?eD0$UhZ?&ZuUh8w|5fIx!y$m@T z!}5J838=y{lX|K;`$#!y;A7yG{kQO&bX&YA^$U1eLB6vTv_A^wFrGUxt_fwewloOc z675R8H3}2+ZeIjsLpcI@=`70=ZI`}qOxb5Uqo0$45aniG{qrfl`26d^h+fBIM{>iHiNU4%YTS_y1SBBS412La9@Xq(J z+Bf<1??nO`Z*z-8-Ar85n6A1SWy2b_7X&pqtM@$KCP{EMduAzUce>qmOj@8TnjaxErg1_*q>AAD=NnItD$k9fyZfC&?RY+eS&>CeG@|2af*bE58-d z4x17u=CS+loO|?f6|*dZd!i3YWf^Q=Rm?x%UjPtQMC*mRRw@(iIo5fqaE3VNc+lJH zVDRK(!~87*-9Y#CqHon6#dDvh{;$$2^{%Lf?F!Upf?c5T?fxKg{d{*^*ptgC4w`-> zan(%k-Pjb7?^>gcXFN)ax8I#3EB@h{`O;AK9DVdPn}*0yf00rc%0I=k=OCs*nd3{( z8X1sE{W{K(U9sgdf>0&Nvru`S?pwxcIx1TD6)+!D^vm)>w|XTMHxs8Hym-idpf)GN zmGxa}v$vAH_*U}sBEN*wH+m0*H9}>rPu%By)utFALHF)yGO{0~H#i}?D^mMFiE>E%=dx}|;)M$3ELT1CPV1uKvKh302#vqaDW~q`XfQhjq}iARBv#XI=$VU_Fvr|A z2VxqA-H1)9YMqS7Z=JX{CUK*SGgSvg3W|Qf;6!aZ0bRd~vCxVZLhq-aZ#`m-<(3i$ z0^~DQeMuVgG~>@bh04j{d25$)^Uw~9$xITD@<<{_`o~iS#Kw`BS5oR`LrW$$2?PqF zCi#I-jAZ(0XszTuQ;4^^FcL{|4%*%U&^0bb19IF9k55ZJJy(u{lI+gBw=VPAX3ncH zNxouj7~*4Tni*r;m5YCTjito{#wuGfbpBD^O6gL+>zAC%-`lZO3k!p*{^cSfH8y32 z$W*&V(kb`i_80sfj_H{GvTBR4Sk0{u5?Oab65n0sH}2>(Rd;;WfE@TaG7Ps!27=E) zb(b188^T!bYZkua9>8Hw_omR46uYQ5X`61_&vGuSuc*D$yjuznvJV;#pVFl|jO$N- z<}T9^%-$ZIG}m8OBkC<-&Gl+9e{57ejrH=+UwS3ZpB^O=bCr1xns2Fy=-=yLvz2=z z()fUq#v)Xnrm@TWCMB4X%CX5<1B?yr>>RCenxINQnR1eDh>Mywbaq?W4r?J-TNKz?=>{k{C9LQ|Vh zf`!svom&a}bO!3x82b4XZ{xNgg^XTI{*NVG6kkf zl`X@2<<0jH%N{hUbH3B~B*CibE5(wj(s>6J4BjpnSS24-N?n-X-Doo+!YhVC=o71G z&vCLLiQU+n2}tluyLpwFPpQPA%-a^Z{U=V$TXB&JMilZqvN)-0Ga~MckQ)>OZ)>Gk zSsCI3kvyBN?|o8+7J=x?X8Yac`K4_Ter5FwpL-M2!uI5PYQit3Mx9BVb$fEha<5-n z-4lP*w|cIu@U>+=d9GF4uIJn%wd!}wi(1MNk4rWZeqMsc}inWpEU4Z92^-L~D)?-4V zZO!lzX9xCIdQY2`d6>1Ze(@~eis!yS;>A=-@9HFRQg*#MdIe=PV#2L7EItZ{`w)5^ z_qhktbFSWJ_S)04&xW+ z$jSnX$+kqK$Jc?smY2isbmZ9L#dx&tR8HdUofE(R*xM(4Gx?crDvPF?yJ~RP6Hzw4 zrd3X327zWp2X(s)y{Qq-Ag8)|U?@v$_ST2}=L@1QZh?qDUzCGfxdJpuwb`Okci8(==D1DynCL2KBy4+y<209xXe zVVt*rK}qmCo)fIc^TXu)4mE4PG=~0%P=}xldl7I5alc@9AUF~!0j>}fVOA(m8^sNx zK~Augzz;JIKGeiyC_+a;a)u6UBJ5DG7RCgMWXeLlK+{Ye*i7Uvp$u5_OW+62X6iuO zK=CYjf!_xu4GMv9|62F4f6e;?=$&;5N(4)?G@+H?rz~w~F({p_12qS|vvpwfw8I=D M*>-c`|k9d^WOKn-@mN2 z#~gFud7e4e%HD}JP=BhSDgxkPL!Sq;{9{AmiGjthOWZh~EUYg=d+E_2WyVdMx%a5+ zIKrFMk+4+Cbr{l|AU8zcXLptz7pu^&0hG_OoA&7AADlOK=H-{Na1%Y>Hbo0FGeMvI z#4uSImFVl{?Dz3;>urj8m$OB+6@Sw=Ujnr0{0#7L#oL616q=6=YgG9@!1-V}_GwN( z7#2ABoR3vyf)r?PdW}4&y*SRJ`Nim0!cOwr5oRVoQL`$!LhdVNo;A$hXiK`syRS{ zD(a)?PciaUy2<4aTuTj2r3Zn6UsdrddpG&49P@~v-<4`=YcuLappXR`jw;e_+hejE z!fAY=s|YsGJDR@Jp!8PPSsilg4b?0{gpO}99F~x$sC9<#YS|5_EBV63{%a5@q4qri z4jrIyju(*-?lL4?#uu!(Id0D+JTl!3Qr7Lv^ONq`W|B_|xSf`nWIe{6%1-G9Xj+Rf ztbhDI`D!^6E$sN&OTWn=bp@$1$3&NuprzO61cqYNmN*JU)sl|;8XBK2B0f(6gRUoE zu$HbVi_EI+7~OY|;urs{F8v%8bkGDkpr&3cC~Ti|#n`z}%yJ^PlW~YBzL5fgWt`udG$;=e}vtk})R%0X_wn z(a?G8t8+a4PUPMSgx<&Q825YwWDX7SIqRP2NB87#AG!$GZx%v~$C?NwvDx^l5F(lQ zJ&PNWMLScVLdDzR(nSpyeO5cUET>8~!i8`VxU%OK>P14!M(o&7Mc%;ARN9HC@_l<^ z8a323Yi^UudC5%|k;dZswW5@=1Efj6i!XKYaX*UCWIN1e5AtC3IbmB|Ks6kO4CSQb zDWI;gC3eSYwm5DOkd7T0MK`W}n59eA{){%4_9Ne)6>{Hzc;D<WXY&?eL_DKT$pq zGmZV}ucc(H#8_gdrb%A(yI4d2!CaSeh4;Po5YDNeV<&Nz=7V+BgL<;tP2yT6DT~+F z>!73KyQW0lYj^zA-K%4-hsUF)o16BPw&W{jwEo$Prvtm2md4|!N}kK-^XGBE4Y;wY zfAMlzu#Uht3Eb^=JlSyZaCLWd)DpDL&(bz?O*3pQ&;Z$r+?q=#s1-nEHTo4*)VvpFRK1f_I5u* zXOx;PfKJ=4~MHSs~*p{2J9nnHi4ORnQLJMnL#$DPv~4W60wT8($~OQx48%3 zQ~T?Nu@Jb!z#1EBfN6#H;Gn*$3xBjyDrcQI*b{9>-fni(%32Mr%&}`C`-Jll+f!xsOj? z_jgwAfJehIYEWYJpe^fgG3Oy!(AM#O<}+8JCVm7HVp;?fFcrOcYR^ij$Q!}9_Gj8| zXZ#}g%1-}%(AH6%8{xr%iAf>xj^YqohCbSE^`z~`z%XgrxV%U0c5h)oJML_co<#RK zFBd*{_{`(i6I@(ksVcb6Zp%N8-eyimgZ~=oG%@`gKU+}@WQ&?T4ewV7ri?VLRWSln zX$sw`vvya{D_%E;IW6RIacC?h2j?lRWh$C<>z|#p=bSwjezpV4t}$JM+{}d&O)_WM zLv|~SYkey2pj^SV8(>ZMiD~@)9lbz~;j)^?dFVMRDo<6xCLFF`!Dh9lTK>EvN^0n* z5jIPP;}%LrI(sR03mH6L<6m)1u!E)agRp}w^z<;&eXH7%Dd+un;e74iG--CcoAQv0 zhOI{P(rldO)ML((u+jTjJuYL;Gj~H5KHUz=5{YxDanZ}TgidS5_pE9)ibjpxctb%K49{{0j;axz$VL|}^m+G)0>R|cMG zI6bjQ$Wj`j3)dOD)9r(xnmrcF#y|{d6EDJT6JY_c6@DXVO(}8(Mkw($B z3aao>26HIJ;B5?gaur_7!f*V)-|@3}5^)uj{u*w(uW}xm>K#5wan!4+j#z=mqKFBSszEp7>hH?3%L6)V^-S<-)_3ar zi*s#>eq82r%KC7gJrY5&2x>60yd1)@{MK2XVzp}&z5clxP5XO?Ba=#YVw)o8toWkF zig*XpMLMv%y|r`zB>~#PLC>5QWwC2L@Vw?+WX)i}Mn|M^;JZ5vGB3k#SOw7u^OmL$ zsFJQQdb4A zs~;un3${-{ciaVNi1fWZ8?m~)Q@0YEk7VyLgXPNkDm~o*EOpuYr6Pj^%+UL+3=ii&}+|AKt+TO8#~u0&*Vv+2ouTQm9#< zTZtlBTRlMW4H8o_+QmmuaLqpzCia#nxpRR$+{;JI3L5cXHIP$|?ATn3g>qY=$5+M5 zy(V8c7G54`jbtR>1R07X_1p}g^ub#=_?vr@i>y3E1@3ptqaBL-FaOX|vLvD4Cf_LH zU_BL*GJ2|}(D|N$btqTwou5RTA+mn7 zK_jqY#Nu)YvA2}aCuT(t)>AzvM{z6B0@1V*+$M}baB7x?aPakT+(~tSeJ4JJyxfFY z1Rg`yps1L35dmieXTwiowbV<^az;h%rUGIjyn&Ky{xKGO*Vz<2y)M?}Zu}vVvj8Lu zwKX>LF%tY`zCmGCp&n)G4E@{$6X{v@1ny4qX>n0(*g7kzr$JlzD5~)ESjhze}T%kYbJuX%{7IhIHO&2RilAYEu0dHE< zQy6S`KC>!H%5oMx3Xvp{k3ANUfAHn#&*yG0)U?9Aa&nUu{cM%ZSPQrdoMG{y73Klo zzA1X=-9c1WB)`6BiLA7qctQdl!l}J)gt~-49&t1KEqxU02yqH-xMYsYyDqddh8>TMS7W`Wckn;$MIe1riBB?Ir-9}Zbns~W-pikM< z=Q9>y^7&L#Di>P}fJHob4rLudaXQpu#wwMMx_0&wHtM}V{u7@yiQp8u1B#rOP4BTK zbmI_TDT|e$ks@-eC*?f|&95Gy8k74bn(@kVOa$7qPl0gl z0i3+Te?)zFq+EXq(BTIr+qDDYAbiBR<4|^ZdPPonurvg-!=t{I^)nW{>0UUzCmInk z!BFnF@QP11&RGciZYBr94rS*r*+~TZb`$C3EuMjQu;zc0eoV;jw4n$WXh-ov-mys6 z->VjHKVP#TqESbjUr_$j1aNbhK6~>eQV&iyDOb44!tjB`Q$xqY= z{UoT&_vEtqp*pEa2PW2iq9o|dPlZ5=jKY~YZ18u?pI-BP4s?2fLicCyzbQZF7w49- z&;TgHg;+xr*};zUCJ~7|u!g2(FjCb`TeM#b^LmXvE_^EOE0OBAV#G5+3n#q1RXem&X5tIoL0m`*cUXDS7^s>PGQ!=X$t;}B2yhKbYo+%27!T!4r8WMWd(>wt65uv)-V=+l!0zuofk|n!`i?s8I~Z9=J0U0W%ew!_(JSca2nju~z@VF; z6Xtaj3}GE1_>GnTAU9is;Z1TJ`s%oG`p5?-u#(sU##h=SCc2Xj%wY^qums(tA#{fs zoP0i&21P1hxG8igoB8UfdiVWB^Z(Cr(gU?fBX>K>6LlP2+r6+LSlZmbi3%d_2>WhP z>kZM%&ihTg2B>`F1_)D?Q|!-!nf1GM^dI&%|*dRd}!k#`&_*jXP z_(n#nBS-0DQw1q&lcUMiH@X>N0Cez z*L?xR_^I_?=LzspK0LuF;%cZj!HC8AE9@^f!D4+T)CY$S7V9ukbQr_~(qK-MH2`tP z7hZ(Ov(NE?T2?gU|4KEwvGpr_R3*@1=nqMQSx104z9}$|7bm`nxT+NnXAPpJ{1q$^ z-I+??YioH;E>)tcj`I<^_m> zUP|&t#owUdkpnhcC(me)C!7DQ70XTGf24~v=H-)KA{_M?%$9lgaK`4mxpq1X-R}m_DIjWHLwL!kpEpZ{8vJ~L} zZ#$SxGtEk`F`q#B+ed$1QOt2@Rmm{-5~dFN+Z7*$+B=~38~Yia$Z}8g)ne!&Rfr+~ zX#@XMk4u%nQs4@V@-T|%3H6qK#WzOW*fTnYSde}5DC*S^_Dy`nz>1YCBeH`Pa*#2xFeM&4mlXEyqy+_g0C}Ke-x6X9CpEH2%npyl578Z zzHV9$GDO=V3E4cvy)^Kq{Wm8`tdq}_F7UuW_xH;?pWi+mqR!|=Nwnx~uvp?9ekTw3 z4qE(zSr<_M?Xm0|vW`cN&NAidBJYYPv1SB+A$o)SxL1@mNe7r(x%Zv0{B7keVmci)6j|QS?3m`qQ|67$6 zZCoyhd3`U{{oR2`Z(5jY^@s}9fZ!R`s9w!h2YG7!;To0%SHI-54f@|&Ng1UW+W|A*U>r1^bm=omkoLv8_4dK)emp>{LC5aZoAs88DX29Nm0Nu-3 zIHQcX`dWyTdCDg<-Monrp}*n8?1NvSg=wyqx}bS7TcQaKibkSqobe8Aq0*Ex0I~0Fj zHoh0;8Lp=mO69pl3uCuP1p}`S72x@EpFNp&u{pEKVO8HBRp14hn;!E;qAry@ru8ia zJSDcJuralz4$xBQ*G<5h!#sIzAzYIznZ zF&^01VsF=BII_`iD5ZP2;yIN(&iv#B%>PY{*-QHUo$4?xkSTWGtGKXz;}g_2nAo@9 zofw7`Axh@bL7Qpc&qcMc?N{I(oEzLhHAo9sE^fz4?fQIxBs`zsx|`zmY#YP}W5s44 zjFl1S6o`K~z8-BHD_CoNE{${HZAK7VVA0gEDP#kU(dQ%SfRqvjP~DM)T-HMVdFWQo z4(bE`C1kL4i_eeVH{{W1%BOJb-bKz(2wNShys+UAlM_fnA)DH8PQnwQQDV4oDpZj) zno1l6?WP0|Y88qYiOdjc%TEQ!TOEG9u&5%`(Y)Axw53xNF>lUsz}DdqY$4ce)!dlW zQxx}NBp6p2kOssq8iiSyZO( zH^bp%WjrMkMDt!N2muQ5WUH+_zr%hf(l~Yp87;+~h7M zIqjLCDc*~p7_V4n5p>QmfUq^vKtf{<6I@%HExdi*AEVNb(R_ik0Yc3grxKDgOc`M+ zKmq35*4C6?QY+&fM2v;Cj{$a1W0`KU7uBJ^j#P_)feOA31t{#tsp0>Y0#XU<#^|e^pi~}o z6*#~mT#WZlaxT?A;2;Lpy}&_W)cC>tFTYPopO(>I{T{>9SOx?i!#|Sz{2TDAE#+m@ z|Foi-4L>csX!xsVW&5#boLGytvRsc-E0-|!O-l&Ca~mrlhWXNU@zLR{n9gVOkZfX6 z*gzdBhuXC#x0j!fl2>}8u?vKSOxE>bYB1x_MF=SrNSB_?Zv(WLdypu8 zr?3SApb+usE7(Y=f`}p!F%L(%QFvo7+{Gm^-{{>UbLidkR!NGGeyYAqa*v zl%e4zq+cWV4o)i;iET9c!LLYJN^DYJJ|4Ay$wbGGOfBEhx432*ezWBDaFqRgvvs_K z^Hwun->HA=_{Vd3(CC4esvh-2;!fT1;aBIoKZYKbe&25G7}l?S&4?`7a=P(Y zabG-&e3-pnXm$Z@z5I%AcWH55)VmpKw&y7XzFzkqHDUg0Us=_^xgLHfb%O-Ine89d z*L>L8Fl>D|(@D@OLle2AEP^jgbWcbuf13aL@^m@0_97UY?T-uV`q0#j6w6G*0YpDy z6`J#MhadJ}?Hbzdws|;_)U&1Z_#D;kj`TjAP$kQ9*3RP%CL?ecTGS`Lw-Ee=(=!-?s}xfz;T=I zAARS;o$j-&-NNsW=l1qzEz2z^)`2(8al}jI`dlSf*3I{4EnYke)Xi7Z=So+=OM~kQ z*J6ey{eDJbGx%luT3OwAxq2u|YT@Wcq|sF8;>E$!=F+fJ{o}b>>&aR*Flq02{qXai zrTm%f{V4I)%+!Tx?b30*KKicuZ{#I2uZMa3dHmt{;hqygdinQF3uVApOYcIpyY~5f z>p%88g~r_g$6^mniQvzb2eQ1d^}-Ru$;?pt?I_q?L))u?S>1~)41uA)ydP-AF`#Ri#5&R z!Yg3LY+2QjSzlw<-ZQ~#@oW41x%lk8N&31k`$(kO{+g2+`eFGnnPSk(@^h2EP1^_3 zV$R$P4;{z$-!IP_k&ABa#R@G9(|6`Nbf3Ot7JI1y86Rv8kct)3fSr^6%=Y)_LH((n zwk`tcC>ItQh1yRGWOd^&R{DdsEg!1xJ0c}D1nrF9^N-VQNpCkCRDU4VeCn~wJt+4H zEdEN2UgWjueRg$s>c&f?r=HDn_+-%bW6gzi5JtKsgt|x*z+;3xSmW;=x zlqJP;G|4qIH=*0bZ?!=&7N1l=F^6?|YShWM#;BaLk<;+b_uI@2LuiiTiAtK#!+FK^ z4s(t%mfUBl*aQOF(pQCt%3k!JS3k;^%=^xkM$ha{tF;`BFH6u$jm2k##vYH!NIa)v zQlGq${xC2{2Rw+tArXR1Iu<&%xep$MiWSdBYc+R+Pb*?r(Mu4|&8ZpCzfxh-J?iZL z;NCbXr5?zQ<|buV8W5s~?t@E`oIPDa&QrjGG^8;g*T9CEl2Rl8_{NZRJL7kb9M~Em zFPfYDKWhT1ckHbsQt8xCJu+QFrL^D=X8<7yDz*$y4I)gc-L&SE?@Z1bSkzNe#F&Jj zP3fVA9xX)G5>q3aLJhhQrRo^gcO{4_R@A)j@-bbrH-7#;7crs{whZr4j`b0NlObe% zuk_^Fbe=)WQr0N+PTQR?msi?9I^Lg9TRuveYLbvXJb3svtyv}voJLVJw*)va;BOu( z1hWM}X(=zm7q$QIiUC9@=Xe5bX|MykFypK!9~HPT)I8Q=yf-#xYIGs2RWYnoC5Y^n z)Vx&rm~5h{-!wy_<6#KjVf9P>TUa5aTsO8GC#ilWOqmIPHesCYZBAZLetNbR#b`Y6 zjJ9)$mO{>0XjcJJQOe5;7Vd$6&p!%$#4jw>n`v|1<}(d}tRCJ)U@fim)E8#fnACD| z5Og^XN_=t(?9xbLd?E=QULfJj%{9|xkvyTV%97fk%#b8!PedewMjgMk+$w_q?37M? zi5Kx!9Zh{g$9tf>BD-N>B&{H~%UU0Jbdtz%`z^I`<4kRO={#}UVf|axSU9CiT%;p~ ze}%}8ABlC;?KW{2PuuqnLLP=-2_1!LPY^UZ0K1@b_%p3YbnAk$--k2cyT42CC@R>z z+%4eo8Z%n+F`4s(y(Hwcin6`qXRqyh(VQ_%Wh=>_LDAji6;{dv;Jtc?03bWHuZv{1 zj2`q&8q+TrP;V9(P5z}>tG67+)H&u&+ZBb1YD(b5IpZ{7zl+8py05fMCt6G|W!Lomnqr+%J-4^AgY1KYq{e1q4TlLVi)jAY-|c-g=dv=Z!2jB5&tWLQ?F zGgL9klBS&dJ{?V?MKU24j90nXsgCc&H{;afX#LY6DMZ?4lTR)=!V+S7u+wVgzB9dEZ1qcx|zLJT*8%i7jEdsHb`2{?l+itAIZhkoSX7PK{z^w5)KnqiKS1Dq7{+3Nw(jT(t9CE zIZ$UU+28~_-2yu1LOs791$3OXOchJ>mJCS2rD{)8b>mMkrQ_T{vK&dC4rCyt$2yM# z<1ZYl5}&bP73)nIyU9GfqV+ z*90-#&kWCDSm08mXsYmYg-}x2K8o7kv1+=FV7wX5d+2VLBqgIvX3L|eH^fi|Ag&Bs zw-M)%IWdK-TS4AktKa9MmSgz9*4~@ULm$p>z0KQ0ru~bVRuhCtVGUVUWi!@Wg|K~+ zHe1P66K`_f#SOCDyhh@G1RB^9%|oSE!1hgA?<0={2hT;TXls-eA|z*L6!il;XLQoi zTx_22m`zm9)@TBsjIxmp_#1|SP`6%Mf>FYPsqLr*X5ZFZtlD`K`(Z!q{c4$(<&10D zAk}>~p0o)UG&*rS9C{sUCDqsR_?F_28z-$N3r+u|7wJn?v%f>VMM-Y5l(7mXR><$) zwiUtFLEs*>paZsY8uA@PGT4QUvXsf^4)3^tOfF+*pSE$pj}~f@Hgrap>Y#}4!M=o| zu^jk$nH0ui-i7hSNH~atLNPjv9-9-62-bn6ZHTo~(}x!7(y*W<;AOc$P%d&MoPRK+OD*4{{@~`T|QNoJ9QWZz2^_HO zfqYbxLdZa0+zJ%?9X7weM$4O4M|etHyCGKr7w5)o$iEJS6RAh9CDFk5Cdb^qvHlJ( z=ipLcCAp`1y5h!{_$VZN`RZpd0buyLg;#v^%_e6yjl}E4f6Jic^RV8X1Ta)$I*usB zd$Jh$4ty{TMqEW+jYp4e!Jmr5VG9O%yPc^ABDNuc;geD>;@#D(QxnMEI4r);1}$@{ z9@P&o))xAT9)m<=Fl&`rR)^VS|Fqd0w%)#>b}16e0Zx?=mFGoBS?b5|n#lAqF~!V% z=lKeGRv=gZgxk$G`}3Rl_6g+*{pk%Sq-kKA@Mpx#ITcwAxy)9vGH3c?3FZ=;0X*`# zOT1LHFC~pQ3MEq3FM5~iY4$2FQQPmBoL__tVVVPqP^IJ+%@k%JrR+ZT+5alPOd?h= z=MRdd1du~;^FLxn_puNB$Z1!;%jwekfa&W_+mY;Pf zoetS~#^Q6BJFSVxCon7wS-b{7o#;NaD$XfnA{gCX!E+dY&2N2aQ7X@Pp}4SVw&}4r z|K{O++^hM6ln%dKhr6407gsIXk#NSs?(#lm{-@QoSZ{JC^6SOr&dN)OrbdBzmw1ZXx2R z0`_&yUnZZJ#I3i2Qgj58H}G<cCU3A;*GnbN?2pD6YISu90uGk|B4q0)4-Ny&ZQaBf3ODQ zBy`%IULaNxqZVP3DuLp>e@Jc>ll@yxMCH_VpA9JY=~%{wy)pA1jdFY|Z@~AzJjh$Q zDUEtD4ah@jx`Y<6l)e4mVqO-Y`jb)(w<>#cW=L@qtx(nLQ>duE_5uJmW9s`iHjOl7 zI79JhB!fc{NUS>MiPZNPMBNQsNErJ(%T)E~VwV2~Cgf(v&=;!ODO3uA@-GXO6PWi5 z{LRb4u&k6YxFjE)D=%MKb4-37#I!HUB&GUyAbQ<^1H1tuT+W}Kb&Bt0h_F%%DMB{C zGT)8X1C3nT5<+>ywvo$T0a4h(DSyu|DHi5#EjvPjU|eyAp3uj}YA9-Jjx4S(fcjUvX$BMg86%h?n<4LHY*xqs9F%NxUH75rlTz%q34x1X^`E5n3vf^VR(J6R3f=A^pHPG-Qp*mlO!H8<@TM5OH4Or?L0Xk!X8a zC6bv}Iza*UKRVM#k(nDRr#r2ipUsq5&8SXICJPs>Pd2&=zv~`dkR|mxc0uJO;<`N{ zmu{m`{Y1w*v&o-g-`N!KNygq!2#N8_82wo*if(2jR%W2}>{cAR*Mo54ut$oeS5dqj z1xynCaT9yUOU!>{lXW2KJA6tb&GwZmQ)!CRZx^1?mI*amZ++P+e@UT|v^w{o$7jH} z%NI*U`>(h3`FaWGv2pn=lq%i}az_D3@hUF!kVKZ~IriB(!2@K0wC3l0qd%g|=Y{`0 z{y^7N&*1c4aHB;gO+x`Cl=7EJrPQ33I~h#2UjH)0fvs_h0Sw!ej+-y9XRJsi{`BV< zLn07mK#nPq(%V3JXwI1&sYqHCF*!B^8>sVJoI!DNd2ksJu$vBg#koyGblY$+v3)^0 zW*CmTZKw9`Q*Uj`RK&y(Qr6A)IltEANkvB${++BsTay5EP5R${lq#TKa+skTD~RSr z^2)1M*}+MMUB@unX9s^7FEI=g?jw<{Ro=DsM_XsH)?=YsNeoH6w>pXoc|7VzHQr*) z!2Z72z(%fVXt+40OVk^1RQZ+4|A-yM%=d7+ctax)Wt%u!&Z#k3j)F+2K6~8S5{0A- zP=y}NwOIJS=}SPUNiPuyt|v$WE-?((5o)6hj%Ot|a@Ak9!0xRGjp!I0yZcz?cYnAx zmrro6IH9c#WLGC%kxgWwQrYGl;^61}8R^Nk93P-Z3(<4l1eYa*75@qwH7p`dmkE1|GrML2yc)`*t8ulzkoViSPY!PJNtOU zaBvfpLf`qyr8^c_7iKM8MpN;Bd`~MGjPb=?$TU-lUvWR;;OnqZuF{`gqDGlY37lvV zwq7FP0)@~aQj{h|GM+9R>{86_v%(PLaBlg%6nq2PVykV2ULs{Nq+T2=m}Fjh zhBsV$5}w-#s&W+)QT>Hda|jl%^GDJ|4cIb?#uOaL>RU8rmnw8+e2SLkrVP}b^!rc{ zl^GeOO_gFatT&Ta;l}6;&~Y0vPAuejWP_MAVuFs z0I+3VQ>3FFjp?!waZLCe{!cxOQ~p-l@Nczo-dTxxrG^t5gd)x%yaJxcE(N3a-{xyk zP2*UJVbbG(-5Vd|6FE49{~h_rTN{W~dv`vQGi_e6v5R~Ab9s|X zT3yjN&yM0oLx~aL-EfbTW3a#bE5$hw`@I!O41uuF2GQ(+^ntLNQZ6j;Zqs^bvax!Y z^g?+zwvpW)=Mm_k3sFhv!T8<-;rWqr=aCES_rJicWW2)l-^B z>-&G71RWi+eN1oCuM6tFZoHe{a=WWooqZ`b&Csu361|ADbk*8@dbmH`0>98(D%D3D z?lyg}=Wtm$Mr+>r&C2awy7{u8!NNbP$HnEx)L!~0Ci8H`pxQFP>4cpNoy%`!lcL1g zfHXlrV-EOqjP_7Hd)+TP+v|2}Kgm%zW_8sot@pGw?{xEYJ0|#y{rX*G*ovhc<=9vc zUOHeC{M!J1ix<&t=W~m$AO!W~niPRQ<~0{re|X_aY3+GiOX`J7~b@9WHFSCgJ_{l@qH(##A1&6uo6awpqc%?Bhwh z=_d-ZnH07oNYOI(nz^QAIG-FV4a}YIfwQ)N8NIPMr_PXi7SW*8B%HblMvwuKn*aO& zyWEaDcaQxb{V?o`TIpPZSXGSqfPR^4uHFK}J!w|$=>Bx zb!6#d*@-6{1CdrbM1ajBCeh^AonJhILcWsW56{nN)?-2Ebe+`XHAcKMFU%qg_hR*1*I>_*Bll!HHP2%NxXp6^X8f?_pE1 zkQIerAi|oxaoRGpAWxt^FT3nquzvD+8mX?;2Rx+4~QCl^`e<~Z8Q@tVtj`)A4nxig)kW9yV&o_jZB)&?GU6zOd0qPj2;w>aHD09 zPkZ13r8G0>o8GRKu;HE39*x`kK^G6Jb3!_DDuW##?k3ot4rFKL7sfni$~|UY9c8Wv z=%+&a=~sVkrgA=Ofjo*wS z71>Yn!xx1K%rCZ0x}~GGX_KZDg@?bp)}<9wu^q(Tq*>uxaS)r;XbC-r zKQ80mXA1jXtDSi3MIu5_Ta78*KUB7jpRBU`c*q+52p8fliu9irYbz%Acg@^s=1SI7y8T`ZqR4Z|&v!NIY>F(TM* z{NrlGcu<^l(Rl9{-Y|CM<{fR-%iV()Yh{_rq=&d_boGFjN&b`TS%2Z3-aw)Ka8i{w z1q+pXi5lCtH1@@+umn*+xq|q(G+?C2SGCb@NQAwq7|!I!R^!(_X>{rpQoJ!{GB(S5QQ^}-`?9ytIdDnFyW8R!LfP=V=B3{oFM2}fF^HQQ1^@uOh$D?|4BB2So_hk z#t{-`$$XMN@*-bVK`ZJ!xEN7R`LMe}P3+FKvGSR)>5RM~vfnSn`2@YsxefT%tP{Ag zvX|JJRL(6%pspQLM&&MT%0{?2W~fIq(VliRocl6|PEmD&D8HyV(tu;X7@*U~Hpwks)Hmv>kZLDAIwd=P0L zQN6begb;x75e#Cujx*NJ+vrdG)TjLt)5K+E=NfXjx+D1uz^AAJ@+u~fz@;&qF+5j* zP);4cYZK-kSMIn3#sUm|!T{!?5dqdBjgF^Y!?#^R-&kS{t}i`%ICe`CQCXc>sjPXw z?Sz!yBJ%^4OxxZ`WP_A?qKSbR+%r=jZdUS!KGaJni2~LT(H&ghp<|ixf`~tCa{3eV zWxXAP;AL;N2ZXFU94!5aTeRNTUz$%xWpoe};SILpZ>IXI%d8uGs6{nt$$oU;6iMn#7n5b37adV#;9%<_rbeVVCR;#P%L$Aw^-d zRS1V~N;HQzFMixUZV!cIB*2ZjACiVR^J@nsOTiB2AZNJVhI&6*QywP1V^Co?XjEQ@ zQG$@4~+v)m0U4ydAgM`C-we5CY7DbOy5Rc~~YP z*rhnLe}!14RH$yg8^Ygv5Qr**ixSR3oK;Yp_J14F6giWwEX?%>IsQ#XqQ=mix*x*Q zj~V$qz8(oloQ3y>*Hcjx1cc$dSdb+ zEp4-$H7~bJTHBb&nzix5dx3sc5hO$Ep0QY12#6@czrQsa6u|+QH?U}U81g1B4f1kx z8~If?sf)a+$Xm@Fo;~Zru{&04HfmIsIE`IhD;HOXSGB#|M>&p?)9Mdk@wU`? zL&_93{d(+&w-*gSVEs;KkpfMKvxia!;hgnvBG)uLx9$p%%|_OPXG#>R{1^}YL0}%W zwvONPK~hFB@~4btk;ML;={rtob1$gSeoom#E`?$%*D4oooSHB)j)oJ>=@9IrT7NQR zucKkk$0l~w3|gA9y|xUf>Pd4A8$nhmDuthN2TyBaM!XV$bcX6R#3zQsdFtc~#>Cl} z#dfLRdV^XGL%lpJWtT5d&TnA8@um6u;K~ypj%C1nvJzMnOW6OkYI^u3J@ekJQFa5d zx_L^bN`K#Zj7-O^`a z{b%z14K2}gfKSy5O=K}v@6YP{JQ?y{Z;OKwLTwR_B+O?^*P%J2JgLVaef=q2Po4d1 z>w`s({;LmJ(qroK7eK0_99tV9V)hQzhI-iL(UOD+@tu?lF4fB2OwHRh)}yddAxq9ac>)E4s#4ngz=YPw#w2yvW`tcuQD;)TUgyqk zEl=j#aI;`{N}+5BwoN?aYvE{!M%}1sUla^abu>%CvNSty`$$1tCzk96sNSDc(=o}C5R#uv;JliG}b66=nzO>%osi)y+N|4{s1!fg1zd3Ltl3aK|#TyfaJx}m8L|B zp~)df2NDq?U;erMjTg)FpW9gwiF@JE10D7_x~`s|vl^K&O^CF}M#}jZAD(oKKl6nC zjJu|QQ=!h0`=W7U&qhEM?Gq1@fkaYPYQ}PD4OLP~o&69(%QU{!JuoRlyu`VC5yUN{ z5t93BdxrrS()I zGXHMea3TZt4$()MTBvMn9x#=-YtnS$yFM*HamaUT#fk&Y{YpHY5cImJX(09psW*MdTkuJb(7yEs@^3TjP)gM*%Pd&<_JiG@O#v#?R?Z4@RBvJBl zXw$4fl9G*>!z?C#r89~+`9orjfiZS*Z?wCFSIaX&Ly0%U+?JnHt;6l9BA!nt0&~=o zi{7B7F_kHQ?U^K-SKQEkLea zwAc6x;yu!~_vJ;qPO1s%dOWDxypF=}z6i`Ih4#?kJzo=Gpj_2d_yz4K_Frvf@ePII zBDOuN!%%`7vz2=O9n4K3p<)nh; z%fsIyuzST8o9Y?;=@Tt3{tk}8k~kjY4=LBiw49T*-+l<%GO_G5ji5ywk|YtX>PRwL zK8ktE-lRHjrDFPz7P{dil9RZM!ByhDG7T|^+8C&X_WMOL>@jm(0B+;!aEIfcSVR%F z^A082B&|wpLcUXGMTmMh1n$YQm(ei?_mW6Qc-u`CwFtx@#N;w|l^sY~lC>3NLQk!| z&3f|T8nN~oOMuiPsIY%#3ty3eJ6j*bVbNK|Xq)TsMKXLv9Voi_|Zo2oCB;IfX61NKOYSs;*#| z1Vm%Yw1wKtg-kGQbqEe0@*|ABn)t{;k5Lv09S)ROIk)Z_B1bpA8NLu~k?=ARoD^y2 z2i3gKE_@fjqwS_OMeHSk!#s?mk?o&)HnahYcRmqqw1D}RrUg671kS9b$J&KoMg}cJ zcQ%#VWfeK=ZZj;QgyzJ=5uzm&EAdBRZh;c71d11xDE!6sF7 z#??Iw`U&b!DCa#*22t{I5hNQ5ixBrr_Q+_EU;N4e)Lcf;9g%g#uG~XR9V5@q|Ad(Xx6BjAq&^br6)PbH9I?wuTOIa!hODiHJ(_rk8y# zF|BykeZ!xMn5{@RafxyhvM+A}9&$+Lnon@lMJ%No0wtig+F^7CVnap0`?QiK*Q1PP zGm1M0ZZB9Po>TM|Kw4JM3Sj++7w_$J&_+RSA*uakUjB7!*LF|r=y2c<%PWPdH)X>y z5e0D{Le}cNG z6E|XFX7zzK?U*K8`p~=!CGG-eGqc?~jx{;K=Vz>2YkI?-!PDu*jwXI1%9{MGfaAjI z!hS)wlkp@Ompxnkz|HB!k44pMl7)0+@iGM0fd|uzl+roqPi;UIKIQsQOfWPDkvm{~P$l!2hxcX)mSPe`|8Q=g43%_4WN7~4Fxwns#!*7HRN-GhOc zc1)uA%|f`6(;q+_(Z6RX?geKm+_i>v;r1XPLWll+gR!TCCI;IZJv6Vk*r2&5Uz3xv z&TK&&kWQOfEXADfob5$<=J3*SqwcfAZovL`3Nb<$O1ZeowQ8du+x*}ufzqLapK}PQ zQY|{#;I4$^K|=|n%9`*p*Q`9U{0Z65I~d#McyWS0H5kb65tRDnoFRjASgGZq*s8_N z6m31|IiBr!?G)MhGGD%f{Y)1o?zG9*Ry%|fFCiA!z!|nn;|mXh^NI=hya_AUDNLY< zjriuq8c#O4A`AlAzjZyk5Gr9^Kl?JjnYPX|`i~vTM}7nTz7NJ2z3itr$MA&RG@EKP zwY_f2PDK+#)SXgkgmKa*DtX7T)f|DS3TvH$OAy`XNUMDGi ztz-GfKb&jxM6l=F1T{ch=SR3`3;pm#*T;b3W6BCimgNJnz&3o16wkVeev{(uY%vk1 z95-7a6V7t%#7?Kyh+7f#cwS3>_637{^2mR_^I=$j@y_`EIQ%`lK&gb{yMjJxZk?0{p zBx;l(dW-UMt-IcP>z=>%+UK*+TKkW4);edO{jK$2A|@ScH}tly%6@*-YGthuf+f4- zy58l3qgWVI8430HE$HQ+029{+b^G)XIEz`gDNoyPvO7lgKRM}GO>S95^~4#d+X-9N zr-_##Sy^nGalXcAK2{^#NoG!>Ye&+B`mJ0k(Rq99z3KXK`5AOpJ=UR4e|RAfQWTK& zxi}i;uxp!uT{K@XMDc5fRHE^7>> zJZ+pcW<9;lH_Dx}jB9;QE;O4I<8pc~j%}cS$6T(> z$`sLj1gTyzd|*CIQDa#b6RL;lynwc2b?(Yb1s6TQcBJ5;?OCm`)GH=7rIiuNZq)dXphD7=D6W|5bkll?+q6caC zpm?&hXp??@dKITwIvFdJz%h58w3K)0NUOHS@+zQ@dmSbw9AK)-I#LzrpCZ+Cly~5l zZ#~n8oF|+9G|4n>t9RAsQY8`uw?Qkms>C%c2T$hubvvz*#eXcZT-_j|``R!wuUW$( zE8HLoL^;^IzHM(W51n^ry`P!oV2^b1AF1sY@AiIPHR3nBkln;I+_LdvSkFMTaiY(K zD*?_V20!eylQ1~;Vn#`0Io zQm%?Fp_``RsfksOX!g^(Whw#K55dgBfRMi!2s2y}B-X2hfp%8x(Ls>vc%}(2eju2g zCAKmYqT5bhLL)M6FlmxSNGl|{Q(*0jm=Wv@kqnvnYMbfK1k&|&wtQ5UkS>$!!JI?d z{qS!8iiY#(OD(#@l4B%64iU`Gx`)KJ4TZnw@<28fS>e;9+rVW=;28BisWt6-mp;v}YOxVd*y>cvP zdNwUyrIq~v?=67ou9{*LjaJYCrtK?G8LStmY*GP2+z6k2jH zexjuB;C-SPkmH?s0HFqp>^|UNfniwj zyQl?n6z`-e-#|!(K^|~!0vU;e{UjZF_?y9zoZ*i=m+r{veRWc+vm2?;Y9n$;X5y&W zE}R{$Ds5c{xf%^K*snzHM{fKZD(xebgqtzc1238WpXUeZ~e!~R%@=;8x`ut9l6l1~V| z;S<7kM`_O1bYa=gPZPT9T%aOU19zJ>M8d`6uxL7%xTtUi`RT)TSukqARi? z<6V4E15#C#bhb}>L{V{+EPUh32_|8^@^upX0P8l}8y?bOk4=YDDlJ02R>g}U&ga9S zPJ%h_k|czaH$}2j>Y`lf-NbmL@v;U!kSW>%a|Q}O-wj+)pAP!tmorg`AwJJ+HP(iFt$G z43@($ju$t!dt{gQBL*!F@4UH$$*t2B8dt9t{#-}DE2YjQ)`d&`h}$7zjPcBMGtv04 zzT}H+eok2kpA~r7-q}t^K9--=dkKo(r()7}+L1*_1gMVvl8@>XAYXK;^p^OAcR9+q z@-pb8L|b~S@%-r-=cQ+Hcv$~YZ*={~kOUs<4S4;YiaA6nPeWIer8tZqqAFsOl(;{k z&SYzKfG5hU$g!5@GH8|HL@x_!G7HP`^rlB1Qhu4xvEb%I72<~*;-0)RCil4vh&2w6 zRtn%1=~GH2;a?x1YTjpxB6f?Gi_>)z>9+BrOw)kc+YuK@eqw{E5sl#Y5dDB&K)gr$ zkbEXhg%FfL`_-1RW{)5R z(<&zbECsh`jWb;{r3{J%%WtIxo(!g+M9YuN9+O!7xKoW_FKKBA1J~-p zXEdwsAKl2Uc@k%+Deq&oqXGrYPv_IWwcHNwRie|?zB`PN6gQlJA`wC%hmrSehCXJ^ zeSaz~wQ1!V-zQS;`^;)kIZ{XDV*w25QDpkI`M3D^OroVLZc8}I&;C8xJ+a=h{EZ=j zQ6(KtA;@gE(yiiOsM$aL|0EFlsje4{_F-Rrb+nH5N_!*HN;WlGcszWc>4}Js6Vn>$ zA5y-h-jKq%aHAZ?Fg5^}0sQbKO(OO!1~1uuK*SMergvbiwpZS|F{w%M`Qyk*I8539xeAs=wPk^J{V>Jf*Bj)4TW5hTC+L z_Cr3ZF6oH))ZAM$5Pn5w;=@z@q08izV`G3pp3AMdwk=QTXhZYDfSK>=$IH>fAtCh{ zzxPkurdmCtYQ9vq?aw6?cLdKOa{|(;`D?MWF_kxBC4PpIVvLcK{y}~u&AEA@0wRHN zS4#(1j128mftE;Arg<=d>+%q)v<=b3-@={i{~1$7Y1y`=#`p~rE;u^^|0rg-ZT0an zGm03CC|t%A>uR-ZLoK0U&b7tbJN-wKoF$P-0@jY7-Xer;G!XX-j>2>hk~qbbF{A)GzxS}}Coly@_&}U#X zbc5Kl#~N-8P0IA<_VyMA1KxP1dhJJViuEC+ zm{Fef%S7aJ)8oorr<{R0;q{p@*zEUAqSV%z|95O@>qNGycTW?_3n;JMw;{w+LuykFp6yTLE18EGpCSbt? zz(P6~SPme`kO8Lw>KQ!Oy8{T$pawSqsToq>AmCGmBsdD7%zOm#j|IA7sR4&fE-(v_ VnkfV6PrP2{JQGT&m-KgL{{f9$hX?=w From 65fa61a5d0d56dd8b3358f51376bc434956b5435 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Mon, 1 Mar 2021 23:39:06 +0200 Subject: [PATCH 123/206] Update gov.md Updating the network section. --- .../microsoft-defender-atp/gov.md | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index c3cc42ac85..8cbbe4244c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -109,14 +109,15 @@ Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../ima
## Required connectivity settings -You'll need to ensure that traffic from the following are allowed: +If a proxy or firewall is blocking all traffic by default and allowing only specific domains through, add the domains listed in the downloadable sheet to the allowed domains list. +The following downloadable spreadsheet lists the services and their associated URLs that your network must be able to connect to. You should ensure that there are no firewall or network filtering rules that would deny access to these URLs, or you may need to create an *allow* rule specifically for them. -Service location | DNS record -:---|:--- -Common URLs for all locations (Global location) | `crl.microsoft.com`
`ctldl.windowsupdate.com`
`notify.windows.com`
`settings-win.data.microsoft.com`

Note: `settings-win.data.microsoft.com` is only needed on Windows 10 devices running version 1803 or earlier. -Common URLs for all US Gov customers | `us4-v20.events.data.microsoft.com`
`*.blob.core.usgovcloudapi.net` -Defender for Endpoint GCC specific | `winatp-gw-usmt.microsoft.com`
`winatp-gw-usmv.microsoft.com` -Defender for Endpoint GCC High & DoD (PREVIEW) specific | `winatp-gw-usgt.microsoft.com`
`winatp-gw-usgv.microsoft.com` +Spreadsheet of domains list | Description +:-----|:----- +![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx) + +> [!NOTE] +> The spreadsheet contains commercial URLs as well, make sure you check the "US Gov" tabs.
When filtering look for the records labeled as "US Gov" and your specific cloud under the geography column.
From cd54464476c5e6bf33bcca9d3070fc33d54b652f Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Mon, 1 Mar 2021 23:53:53 +0200 Subject: [PATCH 124/206] Update gov.md Acrolinx. --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 8cbbe4244c..7cccc9129b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -110,7 +110,7 @@ Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../ima ## Required connectivity settings If a proxy or firewall is blocking all traffic by default and allowing only specific domains through, add the domains listed in the downloadable sheet to the allowed domains list. -The following downloadable spreadsheet lists the services and their associated URLs that your network must be able to connect to. You should ensure that there are no firewall or network filtering rules that would deny access to these URLs, or you may need to create an *allow* rule specifically for them. +The following downloadable spreadsheet lists the services and their associated URLs your network must be able to connect to. Verify there are no firewall or network filtering rules that would deny access to these URLs, or create an *allow* rule specifically for them. Spreadsheet of domains list | Description :-----|:----- From de36b9f1f91c029513acb4d068660abc750c1ae7 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Mon, 1 Mar 2021 23:58:46 +0200 Subject: [PATCH 125/206] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 7cccc9129b..d91959232b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -25,7 +25,7 @@ ms.technology: mde Microsoft Defender for Endpoint for US Government customers, built in the US Azure Government environment, uses the same underlying technologies as Defender for Endpoint in Azure Commercial. -This offering is currently available to GCC, GCC High, and DoD customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. +This offering is available to GCC, GCC High, and DoD customers and is based on the same prevention, detection, investigation, and remediation as the commercial version. However, there are some differences in the availability of capabilities for this offering. > [!NOTE] > If you are a GCC customer using Defender for Endpoint in Commercial, please refer to the public documentation pages. From c05086f39114cedf812f3789412f7ee21c19cae4 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Tue, 2 Mar 2021 00:06:24 +0200 Subject: [PATCH 126/206] Update gov.md --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index d91959232b..4f4c8c110d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -116,6 +116,8 @@ Spreadsheet of domains list | Description :-----|:----- ![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx) +See [Configure device proxy and Internet connectivity settings](configure-proxy-internet.md) for additional details. + > [!NOTE] > The spreadsheet contains commercial URLs as well, make sure you check the "US Gov" tabs.
When filtering look for the records labeled as "US Gov" and your specific cloud under the geography column. From 044ff27ce8368b3bc22275c8c9db12e1cfe96521 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Tue, 2 Mar 2021 00:08:07 +0200 Subject: [PATCH 127/206] Update gov.md Acrolinx. --- .../security/threat-protection/microsoft-defender-atp/gov.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 4f4c8c110d..86f1cef63f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -116,7 +116,7 @@ Spreadsheet of domains list | Description :-----|:----- ![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx) -See [Configure device proxy and Internet connectivity settings](configure-proxy-internet.md) for additional details. +For more information, see [Configure device proxy and Internet connectivity settings](configure-proxy-internet.md). > [!NOTE] > The spreadsheet contains commercial URLs as well, make sure you check the "US Gov" tabs.
When filtering look for the records labeled as "US Gov" and your specific cloud under the geography column. From 1f50517df1c2946e72987971cbf750c0099f9e09 Mon Sep 17 00:00:00 2001 From: adirdidi <68847945+adirdidi@users.noreply.github.com> Date: Tue, 2 Mar 2021 00:11:01 +0200 Subject: [PATCH 128/206] Update gov.md --- windows/security/threat-protection/microsoft-defender-atp/gov.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 86f1cef63f..0727c2332f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -110,6 +110,7 @@ Windows Server 2008 R2 SP1 | ![Yes](../images/svg/check-yes.svg) | ![Yes](../ima ## Required connectivity settings If a proxy or firewall is blocking all traffic by default and allowing only specific domains through, add the domains listed in the downloadable sheet to the allowed domains list. + The following downloadable spreadsheet lists the services and their associated URLs your network must be able to connect to. Verify there are no firewall or network filtering rules that would deny access to these URLs, or create an *allow* rule specifically for them. Spreadsheet of domains list | Description From abf0d74982456d5afc8791755a87239466f3753d Mon Sep 17 00:00:00 2001 From: Sunayana Singh <57405155+sunasing@users.noreply.github.com> Date: Tue, 2 Mar 2021 08:24:40 +0530 Subject: [PATCH 129/206] Added iPad support --- .../microsoft-defender-atp/microsoft-defender-atp-ios.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md index 93f29b113b..8030e5ba81 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-ios.md @@ -60,7 +60,7 @@ iOS devices along with other platforms. **System Requirements** -- iOS devices running iOS 11.0 and above. +- iOS devices running iOS 11.0 and above. iPad devices are officially supported from version 1.1.15010101 onward. - Device is enrolled with the [Intune Company Portal app](https://apps.apple.com/us/app/intune-company-portal/id719171358). From 14bafbd81ae329f9fdb7b3bd8b4f96680d5612c4 Mon Sep 17 00:00:00 2001 From: Sunayana Singh Date: Tue, 2 Mar 2021 10:35:27 +0530 Subject: [PATCH 130/206] Adding Whats new for iOS --- .../microsoft-defender-atp/ios-whatsnew.md | 36 +++++++++++++++++++ 1 file changed, 36 insertions(+) create mode 100644 windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md new file mode 100644 index 0000000000..cb037ccf1c --- /dev/null +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md @@ -0,0 +1,36 @@ +--- +title: What's new in Microsoft Defender for Endpoint for iOS +description: Learn about the major changes for previous versions of Microsoft Defender for Endpoint for iOS. +keywords: microsoft, defender, atp, mac, installation, macos, whatsnew +search.product: eADQiWindows 10XVcnh +search.appverid: met150 +ms.prod: m365-security +ms.mktglfcycl: security +ms.sitesec: library +ms.pagetype: security +ms.author: sunasing +author: sunasing +ms.localizationpriority: medium +manager: sunasing +audience: ITPro +ms.collection: + - m365-security-compliance + - m365initiative-defender-endpoint +ms.topic: conceptual +ms.technology: mde +--- + +# What's new in Microsoft Defender for Endpoint for iOS + +[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] + +**Applies to:** +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) + +> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) + +## 1.1.15010101 + +- With this version, we are announcing support for iPadOS / iPad devices. +- Bug fixes. From 8ec56be9e87963ef1731f7cf8d49dd398d9bd7a7 Mon Sep 17 00:00:00 2001 From: Sunny Zankharia <67922512+sazankha@users.noreply.github.com> Date: Mon, 1 Mar 2021 21:18:11 -0800 Subject: [PATCH 131/206] Update configure-md-app-guard.md Cleaned up obsolete information --- .../configure-md-app-guard.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md b/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md index bbab8b350a..c07e9023c2 100644 --- a/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md +++ b/windows/security/threat-protection/microsoft-defender-application-guard/configure-md-app-guard.md @@ -62,6 +62,3 @@ These settings, located at **Computer Configuration\Administrative Templates\Win |Allow hardware-accelerated rendering for Microsoft Defender Application Guard|Windows 10 Enterprise, 1803 or higher

Windows 10 Pro, 1803 or higher|Determines whether Microsoft Defender Application Guard renders graphics using hardware or software acceleration.|**Enabled.** Microsoft Defender Application Guard uses Hyper-V to access supported, high-security rendering graphics hardware (GPUs). These GPUs improve rendering performance and battery life while using Microsoft Defender Application Guard, particularly for video playback and other graphics-intensive use cases. If this setting is enabled without connecting any high-security rendering graphics hardware, Microsoft Defender Application Guard will automatically revert to software-based (CPU) rendering. **Important:** Be aware that enabling this setting with potentially compromised graphics devices or drivers might pose a risk to the host device.

**Disabled or not configured.** Microsoft Defender Application Guard uses software-based (CPU) rendering and won’t load any third-party graphics drivers or interact with any connected graphics hardware.| |Allow camera and microphone access in Microsoft Defender Application Guard|Windows 10 Enterprise, 1809 or higher

Windows 10 Pro, 1809 or higher|Determines whether to allow camera and microphone access inside Microsoft Defender Application Guard.|**Enabled.** Applications inside Microsoft Defender Application Guard are able to access the camera and microphone on the user's device. **Important:** Be aware that enabling this policy with a potentially compromised container could bypass camera and microphone permissions and access the camera and microphone without the user's knowledge.

**Disabled or not configured.** Applications inside Microsoft Defender Application Guard are unable to access the camera and microphone on the user's device.| |Allow Microsoft Defender Application Guard to use Root Certificate Authorities from a user's device|Windows 10 Enterprise, 1809 or higher

Windows 10 Pro, 1809 or higher|Determines whether Root Certificates are shared with Microsoft Defender Application Guard.|**Enabled.** Certificates matching the specified thumbprint are transferred into the container. Use a comma to separate multiple certificates.

**Disabled or not configured.** Certificates are not shared with Microsoft Defender Application Guard.| -|Allow users to trust files that open in Microsoft Defender Application Guard|Windows 10 Enterprise, 1809 or higher|Determines whether users are able to manually trust untrusted files to open them on the host.|**Enabled.** Users are able to manually trust files or trust files after an antivirus check.

**Disabled or not configured.** Users are unable to manually trust files and files continue to open in Microsoft Defender Application Guard.| - - From cc84a032d239e6335c27a53b9e1f24b91694e941 Mon Sep 17 00:00:00 2001 From: MatiG Date: Tue, 2 Mar 2021 08:41:26 +0200 Subject: [PATCH 132/206] add sles 12 --- .../microsoft-defender-atp/linux-support-events.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md index 3d8a64c5c6..48fdc09227 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md @@ -68,7 +68,7 @@ Microsoft Defender for Endpoint utilized `audit` framework from linux to track n service auditd start ``` -**On SLES15** systems, SYSCALL auditing in `auditd` is disabled by default and can explain missing events. +**On SLES 12 and 15** systems, SYSCALL auditing in `auditd` is disabled by default and can explain missing events. 1. To validate that SYSCALL auditing is not disabeld, list the current audit rules: From 964c0b5ff71bc22a5c6c11c804868ccb8de9bcae Mon Sep 17 00:00:00 2001 From: MatiG Date: Tue, 2 Mar 2021 08:42:50 +0200 Subject: [PATCH 133/206] rephrase --- .../microsoft-defender-atp/linux-support-events.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md index 48fdc09227..80c68187b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md @@ -68,7 +68,7 @@ Microsoft Defender for Endpoint utilized `audit` framework from linux to track n service auditd start ``` -**On SLES 12 and 15** systems, SYSCALL auditing in `auditd` is disabled by default and can explain missing events. +**On SLES** systems, SYSCALL auditing in `auditd` might be disabled by default and can be accounted for missing events. 1. To validate that SYSCALL auditing is not disabeld, list the current audit rules: From eacc8502e776bbe546a16a67ab7a994e149d167d Mon Sep 17 00:00:00 2001 From: alons8 <61512160+alons8@users.noreply.github.com> Date: Tue, 2 Mar 2021 14:11:03 +0200 Subject: [PATCH 134/206] Update user-roles.md --- .../threat-protection/microsoft-defender-atp/user-roles.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/user-roles.md b/windows/security/threat-protection/microsoft-defender-atp/user-roles.md index 5533555522..8197b29c28 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/user-roles.md +++ b/windows/security/threat-protection/microsoft-defender-atp/user-roles.md @@ -71,7 +71,7 @@ The following steps guide you on how to create roles in Microsoft Defender Secur > [!NOTE] > This setting is only available in the Microsoft Defender for Endpoint administrator (default) role. -- **Manage security settings in Security Center** - Configure alert suppression settings, manage folder exclusions for automation, onboard and offboard devices, and manage email notifications, manage evaluation lab +- **Manage security settings in Security Center** - Configure alert suppression settings, manage folder exclusions for automation, onboard and offboard devices, manage email notifications, manage evaluation lab, and upload files to Live Response library. - **Live response capabilities** - **Basic** commands: From 2f47ae59d3995e3bb9f3e724e3db68bfd403afda Mon Sep 17 00:00:00 2001 From: jaimeo Date: Tue, 2 Mar 2021 09:15:19 -0700 Subject: [PATCH 135/206] fixing link to PS script --- .../security/threat-protection/mbsa-removal-and-guidance.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/mbsa-removal-and-guidance.md b/windows/security/threat-protection/mbsa-removal-and-guidance.md index 09dc088c59..a9eed379da 100644 --- a/windows/security/threat-protection/mbsa-removal-and-guidance.md +++ b/windows/security/threat-protection/mbsa-removal-and-guidance.md @@ -25,14 +25,14 @@ MBSA was largely used in situations where neither Microsoft Update nor a local W A script can help you with an alternative to MBSA’s patch-compliance checking: - [Using WUA to Scan for Updates Offline](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline), which includes a sample .vbs script. -For a PowerShell alternative, see [Using WUA to Scan for Updates Offline with PowerShell](https://gallery.technet.microsoft.com/Using-WUA-to-Scan-for-f7e5e0be). +For a PowerShell alternative, see [Using WUA to Scan for Updates Offline with PowerShell](https://www.powershellgallery.com/packages/Scan-UpdatesOffline/1.0). For example: [![VBS script](images/vbs-example.png)](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline) [![PowerShell script](images/powershell-example.png)](https://gallery.technet.microsoft.com/Using-WUA-to-Scan-for-f7e5e0be) -The preceding scripts leverage the [WSUS offline scan file](https://support.microsoft.com/help/927745/detailed-information-for-developers-who-use-the-windows-update-offline) (wsusscn2.cab) to perform a scan and get the same information on missing updates as MBSA supplied. MBSA also relied on the wsusscn2.cab to determine which updates were missing from a given system without connecting to any online service or server. The wsusscn2.cab file is still available and there are currently no plans to remove or replace it. +The preceding scripts use the [WSUS offline scan file](https://support.microsoft.com/help/927745/detailed-information-for-developers-who-use-the-windows-update-offline) (wsusscn2.cab) to perform a scan and get the same information on missing updates as MBSA supplied. MBSA also relied on the wsusscn2.cab to determine which updates were missing from a given system without connecting to any online service or server. The wsusscn2.cab file is still available and there are currently no plans to remove or replace it. The wsusscn2.cab file contains the metadata of only security updates, update rollups and service packs available from Microsoft Update; it does not contain any information on non-security updates, tools or drivers. ## More Information From 5622d4f8f945dbcf92c3d82fb9c031ebefcff5a3 Mon Sep 17 00:00:00 2001 From: Andrei-George Stoica Date: Tue, 2 Mar 2021 19:05:47 +0200 Subject: [PATCH 136/206] Updating link to the PowerShell Gallery --- .../security/threat-protection/mbsa-removal-and-guidance.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/mbsa-removal-and-guidance.md b/windows/security/threat-protection/mbsa-removal-and-guidance.md index 8ed4a703ef..0bef93992f 100644 --- a/windows/security/threat-protection/mbsa-removal-and-guidance.md +++ b/windows/security/threat-protection/mbsa-removal-and-guidance.md @@ -25,12 +25,12 @@ MBSA was largely used in situations where neither Microsoft Update nor a local W A script can help you with an alternative to MBSA’s patch-compliance checking: - [Using WUA to Scan for Updates Offline](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline), which includes a sample .vbs script. -For a PowerShell alternative, see [Using WUA to Scan for Updates Offline with PowerShell](https://github.com/andreiztm/thedeploymentguy/blob/main/WUAOfflineScan/Scan-UpdatesOffline.ps1). +For a PowerShell alternative, see [Using WUA to Scan for Updates Offline with PowerShell](https://www.powershellgallery.com/packages/Scan-UpdatesOffline/1.0/Content/Scan-UpdatesOffline.ps1). For example: [![VBS script](images/vbs-example.png)](https://docs.microsoft.com/windows/desktop/wua_sdk/using-wua-to-scan-for-updates-offline) -[![PowerShell script](images/powershell-example.png)](https://github.com/andreiztm/thedeploymentguy/blob/main/WUAOfflineScan/Scan-UpdatesOffline.ps1) +[![PowerShell script](images/powershell-example.png)](https://www.powershellgallery.com/packages/Scan-UpdatesOffline/1.0/Content/Scan-UpdatesOffline.ps1) The preceding scripts leverage the [WSUS offline scan file](https://support.microsoft.com/help/927745/detailed-information-for-developers-who-use-the-windows-update-offline) ([wsusscn2.cab](https://go.microsoft.com/fwlink/?LinkID=74689)) to perform a scan and get the same information on missing updates as MBSA supplied. MBSA also relied on the wsusscn2.cab to determine which updates were missing from a given system without connecting to any online service or server. The wsusscn2.cab file is still available and there are currently no plans to remove or replace it. The wsusscn2.cab file contains the metadata of only security updates, update rollups and service packs available from Microsoft Update; it does not contain any information on non-security updates, tools or drivers. From 0a45c0a88462083eaaee98f8dc5a429dda727933 Mon Sep 17 00:00:00 2001 From: Charles Inglis <32555877+cinglis-msft@users.noreply.github.com> Date: Tue, 2 Mar 2021 12:21:53 -0500 Subject: [PATCH 137/206] Update update-compliance-get-started.md Added note about using DA config to config UC devices as well for simultaneous enrollment --- windows/deployment/update/update-compliance-get-started.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 4e77a4d513..7c19ac8184 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -66,6 +66,9 @@ To find your CommercialID within Azure: Once you've added Update Compliance to a workspace in your Azure subscription, you'll need to configure any devices you want to monitor. There are two ways to configure devices to use Update Compliance. +> [!NOTE] +> Customers using or that plan to use [Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview) can follow the process to [Enroll devices in Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/enroll-devices) to also enroll devices to Update Compliance, but note the Commercial ID and Log Analytics workspace must be the same for both solutions. + > [!NOTE] > After configuring devices via one of the two methods below, it can take up to 72 hours before devices are visible in the solution. Until then, Update Compliance will indicate it is still assessing devices. From fe6b9afd1d616689a605a31c7234ebdd3d3ff4df Mon Sep 17 00:00:00 2001 From: Jaime Ondrusek Date: Tue, 2 Mar 2021 10:24:30 -0700 Subject: [PATCH 138/206] Update update-compliance-get-started.md Small edits for clarity. --- windows/deployment/update/update-compliance-get-started.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/deployment/update/update-compliance-get-started.md b/windows/deployment/update/update-compliance-get-started.md index 7c19ac8184..8bf31e807a 100644 --- a/windows/deployment/update/update-compliance-get-started.md +++ b/windows/deployment/update/update-compliance-get-started.md @@ -67,7 +67,7 @@ To find your CommercialID within Azure: Once you've added Update Compliance to a workspace in your Azure subscription, you'll need to configure any devices you want to monitor. There are two ways to configure devices to use Update Compliance. > [!NOTE] -> Customers using or that plan to use [Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview) can follow the process to [Enroll devices in Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/enroll-devices) to also enroll devices to Update Compliance, but note the Commercial ID and Log Analytics workspace must be the same for both solutions. +> If you use or plan to use [Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/overview), follow the steps in [Enroll devices in Desktop Analytics](https://docs.microsoft.com/mem/configmgr/desktop-analytics/enroll-devices) to also enroll devices to Update Compliance. You should be aware that the Commercial ID and Log Analytics workspace must be the same for both Desktop Analytics and Update Compliance. > [!NOTE] > After configuring devices via one of the two methods below, it can take up to 72 hours before devices are visible in the solution. Until then, Update Compliance will indicate it is still assessing devices. From 65617cd8615cec8d2d7f0a33d2ed6676062a7195 Mon Sep 17 00:00:00 2001 From: MatiG Date: Tue, 2 Mar 2021 19:39:16 +0200 Subject: [PATCH 139/206] acrolinx fixes --- .../microsoft-defender-atp/linux-support-events.md | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md index 80c68187b9..33072a0f3f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-support-events.md @@ -30,8 +30,8 @@ ms.technology: mde This article provides some general steps to mitigate missing events or alerts in the [security center](https://securitycenter.windows.com/) portal. -Once Microsoft Defender for Endpoint has been installed properly on a device, a device page will be generated in the portal and _File_, _Process_, _Network_ and other events should appear in the timeline and advanced hunting pages. -In case events are not appearing or some types of events are missing, that could indicate some problem. +Once **Microsoft Defender for Endpoint** has been installed properly on a device, a _device page_ will be generated in the portal. You can review all recorded events in the timeline tab in the device page, or in advanced hunting page. This section troubleshoots the case of some or all expected events are missing. +For instance, if all _CreatedFile_ events are missing. ## Missing network and login events @@ -62,7 +62,7 @@ Microsoft Defender for Endpoint utilized `audit` framework from linux to track n └─16671 /opt/microsoft/mdatp/sbin/mdatp_audisp_plugin -d ``` -2. If auditd is stopped, please start it. +2. If `auditd` is marked as stopped, start it. ```bash service auditd start @@ -70,13 +70,13 @@ Microsoft Defender for Endpoint utilized `audit` framework from linux to track n **On SLES** systems, SYSCALL auditing in `auditd` might be disabled by default and can be accounted for missing events. -1. To validate that SYSCALL auditing is not disabeld, list the current audit rules: +1. To validate that SYSCALL auditing is not disabled, list the current audit rules: ```bash sudo auditctl -l ``` - if the following line is present, please remove it or edit it to enable Microsoft Defender for Endpoint to track specific SYSCALLs. + if the following line is present, remove it or edit it to enable Microsoft Defender for Endpoint to track specific SYSCALLs. ```output -a task, never @@ -86,7 +86,7 @@ Microsoft Defender for Endpoint utilized `audit` framework from linux to track n ## Missing file events -File events are collected with `fanotify` framework. In case some or all file events are missing please make sure fanotify is enabled on the device and that the file system is [supported](microsoft-defender-atp-linux.md#system-requirements). +File events are collected with `fanotify` framework. In case some or all file events are missing, make sure `fanotify` is enabled on the device and that the file system is [supported](microsoft-defender-atp-linux.md#system-requirements). List the filesystems on the machine with: From 01c698537c30c561470c82c1617bc9b39ae551c2 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 2 Mar 2021 10:37:02 -0800 Subject: [PATCH 140/206] mdatp urls download update --- .../Onboard-Windows-10-multi-session-device.md | 4 +--- .../configure-endpoints-non-windows.md | 2 -- .../configure-proxy-internet.md | 4 ++-- .../evaluate-exploit-protection.md | 12 ++++++------ .../threat-protection/microsoft-defender-atp/gov.md | 2 +- .../microsoft-defender-atp-linux.md | 2 +- .../microsoft-defender-atp-mac.md | 2 +- .../microsoft-defender-atp/production-deployment.md | 2 +- 8 files changed, 13 insertions(+), 17 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md b/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md index 6cfe7fc064..4adca6674f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md +++ b/windows/security/threat-protection/microsoft-defender-atp/Onboard-Windows-10-multi-session-device.md @@ -23,8 +23,6 @@ ms.technology: mde Applies to: - Windows 10 multi-session running on Windows Virtual Desktop (WVD) -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) > Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) @@ -33,7 +31,7 @@ Applies to: Microsoft Defender for Endpoint supports monitoring both VDI as well as Windows Virtual Desktop sessions. Depending on your organization's needs, you might need to implement VDI or Windows Virtual Desktop sessions to help your employees access corporate data and apps from an unmanaged device, remote location, or similar scenario. With Microsoft Defender for Endpoint, you can monitor these virtual machines for anomalous activity. - ## Before you begin +## Before you begin See [considerations for non-persistent VDI](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi#onboard-non-persistent-virtual-desktop-infrastructure-vdi-devices-1). Although [Windows Virtual Desktop](https://docs.microsoft.com/azure/virtual-desktop/overview) does not provide non-persistence options, it does provide ways to use a Windows image that can be used to provision new hosts and redeploy machines. This increases volatility in the environment, and thus impacts what entries are created and maintained in the Microsoft Defender Security Center ([https://securitycenter.windows.com](https://securitycenter.windows.com)), potentially reducing visibility for your security analysts. diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md index 595a2aec82..b9652cde87 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md @@ -27,8 +27,6 @@ ms.technology: mde - macOS - Linux -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) >Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-nonwindows-abovefoldlink) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md b/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md index 07ccd43835..94aee1893b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet.md @@ -114,7 +114,7 @@ The following downloadable spreadsheet lists the services and their associated U |**Spreadsheet of domains list**|**Description**| |:-----|:-----| -|![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx) +|![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://download.microsoft.com/download/8/a/5/8a51eee5-cd02-431c-9d78-a58b7f77c070/mde-urls.xlsx) If a proxy or firewall has HTTPS scanning (SSL inspection) enabled, exclude the domains listed in the above table from HTTPS scanning. @@ -157,7 +157,7 @@ Please see the following guidance to eliminate the wildcard (*) requirement for 3. Run the TestCloudConnection.exe tool from “C:\Program Files\Microsoft Monitoring Agent\Agent” to validate the connectivity and to see the required URLs for your specific workspace. -4. Check the Microsoft Defender for Endpoint URLs list for the complete list of requirements for your region (please refer to the Service URLs [Spreadsheet](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx)). +4. Check the Microsoft Defender for Endpoint URLs list for the complete list of requirements for your region (please refer to the Service URLs [Spreadsheet](https://download.microsoft.com/download/8/a/5/8a51eee5-cd02-431c-9d78-a58b7f77c070/mde-urls.xlsx)). ![Image of administrator in Windows PowerShell](images/admin-powershell.png) diff --git a/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md index 158be3a882..782ee46e24 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md @@ -99,12 +99,12 @@ To review which apps would have been blocked, open Event Viewer and filter for t | Feature | Provider/source | Event ID | Description | |---|---|--|---| - | Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 1 | ACG audit | - | Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 3 | Do not allow child processes audit | - | Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 5 | Block low integrity images audit | - | Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 7 | Block remote images audit | - | Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 9 | Disable win32k system calls audit | - | Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 11 | Code integrity guard audit | +| Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 1 | ACG audit | +| Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 3 | Do not allow child processes audit | +| Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 5 | Block low integrity images audit | +| Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 7 | Block remote images audit | +| Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 9 | Disable win32k system calls audit | +| Exploit protection | Security-Mitigations (Kernel Mode/User Mode) | 11 | Code integrity guard audit | ## See also diff --git a/windows/security/threat-protection/microsoft-defender-atp/gov.md b/windows/security/threat-protection/microsoft-defender-atp/gov.md index 0727c2332f..98632acbf5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/gov.md +++ b/windows/security/threat-protection/microsoft-defender-atp/gov.md @@ -115,7 +115,7 @@ The following downloadable spreadsheet lists the services and their associated U Spreadsheet of domains list | Description :-----|:----- -![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx) +![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://download.microsoft.com/download/8/a/5/8a51eee5-cd02-431c-9d78-a58b7f77c070/mde-urls.xlsx) For more information, see [Configure device proxy and Internet connectivity settings](configure-proxy-internet.md). diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md index b9232a219a..7ffe532e84 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux.md @@ -109,7 +109,7 @@ The following downloadable spreadsheet lists the services and their associated U |**Spreadsheet of domains list**|**Description**| |:-----|:-----| -|![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx) +|![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://download.microsoft.com/download/8/a/5/8a51eee5-cd02-431c-9d78-a58b7f77c070/mde-urls.xlsx) > [!NOTE] > For a more specific URL list, see [Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet#enable-access-to-microsoft-defender-atp-service-urls-in-the-proxy-server). diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md index c9e657dcaf..6d7d435373 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md @@ -104,7 +104,7 @@ The following downloadable spreadsheet lists the services and their associated U |**Spreadsheet of domains list**|**Description**| |:-----|:-----| -|![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

Download the spreadsheet here: [mdatp-urls.xlsx](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx). +|![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

Download the spreadsheet here: [mdatp-urls.xlsx](https://download.microsoft.com/download/8/a/5/8a51eee5-cd02-431c-9d78-a58b7f77c070/mde-urls.xlsx). Microsoft Defender for Endpoint can discover a proxy server by using the following discovery methods: - Proxy autoconfig (PAC) diff --git a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md index b0fe2b8a22..015d6437b3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md +++ b/windows/security/threat-protection/microsoft-defender-atp/production-deployment.md @@ -226,7 +226,7 @@ The following downloadable spreadsheet lists the services and their associated U |**Spreadsheet of domains list**|**Description**| |:-----|:-----| -|![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://github.com/MicrosoftDocs/windows-itpro-docs/raw/public/windows/security/threat-protection/microsoft-defender-atp/downloads/mdatp-urls.xlsx) +|![Thumb image for Microsoft Defender for Endpoint URLs spreadsheet](images/mdatp-urls.png)
| Spreadsheet of specific DNS records for service locations, geographic locations, and OS.

[Download the spreadsheet here.](https://download.microsoft.com/download/8/a/5/8a51eee5-cd02-431c-9d78-a58b7f77c070/mde-urls.xlsx) ### Microsoft Defender for Endpoint service backend IP range From 65a5e7e8f7b15dfb1dcd6bcf0ebd80dbb99e4dd4 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 2 Mar 2021 10:40:02 -0800 Subject: [PATCH 141/206] Update configure-endpoints-non-windows.md --- .../configure-endpoints-non-windows.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md index b9652cde87..cd696e2954 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md @@ -1,5 +1,5 @@ --- -title: Onboard non-Windows devices to the Microsoft Defender ATP service +title: Onboard non-Windows devices to the Microsoft Defender for Endpoint service description: Configure non-Windows devices so that they can send sensor data to the Microsoft Defender ATP service. keywords: onboard non-Windows devices, macos, linux, device management, configure Windows ATP devices, configure Microsoft Defender Advanced Threat Protection devices search.product: eADQiWindows 10XVcnh @@ -24,7 +24,10 @@ ms.technology: mde **Applies to:** +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) +**Platforms** - macOS - Linux From 143a067e85ff9b640f81c991d306a9fb2adcf019 Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 2 Mar 2021 10:45:35 -0800 Subject: [PATCH 142/206] acrolinx target --- .../microsoft-defender-atp/configure-server-endpoints.md | 3 --- .../microsoft-defender-atp/machine-groups.md | 3 --- .../microsoft-defender-atp/offboard-machines.md | 8 ++++---- .../microsoft-defender-atp/onboard-downlevel.md | 5 +++-- .../threat-protection/microsoft-defender-atp/rbac.md | 4 ---- 5 files changed, 7 insertions(+), 16 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index d9643ad099..dedf34b6ad 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -31,9 +31,6 @@ ms.technology: mde - Windows Server (SAC) version 1803 and later - Windows Server 2019 and later - Windows Server 2019 core edition -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) - > Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-configserver-abovefoldlink) diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md b/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md index 415f9626d7..c6140eeab7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine-groups.md @@ -24,11 +24,8 @@ ms.technology: mde **Applies to:** - - Azure Active Directory - Office 365 -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) > Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) diff --git a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md index aba249ebca..4e056cd0a5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md @@ -24,14 +24,14 @@ ms.technology: mde **Applies to:** +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) + +**Platforms** - macOS - Linux - Windows Server 2012 R2 - Windows Server 2016 -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) - - >Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-offboarddevices-abovefoldlink) diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel.md b/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel.md index 015e66faac..28fcfa5a1f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel.md @@ -24,13 +24,14 @@ ms.technology: mde **Applies to:** +- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) +- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) +**Platforms** - Windows 7 SP1 Enterprise - Windows 7 SP1 Pro - Windows 8.1 Pro - Windows 8.1 Enterprise -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) -- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) >Want to experience Defender for Endpoint? [Sign up for a free trial](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-downlevel-abovefoldlink). diff --git a/windows/security/threat-protection/microsoft-defender-atp/rbac.md b/windows/security/threat-protection/microsoft-defender-atp/rbac.md index b5bc0c196d..7ee2fc5593 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/rbac.md +++ b/windows/security/threat-protection/microsoft-defender-atp/rbac.md @@ -25,13 +25,9 @@ ms.technology: mde **Applies to:** - Azure Active Directory - Office 365 -- [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/?linkid=2154037) -- [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) - > Want to experience Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-rbac-abovefoldlink) - Using role-based access control (RBAC), you can create roles and groups within your security operations team to grant appropriate access to the portal. Based on the roles and groups you create, you have fine-grained control over what users with access to the portal can see and do. > [!VIDEO https://www.microsoft.com/en-us/videoplayer/embed/RE4bJ2a] From a7c0696e0e932df44c05432da7577ffdebba4eeb Mon Sep 17 00:00:00 2001 From: Daniel Simpson Date: Tue, 2 Mar 2021 10:45:49 -0800 Subject: [PATCH 143/206] acrolinx target --- .../microsoft-defender-atp/evaluate-exploit-protection.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md b/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md index 782ee46e24..963d383c5a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/evaluate-exploit-protection.md @@ -1,6 +1,6 @@ --- title: See how Exploit protection works in a demo -description: See how exploit protection can prevent suspicious behaviors from occurring on specific apps. +description: See how Exploit Protection can prevent suspicious behaviors from occurring on specific apps. keywords: Exploit protection, exploits, kernel, events, evaluate, demo, try, mitigation search.product: eADQiWindows 10XVcnh ms.prod: m365-security @@ -30,14 +30,14 @@ ms.technology: mde [Exploit protection](exploit-protection.md) helps protect devices from malware that uses exploits to spread and infect other devices. Mitigation can be applied to either the operating system or to an individual app. Many of the features that were part of the Enhanced Mitigation Experience Toolkit (EMET) are included in exploit protection. (The EMET has reached its end of support.) -Use exploit protection in audit mode to review related events in Event Viewer. By enabling audit mode, you'll see how mitigation works for certain apps in a test environment. Audit mode shows what *would* have happened if you enabled exploit protection in your production environment. This way, you can verify that exploit protection doesn't adversely affect your line-of-business apps, and see which suspicious or malicious events occur. +In audit, you can see how mitigation works for certain apps in a test environment. This shows what *would* have happened if you enabled exploit protection in your production environment. This way, you can verify that exploit protection doesn't adversely affect your line-of-business apps, and see which suspicious or malicious events occur. > [!TIP] > You can also visit the Microsoft Defender Testground website at [demo.wd.microsoft.com](https://demo.wd.microsoft.com?ocid=cx-wddocs-testground) to see how exploit protection works. -## Enable exploit protection in audit mode +## Enable exploit protection for testing -You can set mitigations in audit mode for specific programs by using the Windows Security app or Windows PowerShell. +You can set mitigations in a testing mode for specific programs by using the Windows Security app or Windows PowerShell. ### Windows Security app From f8608b4fe361b444875cd7237cd88a1553478e0f Mon Sep 17 00:00:00 2001 From: KC Cross Date: Tue, 2 Mar 2021 15:57:47 -0800 Subject: [PATCH 144/206] Score requirement is 80 not 64 --- .acrolinx-config.edn | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.acrolinx-config.edn b/.acrolinx-config.edn index 82c001e81f..a3a07ef4f2 100644 --- a/.acrolinx-config.edn +++ b/.acrolinx-config.edn @@ -35,7 +35,7 @@ " ## Acrolinx Scorecards -**The minimum Acrolinx topic score of 65 is required for all MARVEL content merged to the default branch.** +**The minimum Acrolinx topic score of 80 is required for all MARVEL content merged to the default branch.** If you need a scoring exception for content in this PR, add the *Sign off* and the *Acrolinx exception* labels to the PR. The PubOps Team will review the exception request and may take one or more of the following actions: From 6b6717df95c20608324c277382e9f0609c22c935 Mon Sep 17 00:00:00 2001 From: gkomatsu Date: Tue, 2 Mar 2021 17:19:01 -0800 Subject: [PATCH 145/206] Update diagnose-mdm-failures-in-windows-10.md Removed section specific to Windows Mobile Field Medic which is no longer available. --- .../mdm/diagnose-mdm-failures-in-windows-10.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md b/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md index db52ac149a..4f20ca31cd 100644 --- a/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md +++ b/windows/client-management/mdm/diagnose-mdm-failures-in-windows-10.md @@ -112,8 +112,8 @@ Example: Export the Debug logs ``` -## Collect logs from Windows 10 Mobile devices - + +  -## Collect logs remotely from Windows 10 Holographic or Windows 10 Mobile devices +## Collect logs remotely from Windows 10 Holographic -For holographic or mobile devices already enrolled in MDM, you can remotely collect MDM logs through the MDM channel using the [DiagnosticLog CSP](diagnosticlog-csp.md). +For holographic already enrolled in MDM, you can remotely collect MDM logs through the MDM channel using the [DiagnosticLog CSP](diagnosticlog-csp.md). You can use the DiagnosticLog CSP to enable the ETW provider. The provider ID is 3DA494E4-0FE2-415C-B895-FB5265C5C83B. The following examples show how to enable the ETW provider: From 73bacc5976d0f31b29d57c81775621b6e12b13f0 Mon Sep 17 00:00:00 2001 From: schmurky Date: Wed, 3 Mar 2021 20:02:10 +0800 Subject: [PATCH 146/206] changed author --- .../advanced-hunting-devicetvmsoftwarevulnerabilities-table.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md index a48860436e..bee199aaa9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwarevulnerabilities-table.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: maccruz -author: maccruz +author: schmurky ms.localizationpriority: medium manager: dansimp audience: ITPro From c0a38febcbc5d0413a4bf14765c85b434b4a0f57 Mon Sep 17 00:00:00 2001 From: schmurky Date: Wed, 3 Mar 2021 20:03:30 +0800 Subject: [PATCH 147/206] changed author --- .../advanced-hunting-devicetvmsoftwareinventory-table.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md index 99b53c1d97..e26443ea9d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-devicetvmsoftwareinventory-table.md @@ -9,7 +9,7 @@ ms.mktglfcycl: deploy ms.sitesec: library ms.pagetype: security ms.author: maccruz -author: maccruz +author: schmurky ms.localizationpriority: medium manager: dansimp audience: ITPro From 572679322d688e40efb98d13398e02133687ef54 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Wed, 3 Mar 2021 10:02:02 -0800 Subject: [PATCH 148/206] Update windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../threat-protection/microsoft-defender-atp/ios-whatsnew.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md index cb037ccf1c..1d3adbc525 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md @@ -28,7 +28,7 @@ ms.technology: mde - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) ## 1.1.15010101 From fcea645a233693d727a651e69aa323e67af9df67 Mon Sep 17 00:00:00 2001 From: jcaparas Date: Wed, 3 Mar 2021 10:02:11 -0800 Subject: [PATCH 149/206] Update windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../threat-protection/microsoft-defender-atp/ios-whatsnew.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md index 1d3adbc525..b8d75b40e7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ios-whatsnew.md @@ -32,5 +32,5 @@ Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.]( ## 1.1.15010101 -- With this version, we are announcing support for iPadOS / iPad devices. +- With this version, we are announcing support for iPadOS/iPad devices. - Bug fixes. From 7ff1bc27b0a5c87b4556e21add1d9ac4cd1a83d3 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:08:21 -0800 Subject: [PATCH 150/206] migration guide fixes --- .../switch-to-microsoft-defender-onboard.md | 6 ++---- .../switch-to-microsoft-defender-prepare.md | 9 +++------ .../switch-to-microsoft-defender-setup.md | 15 +++++++++------ 3 files changed, 14 insertions(+), 16 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index 750fbb2666..a76bb08a42 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -19,7 +19,7 @@ ms.collection: - m365solution-migratetomdatp ms.custom: migrationguides ms.topic: article -ms.date: 02/11/2021 +ms.date: 03/03/2021 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- @@ -31,9 +31,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho > Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) -|[![Phase 1: Prepare](images/prepare.png)](switch-to-microsoft-defender-prepare.md)
[Phase 1: Prepare2](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/setup.png)](switch-to-microsoft-defender-setup.md)
[Phase 2: Set up2](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard1](images/onboard.png)
Phase 3: Onboard | -|[![Phase 1: Prepare3](images/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
[Phase 1: Prepare4](switch-to-microsoft-defender-prepare.md) |[![Phase 2: Set up2](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
[Phase 2: Set up](switch-to-microsoft-defender-setup.md) |![Phase 3: Onboard2](images/phase-diagrams/onboard.png)
Phase 3: Onboard | - +| [![Phase 1: Prepare3](images/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
[Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) | [![Phase 2: Set up](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
[Phase 2: Set up](switch-to-microsoft-defender-setup.md) | ![Phase 3: Onboard](images/phase-diagrams/onboard.png)
Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md index dcc7c80896..3a4619439a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md @@ -19,7 +19,7 @@ ms.collection: - m365solution-migratetomdatp ms.topic: article ms.custom: migrationguides -ms.date: 02/11/2021 +ms.date: 03/03/2021 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- @@ -29,15 +29,12 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - -|![Phase 1: Prepare](images/prepare.png)
Phase 1: Prepare |[![Phase 2: Set up](images/setup.png)](switch-to-microsoft-defender-setup.md)
[Phase 2: Set up2](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/onboard.png)](switch-to-microsoft-defender-onboard.md)
[Phase 3: Onboard2](switch-to-microsoft-defender-onboard.md) | -|![Phase 1: Prepare2](images/phase-diagrams/prepare.png)
Phase 1: Prepare |[![Phase 2: Set up3](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
[Phase 2: Set up4](switch-to-microsoft-defender-setup.md) |[![Phase 3: Onboard3](images/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
[Phase 3: Onboard4](switch-to-microsoft-defender-onboard.md) | +Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) +| ![Phase 1: Prepare](images/phase-diagrams/prepare.png)
Phase 1: Prepare | [![Phase 2: Set up](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
[Phase 2: Set up](switch-to-microsoft-defender-setup.md) | [![Phase 3: Onboard](images/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
[Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | - **Welcome to the Prepare phase of [switching to Microsoft Defender for Endpoint](switch-to-microsoft-defender-migration.md#the-migration-process)**. This migration phase includes the following steps: diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index 8fdd6ac986..51b66bcf65 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -19,7 +19,7 @@ ms.collection: - m365solution-migratetomdatp ms.topic: article ms.custom: migrationguides -ms.date: 02/18/2021 +ms.date: 03/03/2021 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- @@ -29,10 +29,7 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - -|[![Phase 1: Prepare1](images/prepare.png)](switch-to-microsoft-defender-prepare.md)
[Phase 1: Prepare2](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/setup.png)
Phase 2: Set up |[![Phase 3: Onboard1](images/onboard.png)](switch-to-microsoft-defender-onboard.md)
[Phase 3: Onboard2](switch-to-microsoft-defender-onboard.md) | -|[![Phase 1: Prepare3](images/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
[Phase 1: Prepare4](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up2](images/phase-diagrams/setup.png)
Phase 2: Set up |[![Phase 3: Onboard3](images/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
[Phase 3: Onboard4](switch-to-microsoft-defender-onboard.md) | +|[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
[Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/phase-diagrams/setup.png)
Phase 2: Set up |[![Phase 3: Onboard3](images/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
[Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | @@ -92,8 +89,14 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d 3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
`Get-Service -Name windefend` +#### Are you using Windows Server 2016? + +If you're using Windows Server 2016 and are having trouble enabling Microsoft Defender Antivirus, use the following PowerShell cmdlet: + +`mpcmdrun -wdenable` + > [!TIP] -> Need help? See [Microsoft Defender Antivirus on Windows Server](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016). +> Still need help? See [Microsoft Defender Antivirus on Windows Server](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016). ### Set Microsoft Defender Antivirus to passive mode on Windows Server From a2b2227dbabe27347f9b09da9ac1ee7032b70975 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:09:08 -0800 Subject: [PATCH 151/206] Update switch-to-microsoft-defender-onboard.md --- .../switch-to-microsoft-defender-onboard.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index a76bb08a42..70518a3814 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -87,6 +87,9 @@ To do this, visit the Microsoft Defender for Endpoint demo scenarios site ([http - Potentially Unwanted Applications (PUA) - Network Protection (NP) +> [!IMPORTANT] +> If you are using Windows Server 2016, you might have to start Microsoft Defender Antivirus manually. You can do this by using the PowerShell cmdlet `mpcmdrun.exe -wdenable` on the device. + ## Next steps **Congratulations**! You have completed your [migration to Microsoft Defender for Endpoint](switch-to-microsoft-defender-migration.md#the-migration-process)! From 887f6bed90d500a810682263dc72b4bafa8b906e Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:11:30 -0800 Subject: [PATCH 152/206] fixing migration guides --- .../switch-to-microsoft-defender-prepare.md | 2 -- .../switch-to-microsoft-defender-setup.md | 1 - .../symantec-to-microsoft-defender-atp-migration.md | 4 +--- 3 files changed, 1 insertion(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md index 3a4619439a..c34bb7e48e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md @@ -29,8 +29,6 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - | ![Phase 1: Prepare](images/phase-diagrams/prepare.png)
Phase 1: Prepare | [![Phase 2: Set up](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
[Phase 2: Set up](switch-to-microsoft-defender-setup.md) | [![Phase 3: Onboard](images/phase-diagrams/onboard.png)](switch-to-microsoft-defender-onboard.md)
[Phase 3: Onboard](switch-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index 51b66bcf65..fb128c2f4b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -33,7 +33,6 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho |--|--|--| ||*You are here!* | | - **Welcome to the Setup phase of [switching to Microsoft Defender for Endpoint](switch-to-microsoft-defender-migration.md#the-migration-process)**. This phase includes the following steps: 1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode). 2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus). diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md index a3decded8f..fd3455c364 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-migration.md @@ -19,7 +19,7 @@ ms.collection: - m365solution-symantecmigrate - m365solution-overview ms.topic: conceptual -ms.date: 02/11/2021 +ms.date: 03/03/2021 ms.custom: migrationguides ms.reviewer: depicker, yongrhee, chriggs --- @@ -30,9 +30,7 @@ If you are planning to switch from Symantec Endpoint Protection (Symantec) to [M **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) -[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] :::image type="content" source="images/symantec-mde-migration.png" alt-text="Overview of migrating from Symantec to Defender for Endpoint"::: When you make the switch from Symantec to Defender for Endpoint, you begin with your Symantec solution in active mode, configure Defender for Endpoint in passive mode, onboard to Defender for Endpoint, and then set Defender for Endpoint to active mode and remove Symantec. From 87373c7d61db84fbbbcabaa2e37b8a6a860e5321 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:12:02 -0800 Subject: [PATCH 153/206] Update symantec-to-microsoft-defender-atp-prepare.md --- .../symantec-to-microsoft-defender-atp-prepare.md | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index 4195304f83..170fae78d0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -18,7 +18,7 @@ ms.collection: - M365-security-compliance - m365solution-symantecmigrate ms.topic: article -ms.date: 02/11/2021 +ms.date: 03/03/2021 ms.custom: migrationguides ms.reviewer: depicker, yongrhee, chriggs --- @@ -29,11 +29,6 @@ ms.reviewer: depicker, yongrhee, chriggs - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - -[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - - |![Phase 1: Prepare](images/phase-diagrams/prepare.png)
Phase 1: Prepare |[![Phase 2: Set up](images/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
[Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
[Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| |*You are here!*| | | From 600688c44cff30da78b2c3e51352f503bfd12d04 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:14:48 -0800 Subject: [PATCH 154/206] Update mcafee-to-microsoft-defender-onboard.md --- .../mcafee-to-microsoft-defender-onboard.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md index 4406338cb7..14270c916e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md @@ -20,22 +20,18 @@ ms.collection: - m365solution-scenario ms.custom: migrationguides ms.topic: article -ms.date: 02/11/2021 +ms.date: 03/03/2021 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- # Migrate from McAfee - Phase 3: Onboard to Microsoft Defender for Endpoint -[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) |[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
[Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |[![Phase 2: Set up](images/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
[Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |![Phase 3: Onboard](images/phase-diagrams/onboard.png)
Phase 3: Onboard | - |--|--|--| || |*You are here!* | @@ -94,6 +90,9 @@ To do this, visit the Microsoft Defender for Endpoint demo scenarios site ([http - Potentially Unwanted Applications (PUA) - Network Protection (NP) +> [!IMPORTANT] +> If you are using Windows Server 2016, you might have to start Microsoft Defender Antivirus manually. You can do this by using the PowerShell cmdlet `mpcmdrun.exe -wdenable` on the device. + ## Next steps **Congratulations**! You have completed your [migration from McAfee to Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-migration.md#the-migration-process)! From a1180e6f5d5fb838a47edc53943fbca238ed7e45 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:15:15 -0800 Subject: [PATCH 155/206] Update mcafee-to-microsoft-defender-prepare.md --- .../mcafee-to-microsoft-defender-prepare.md | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md index bf10e65074..4b9d123c45 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md @@ -20,21 +20,16 @@ ms.collection: - m365solution-scenario ms.topic: article ms.custom: migrationguides -ms.date: 02/11/2021 +ms.date: 03/03/2021 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- # Migrate from McAfee - Phase 1: Prepare for your migration -[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - - |![Phase 1: Prepare](images/phase-diagrams/prepare.png)
Phase 1: Prepare |[![Phase 2: Set up](images/phase-diagrams/setup.png)](mcafee-to-microsoft-defender-setup.md)
[Phase 2: Set up](mcafee-to-microsoft-defender-setup.md) |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
[Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| |*You are here!*| | | From 0c06872eab377721c3d3b471812ef0a6460ebb92 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:16:33 -0800 Subject: [PATCH 156/206] migration guide fixes --- .../mcafee-to-microsoft-defender-setup.md | 16 ++++++++-------- ...symantec-to-microsoft-defender-atp-onboard.md | 3 +++ .../symantec-to-microsoft-defender-atp-setup.md | 7 +------ 3 files changed, 12 insertions(+), 14 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index 92e59213ed..dc706c0bbc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -20,26 +20,20 @@ ms.collection: - m365solution-scenario ms.topic: article ms.custom: migrationguides -ms.date: 02/18/2021 +ms.date: 03/03/2021 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- # Migrate from McAfee - Phase 2: Set up Microsoft Defender for Endpoint - -[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - **Applies to:** - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - |[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](mcafee-to-microsoft-defender-prepare.md)
[Phase 1: Prepare](mcafee-to-microsoft-defender-prepare.md) |![Phase 2: Set up](images/phase-diagrams/setup.png)
Phase 2: Set up |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](mcafee-to-microsoft-defender-onboard.md)
[Phase 3: Onboard](mcafee-to-microsoft-defender-onboard.md) | |--|--|--| ||*You are here!* | | - **Welcome to the Setup phase of [migrating from McAfee Endpoint Security (McAfee) to Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-migration.md#the-migration-process)**. This phase includes the following steps: 1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode). 2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus). @@ -107,8 +101,14 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d `Get-Service -Name windefend` +#### Are you using Windows Server 2016? + +If you're using Windows Server 2016 and are having trouble enabling Microsoft Defender Antivirus, use the following PowerShell cmdlet: + +`mpcmdrun -wdenable` + > [!TIP] -> Need help? See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016). +> Still need help? See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016). ### Set Microsoft Defender Antivirus to passive mode on Windows Server diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index 0b8c881393..0a57bd436c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -100,6 +100,9 @@ To do this, visit the Microsoft Defender for Endpoint demo scenarios site ([http - Potentially Unwanted Applications (PUA) - Network Protection (NP) +> [!IMPORTANT] +> If you are using Windows Server 2016, you might have to start Microsoft Defender Antivirus manually. You can do this by using the PowerShell cmdlet `mpcmdrun.exe -wdenable` on the device. + ## Next steps **Congratulations**! You have completed your [migration from Symantec to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-migration.md#the-migration-process)! diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index c9823a17ab..f154c8d004 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -18,7 +18,7 @@ ms.collection: - M365-security-compliance - m365solution-symantecmigrate ms.topic: article -ms.date: 02/18/2021 +ms.date: 03/03/2021 ms.custom: migrationguides ms.reviewer: depicker, yongrhee, chriggs --- @@ -29,11 +29,6 @@ ms.reviewer: depicker, yongrhee, chriggs - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - -[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - - |[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
[Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |![Phase 2: Set up](images/phase-diagrams/setup.png)
Phase 2: Set up |[![Phase 3: Onboard](images/phase-diagrams/onboard.png)](symantec-to-microsoft-defender-atp-onboard.md)
[Phase 3: Onboard](symantec-to-microsoft-defender-atp-onboard.md) | |--|--|--| ||*You are here!* | | From 9c9927906d2d25fd1452ba7284982c20e3007691 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:17:04 -0800 Subject: [PATCH 157/206] Update mcafee-to-microsoft-defender-migration.md --- .../mcafee-to-microsoft-defender-migration.md | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index 73a8f1bbb0..f32f4af0d0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -20,7 +20,7 @@ ms.collection: - m365solution-overview ms.topic: conceptual ms.custom: migrationguides -ms.date: 02/11/2021 +ms.date: 03/03/2021 ms.reviewer: jesquive, chventou, jonix, chriggs, owtho --- @@ -30,8 +30,6 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection) (Microsoft Defender for Endpoint), you're in the right place. Use this article as a guide. From ab5b17f85c8b5ad575331c14e5ac8c34a2fc1dd6 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:19:24 -0800 Subject: [PATCH 158/206] migration guide fixes --- .../switch-to-microsoft-defender-onboard.md | 2 -- .../symantec-to-microsoft-defender-atp-onboard.md | 7 +------ 2 files changed, 1 insertion(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index 70518a3814..78bcc79503 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -29,8 +29,6 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - | [![Phase 1: Prepare3](images/phase-diagrams/prepare.png)](switch-to-microsoft-defender-prepare.md)
[Phase 1: Prepare](switch-to-microsoft-defender-prepare.md) | [![Phase 2: Set up](images/phase-diagrams/setup.png)](switch-to-microsoft-defender-setup.md)
[Phase 2: Set up](switch-to-microsoft-defender-setup.md) | ![Phase 3: Onboard](images/phase-diagrams/onboard.png)
Phase 3: Onboard | |--|--|--| || |*You are here!* | diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index 0a57bd436c..8ef6527940 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -18,7 +18,7 @@ ms.collection: - M365-security-compliance - m365solution-symantecmigrate ms.topic: article -ms.date: 02/11/2021 +ms.date: 03/03/2021 ms.custom: migrationguides ms.reviewer: depicker, yongrhee, chriggs --- @@ -29,11 +29,6 @@ ms.reviewer: depicker, yongrhee, chriggs - [Microsoft Defender for Endpoint](https://go.microsoft.com/fwlink/p/?linkid=2146631) - [Microsoft 365 Defender](https://go.microsoft.com/fwlink/?linkid=2118804) -> Want to experience Microsoft Defender for Endpoint? [Sign up for a free trial.](https://www.microsoft.com/microsoft-365/windows/microsoft-defender-atp?ocid=docs-wdatp-exposedapis-abovefoldlink) - -[!INCLUDE [Microsoft 365 Defender rebranding](../../includes/microsoft-defender.md)] - - |[![Phase 1: Prepare](images/phase-diagrams/prepare.png)](symantec-to-microsoft-defender-atp-prepare.md)
[Phase 1: Prepare](symantec-to-microsoft-defender-atp-prepare.md) |[![Phase 2: Set up](images/phase-diagrams/setup.png)](symantec-to-microsoft-defender-atp-setup.md)
[Phase 2: Set up](symantec-to-microsoft-defender-atp-setup.md) |![Phase 3: Onboard](images/phase-diagrams/onboard.png)
Phase 3: Onboard | |--|--|--| || |*You are here!* | From 4dc2048c4f1e0b976adf0f308f2560c6b7fb1ce2 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 12:24:16 -0800 Subject: [PATCH 159/206] Update symantec-to-microsoft-defender-atp-setup.md --- .../symantec-to-microsoft-defender-atp-setup.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index f154c8d004..da841e02fc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -76,8 +76,14 @@ Now that you're moving from Symantec to Microsoft Defender for Endpoint, you'll 3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
`Get-Service -Name windefend` +#### Are you using Windows Server 2016? + +If you're using Windows Server 2016 and are having trouble enabling Microsoft Defender Antivirus, use the following PowerShell cmdlet: + +`mpcmdrun -wdenable` + > [!TIP] -> Need help? See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016). +> Still need help? See [Microsoft Defender Antivirus on Windows Server 2016 and 2019](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-on-windows-server-2016). ### Set Microsoft Defender Antivirus to passive mode on Windows Server From d2f1c12282a1e7423892703a187d33e02c2153ea Mon Sep 17 00:00:00 2001 From: Joey Caparas Date: Wed, 3 Mar 2021 14:20:41 -0800 Subject: [PATCH 160/206] add file prevalence and rebrand --- .../microsoft-defender-atp/add-or-remove-machine-tags.md | 2 +- .../advanced-hunting-assignedipaddress-function.md | 4 ++-- .../advanced-hunting-extend-data.md | 2 +- .../advanced-hunting-fileprofile-function.md | 4 ++-- .../threat-protection/microsoft-defender-atp/alerts.md | 2 +- .../microsoft-defender-atp/api-hello-world.md | 4 ++-- .../microsoft-defender-atp/api-power-bi.md | 2 +- .../microsoft-defender-atp/apis-intro.md | 2 +- .../microsoft-defender-atp/assign-portal-access.md | 2 +- .../microsoft-defender-atp/attack-simulations.md | 2 +- .../attack-surface-reduction-faq.md | 2 +- .../microsoft-defender-atp/attack-surface-reduction.md | 2 +- .../microsoft-defender-atp/basic-permissions.md | 2 +- .../configure-email-notifications.md | 4 ++-- .../microsoft-defender-atp/configure-endpoints-gp.md | 2 +- .../microsoft-defender-atp/configure-endpoints-mdm.md | 2 +- .../configure-endpoints-non-windows.md | 2 +- .../microsoft-defender-atp/configure-endpoints-sccm.md | 2 +- .../microsoft-defender-atp/configure-endpoints-script.md | 2 +- .../microsoft-defender-atp/configure-endpoints-vdi.md | 2 +- .../microsoft-defender-atp/configure-server-endpoints.md | 2 +- .../microsoft-defender-atp/configure-siem.md | 2 +- .../microsoft-defender-atp/create-alert-by-reference.md | 2 +- .../microsoft-defender-atp/data-retention-settings.md | 2 +- .../microsoft-defender-atp/delete-ti-indicator-by-id.md | 2 +- .../get-alert-related-domain-info.md | 2 +- .../get-alert-related-files-info.md | 2 +- .../microsoft-defender-atp/get-alert-related-ip-info.md | 2 +- .../get-alert-related-machine-info.md | 2 +- .../get-alert-related-user-info.md | 2 +- .../microsoft-defender-atp/get-ip-related-alerts.md | 2 +- .../microsoft-defender-atp/get-ip-statistics.md | 2 +- .../microsoft-defender-atp/get-kbinfo-collection.md | 2 +- .../microsoft-defender-atp/get-machine-by-id.md | 2 +- .../microsoft-defender-atp/get-machine-log-on-users.md | 2 +- .../microsoft-defender-atp/get-machine-related-alerts.md | 2 +- .../microsoft-defender-atp/get-machineaction-object.md | 2 +- .../get-machineactions-collection.md | 2 +- .../get-machinesecuritystates-collection.md | 2 +- .../get-ti-indicators-collection.md | 2 +- .../microsoft-defender-atp/get-user-information.md | 2 +- .../microsoft-defender-atp/get-user-related-alerts.md | 2 +- .../microsoft-defender-atp/get-user-related-machines.md | 2 +- .../microsoft-defender-atp/helpful-resources.md | 4 ++-- .../microsoft-defender-atp/import-ti-indicators.md | 2 +- .../microsoft-defender-atp/investigate-alerts.md | 2 +- .../microsoft-defender-atp/investigate-domain.md | 4 ++-- .../microsoft-defender-atp/investigate-files.md | 9 +++++++-- .../microsoft-defender-atp/isolate-machine.md | 2 +- .../microsoft-defender-atp/linux-whatsnew.md | 2 +- .../live-response-command-examples.md | 2 +- .../microsoft-defender-atp/mac-schedule-scan-atp.md | 2 +- .../microsoft-defender-atp/mac-whatsnew.md | 4 ++-- .../threat-protection/microsoft-defender-atp/machine.md | 2 +- .../microsoft-defender-atp/machineaction.md | 2 +- .../microsoft-defender-atp/manage-alerts.md | 2 +- .../microsoft-defender-atp/manage-suppression-rules.md | 2 +- .../microsoft-cloud-app-security-integration.md | 2 +- .../microsoft-defender-advanced-threat-protection.md | 2 +- .../microsoft-defender-atp/microsoft-defender-atp-mac.md | 2 +- .../microsoft-defender-security-center.md | 2 +- .../microsoft-defender-atp/microsoft-threat-experts.md | 2 +- .../microsoft-defender-atp/offboard-machines.md | 2 +- .../microsoft-defender-atp/onboard-configure.md | 2 +- .../overview-attack-surface-reduction.md | 2 +- .../microsoft-defender-atp/portal-overview.md | 2 +- .../microsoft-defender-atp/post-ti-indicator.md | 2 +- .../microsoft-defender-atp/preview-settings.md | 2 +- .../threat-protection/microsoft-defender-atp/preview.md | 4 ++-- .../microsoft-defender-atp/raw-data-export-event-hub.md | 2 +- .../microsoft-defender-atp/raw-data-export-storage.md | 2 +- .../microsoft-defender-atp/raw-data-export.md | 2 +- .../microsoft-defender-atp/review-alerts.md | 2 +- .../microsoft-defender-atp/run-advanced-query-api.md | 2 +- .../run-advanced-query-sample-powershell.md | 2 +- .../run-advanced-query-sample-python.md | 2 +- .../microsoft-defender-atp/run-detection-test.md | 2 +- .../security-operations-dashboard.md | 2 +- .../microsoft-defender-atp/set-device-value.md | 2 +- .../microsoft-defender-atp/stop-and-quarantine-file.md | 2 +- .../switch-to-microsoft-defender-onboard.md | 2 +- .../symantec-to-microsoft-defender-atp-onboard.md | 2 +- .../threat-and-vuln-mgt-event-timeline.md | 2 +- .../microsoft-defender-atp/threat-indicator-concepts.md | 4 ++-- .../microsoft-defender-atp/ti-indicator.md | 2 +- .../microsoft-defender-atp/troubleshoot-asr.md | 4 ++-- .../microsoft-defender-atp/troubleshoot-mdatp.md | 4 ++-- .../microsoft-defender-atp/troubleshoot-np.md | 4 ++-- .../troubleshoot-onboarding-error-messages.md | 4 ++-- .../microsoft-defender-atp/tvm-exposure-score.md | 2 +- .../threat-protection/microsoft-defender-atp/user.md | 2 +- 91 files changed, 110 insertions(+), 105 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md index 4b005be826..99ac4ec111 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md +++ b/windows/security/threat-protection/microsoft-defender-atp/add-or-remove-machine-tags.md @@ -1,6 +1,6 @@ --- title: Add or Remove Machine Tags API -description: Learn how to use the Add or Remove machine tags API to adds or remove a tag for a machine in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Add or Remove machine tags API to adds or remove a tag for a machine in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, tags, machine tags search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-assignedipaddress-function.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-assignedipaddress-function.md index ec9f2b383d..b28c3e7902 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-assignedipaddress-function.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-assignedipaddress-function.md @@ -1,7 +1,7 @@ --- -title: AssignedIPAddresses() function in advanced hunting for Microsoft Defender Advanced Threat Protection +title: AssignedIPAddresses() function in advanced hunting for Microsoft Defender for Endpoint description: Learn how to use the AssignedIPAddresses() function to get the latest IP addresses assigned to a device -keywords: advanced hunting, threat hunting, cyber threat hunting, mdatp, Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, Windows Defender, Windows Defender ATP, Windows Defender Advanced Threat Protection, search, query, telemetry, schema reference, kusto, FileProfile, file profile, function, enrichment +keywords: advanced hunting, threat hunting, cyber threat hunting, mdatp, Microsoft Defender ATP, Microsoft Defender for Endpoint, Windows Defender, Windows Defender ATP, Windows Defender Advanced Threat Protection, search, query, telemetry, schema reference, kusto, FileProfile, file profile, function, enrichment search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-extend-data.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-extend-data.md index e1120e33aa..0ce701f20c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-extend-data.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-extend-data.md @@ -1,7 +1,7 @@ --- title: Extend advanced hunting coverage with the right settings description: Check auditing settings on Windows devices and other settings to help ensure that you get the most comprehensive data in advanced hunting -keywords: advanced hunting, incident, pivot, entity, audit settings, user account management, security group management, threat hunting, cyber threat hunting, search, query, telemetry, mdatp, Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, Windows Defender, Windows Defender ATP, Windows Defender Advanced Threat Protection +keywords: advanced hunting, incident, pivot, entity, audit settings, user account management, security group management, threat hunting, cyber threat hunting, search, query, telemetry, mdatp, Microsoft Defender ATP, Microsoft Defender for Endpoint, Windows Defender, Windows Defender ATP, Windows Defender Advanced Threat Protection search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-fileprofile-function.md b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-fileprofile-function.md index ca6bab10ed..4b06e0796d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-fileprofile-function.md +++ b/windows/security/threat-protection/microsoft-defender-atp/advanced-hunting-fileprofile-function.md @@ -1,7 +1,7 @@ --- -title: FileProfile() function in advanced hunting for Microsoft Defender Advanced Threat Protection +title: FileProfile() function in advanced hunting for Microsoft Defender for Endpoint description: Learn how to use the FileProfile() to enrich information about files in your advanced hunting query results -keywords: advanced hunting, threat hunting, cyber threat hunting, mdatp, Microsoft Defender ATP, Microsoft Defender Advanced Threat Protection, Windows Defender, Windows Defender ATP, Windows Defender Advanced Threat Protection, search, query, telemetry, schema reference, kusto, FileProfile, file profile, function, enrichment +keywords: advanced hunting, threat hunting, cyber threat hunting, mdatp, Microsoft Defender ATP, Microsoft Defender for Endpoint, Windows Defender, Windows Defender ATP, Windows Defender Advanced Threat Protection, search, query, telemetry, schema reference, kusto, FileProfile, file profile, function, enrichment search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/alerts.md b/windows/security/threat-protection/microsoft-defender-atp/alerts.md index 16357997f1..554a001277 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/alerts.md @@ -1,6 +1,6 @@ --- title: Get alerts API -description: Learn about the methods and properties of the Alert resource type in Microsoft Defender Advanced Threat Protection. +description: Learn about the methods and properties of the Alert resource type in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, alerts, recent search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md b/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md index 7793136a50..2f97bfca70 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-hello-world.md @@ -1,7 +1,7 @@ --- -title: Hello World for Microsoft Defender Advanced Threat Protection API +title: Hello World for Microsoft Defender for Endpoint API ms.reviewer: -description: Create a practice 'Hello world'-style API call to the Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) API. +description: Create a practice 'Hello world'-style API call to the Microsoft Defender for Endpoint (Microsoft Defender ATP) API. keywords: apis, supported apis, advanced hunting, query search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md index e77e799097..b63d650adb 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/api-power-bi.md @@ -1,7 +1,7 @@ --- title: Microsoft Defender ATP APIs connection to Power BI ms.reviewer: -description: Create a Power Business Intelligence (BI) report on top of Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) APIs. +description: Create a Power Business Intelligence (BI) report on top of Microsoft Defender for Endpoint APIs. keywords: apis, supported apis, Power BI, reports search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/apis-intro.md b/windows/security/threat-protection/microsoft-defender-atp/apis-intro.md index 1983cf9886..da77401c86 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/apis-intro.md +++ b/windows/security/threat-protection/microsoft-defender-atp/apis-intro.md @@ -1,5 +1,5 @@ --- -title: Access the Microsoft Defender Advanced Threat Protection APIs +title: Access the Microsoft Defender for Endpoint APIs ms.reviewer: description: Learn how you can use APIs to automate workflows and innovate based on Microsoft Defender ATP capabilities keywords: apis, api, wdatp, open api, microsoft defender atp api, public api, supported apis, alerts, device, user, domain, ip, file, advanced hunting, query diff --git a/windows/security/threat-protection/microsoft-defender-atp/assign-portal-access.md b/windows/security/threat-protection/microsoft-defender-atp/assign-portal-access.md index 5efaab6c51..16e0ec7d6d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/assign-portal-access.md +++ b/windows/security/threat-protection/microsoft-defender-atp/assign-portal-access.md @@ -1,6 +1,6 @@ --- title: Assign user access to Microsoft Defender Security Center -description: Assign read and write or read only access to the Microsoft Defender Advanced Threat Protection portal. +description: Assign read and write or read only access to the Microsoft Defender for Endpoint portal. keywords: assign user roles, assign read and write access, assign read only access, user, user roles, roles search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-simulations.md b/windows/security/threat-protection/microsoft-defender-atp/attack-simulations.md index 047eae7fed..0eeda99ae3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-simulations.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-simulations.md @@ -1,7 +1,7 @@ --- title: Experience Microsoft Defender ATP through simulated attacks description: Run the provided attack scenario simulations to experience how Microsoft Defender ATP can detect, investigate, and respond to breaches. -keywords: wdatp, test, scenario, attack, simulation, simulated, diy, microsoft defender advanced threat protection +keywords: wdatp, test, scenario, attack, simulation, simulated, diy, Microsoft Defender for Endpoint search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md index da9a3daa46..a9947f2875 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction-faq.md @@ -1,7 +1,7 @@ --- title: Attack surface reduction frequently asked questions (FAQ) description: Find answers to frequently asked questions about Microsoft Defender ATP's attack surface reduction rules. -keywords: Attack surface reduction rules, asr, hips, host intrusion prevention system, protection rules, anti-exploit, antiexploit, exploit, infection prevention, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP +keywords: Attack surface reduction rules, asr, hips, host intrusion prevention system, protection rules, anti-exploit, antiexploit, exploit, infection prevention, microsoft defender for endpoint search.product: eADQiWindows 10XVcnh ms.pagetype: security ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md index 7e26356956..404fde4c79 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction.md @@ -1,7 +1,7 @@ --- title: Use attack surface reduction rules to prevent malware infection description: Attack surface reduction rules can help prevent exploits from using apps and scripts to infect devices with malware. -keywords: Attack surface reduction rules, asr, hips, host intrusion prevention system, protection rules, anti-exploit, antiexploit, exploit, infection prevention, Microsoft Defender Advanced Threat Protection, Microsoft Defender ATP +keywords: Attack surface reduction rules, asr, hips, host intrusion prevention system, protection rules, anti-exploit, antiexploit, exploit, infection prevention, Microsoft Defender for Endpoint, Microsoft Defender ATP search.product: eADQiWindows 10XVcnh ms.prod: m365-security ms.mktglfcycl: manage diff --git a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md index f543ecb8a9..2fcb21f2da 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md +++ b/windows/security/threat-protection/microsoft-defender-atp/basic-permissions.md @@ -1,6 +1,6 @@ --- title: Use basic permissions to access Microsoft Defender Security Center -description: Learn how to use basic permissions to access the Microsoft Defender Advanced Threat Protection portal. +description: Learn how to use basic permissions to access the Microsoft Defender for Endpoint portal. keywords: assign user roles, assign read and write access, assign read only access, user, user roles, roles search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications.md b/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications.md index 904b50ea79..34b3c01017 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-email-notifications.md @@ -1,6 +1,6 @@ --- -title: Configure alert notifications in Microsoft Defender ATP -description: You can use Microsoft Defender Advanced Threat Protection to configure email notification settings for security alerts, based on severity and other criteria. +title: Configure alert notifications in Microsoft Defender for Endpoint +description: You can use Microsoft Defender for Endpoint to configure email notification settings for security alerts, based on severity and other criteria. keywords: email notifications, configure alert notifications, microsoft defender atp notifications, microsoft defender atp alerts, windows 10 enterprise, windows 10 education search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp.md index 166d6e77a5..5018528f0f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp.md @@ -1,7 +1,7 @@ --- title: Onboard Windows 10 devices to Microsoft Defender ATP via Group Policy description: Use Group Policy to deploy the configuration package on Windows 10 devices so that they are onboarded to the service. -keywords: configure devices using group policy, device management, configure Windows ATP devices, onboard Microsoft Defender Advanced Threat Protection devices, group policy +keywords: configure devices using group policy, device management, configure Windows ATP devices, onboard Microsoft Defender for Endpoint devices, group policy search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm.md index 603253f4a4..586ee60a55 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm.md @@ -1,7 +1,7 @@ --- title: Onboard Windows 10 devices using Mobile Device Management tools description: Use Mobile Device Management tools to deploy the configuration package on devices so that they are onboarded to the service. -keywords: onboard devices using mdm, device management, onboard Windows ATP devices, onboard Microsoft Defender Advanced Threat Protection devices, mdm +keywords: onboard devices using mdm, device management, onboard Windows ATP devices, onboard Microsoft Defender for Endpoint devices, mdm search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md index cd696e2954..8b9f7b018e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows.md @@ -1,7 +1,7 @@ --- title: Onboard non-Windows devices to the Microsoft Defender for Endpoint service description: Configure non-Windows devices so that they can send sensor data to the Microsoft Defender ATP service. -keywords: onboard non-Windows devices, macos, linux, device management, configure Windows ATP devices, configure Microsoft Defender Advanced Threat Protection devices +keywords: onboard non-Windows devices, macos, linux, device management, configure Windows ATP devices, configure Microsoft Defender for Endpoint devices search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm.md index 4d619ca79e..2c2b018868 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm.md @@ -1,7 +1,7 @@ --- title: Onboard Windows 10 devices using Configuration Manager description: Use Configuration Manager to deploy the configuration package on devices so that they are onboarded to the service. -keywords: onboard devices using sccm, device management, configure Windows ATP devices, configure Microsoft Defender Advanced Threat Protection devices +keywords: onboard devices using sccm, device management, configure Windows ATP devices, configure Microsoft Defender for Endpoint devices search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script.md index 6c32573e4c..98d60ad1f1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script.md @@ -1,7 +1,7 @@ --- title: Onboard Windows 10 devices using a local script description: Use a local script to deploy the configuration package on devices so that they are onboarded to the service. -keywords: configure devices using a local script, device management, configure Windows ATP devices, configure Microsoft Defender Advanced Threat Protection devices +keywords: configure devices using a local script, device management, configure Windows ATP devices, configure Microsoft Defender for Endpoint devices search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md index 1e4a2f4440..feba28cd2f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi.md @@ -1,7 +1,7 @@ --- title: Onboard non-persistent virtual desktop infrastructure (VDI) devices description: Deploy the configuration package on virtual desktop infrastructure (VDI) device so that they are onboarded to Microsoft Defender ATP the service. -keywords: configure virtual desktop infrastructure (VDI) device, vdi, device management, configure Windows ATP endpoints, configure Microsoft Defender Advanced Threat Protection endpoints +keywords: configure virtual desktop infrastructure (VDI) device, vdi, device management, configure Windows ATP endpoints, configure Microsoft Defender for Endpoint endpoints search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md index dedf34b6ad..9a053cb98e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints.md @@ -1,7 +1,7 @@ --- title: Onboard Windows servers to the Microsoft Defender for Endpoint service description: Onboard Windows servers so that they can send sensor data to the Microsoft Defender for Endpoint sensor. -keywords: onboard server, server, 2012r2, 2016, 2019, server onboarding, device management, configure Windows ATP servers, onboard Microsoft Defender Advanced Threat Protection servers, onboard Microsoft Defender for Endpoint servers +keywords: onboard server, server, 2012r2, 2016, 2019, server onboarding, device management, configure Windows ATP servers, onboard Microsoft Defender for Endpoint servers, onboard Microsoft Defender for Endpoint servers search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/configure-siem.md b/windows/security/threat-protection/microsoft-defender-atp/configure-siem.md index 7597959e7f..02793f57ba 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/configure-siem.md +++ b/windows/security/threat-protection/microsoft-defender-atp/configure-siem.md @@ -1,5 +1,5 @@ --- -title: Pull detections to your SIEM tools from Microsoft Defender Advanced Threat Protection +title: Pull detections to your SIEM tools from Microsoft Defender for Endpoint description: Learn how to use REST API and configure supported security information and events management tools to receive and pull detections. keywords: configure siem, security information and events management tools, splunk, arcsight, custom indicators, rest api, alert definitions, indicators of compromise search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md b/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md index 9ce4f58684..7f0e7debb4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md +++ b/windows/security/threat-protection/microsoft-defender-atp/create-alert-by-reference.md @@ -1,6 +1,6 @@ --- title: Create alert from event API -description: Learn how to use the Create alert API to create a new Alert on top of Event in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Create alert API to create a new Alert on top of Event in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, alert, information, id search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/data-retention-settings.md b/windows/security/threat-protection/microsoft-defender-atp/data-retention-settings.md index 5266ed304e..4772ea3e78 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/data-retention-settings.md +++ b/windows/security/threat-protection/microsoft-defender-atp/data-retention-settings.md @@ -1,6 +1,6 @@ --- title: Verify data storage location and update data retention settings -description: Verify data storage location and update data retention settings for Microsoft Defender Advanced Threat Protection +description: Verify data storage location and update data retention settings for Microsoft Defender for Endpoint keywords: data, storage, settings, retention, update search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md index 82e098b761..24c7bd00cc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/delete-ti-indicator-by-id.md @@ -1,6 +1,6 @@ --- title: Delete Indicator API. -description: Learn how to use the Delete Indicator API to delete an Indicator entity by ID in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Delete Indicator API to delete an Indicator entity by ID in Microsoft Defender for Endpoint. keywords: apis, public api, supported apis, delete, ti indicator, entity, id search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md index d533b2e0e7..969b33a84e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-domain-info.md @@ -1,6 +1,6 @@ --- title: Get alert related domains information -description: Retrieve all domains related to a specific alert using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). +description: Retrieve all domains related to a specific alert using Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get alert information, alert information, related domain search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md index aa0fc830ea..648d480102 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-files-info.md @@ -1,6 +1,6 @@ --- title: Get alert related files information -description: Retrieve all files related to a specific alert using Microsoft Defender Advanced Threat Protection (Microsoft Defender for Endpoint). +description: Retrieve all files related to a specific alert using Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get alert information, alert information, related files search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md index 25ea5e8fcf..457bc11238 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-ip-info.md @@ -1,6 +1,6 @@ --- title: Get alert related IPs information -description: Retrieve all IPs related to a specific alert using Microsoft Defender Advanced Threat Protection (Microsoft Defender for Endpoint). +description: Retrieve all IPs related to a specific alert using Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get alert information, alert information, related ip search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md index 38461117ef..e818c55e82 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-machine-info.md @@ -1,6 +1,6 @@ --- title: Get alert related machine information -description: Retrieve all devices related to a specific alert using Microsoft Defender Advanced Threat Protection (Microsoft Defender for Endpoint). +description: Retrieve all devices related to a specific alert using Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get alert information, alert information, related device search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md index fb06d75de7..337150ad2c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-alert-related-user-info.md @@ -1,6 +1,6 @@ --- title: Get alert related user information -description: Learn how to use the Get alert related user information API to retrieve the user related to a specific alert in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Get alert related user information API to retrieve the user related to a specific alert in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, alert, information, related, user search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md index 8c6690d917..1526b8bf98 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-related-alerts.md @@ -1,6 +1,6 @@ --- title: Get IP related alerts API -description: Retrieve a collection of alerts related to a given IP address using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). +description: Retrieve a collection of alerts related to a given IP address using Microsoft Defender for Endpoint keywords: apis, graph api, supported apis, get, ip, related, alerts search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md index c3c0b129df..e2f3068fe9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ip-statistics.md @@ -1,6 +1,6 @@ --- title: Get IP statistics API -description: Get the latest stats for your IP using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). +description: Get the latest stats for your IP using Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, ip, statistics, prevalence search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md index a2bdfc279e..34acf86538 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-kbinfo-collection.md @@ -1,6 +1,6 @@ --- title: Get KB collection API -description: Retrieve a collection of knowledge bases (KB's) and KB details with Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). +description: Retrieve a collection of knowledge bases (KB's) and KB details with Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, kb search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md index 2ecf612da3..576fcd15b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-by-id.md @@ -1,6 +1,6 @@ --- title: Get machine by ID API -description: Learn how to use the Get machine by ID API to retrieve a machine by its device ID or computer name in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Get machine by ID API to retrieve a machine by its device ID or computer name in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, devices, entity, id search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md index 6c8c2a7aa0..755cbedeae 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-log-on-users.md @@ -1,6 +1,6 @@ --- title: Get machine logon users API -description: Learn how to use the Get machine logon users API to retrieve a collection of logged on users on a device in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Get machine logon users API to retrieve a collection of logged on users on a device in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, device, log on, users search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md index 08e0a0643f..dfc2b78eba 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machine-related-alerts.md @@ -1,6 +1,6 @@ --- title: Get machine related alerts API -description: Learn how to use the Get machine related alerts API to retrieve all alerts related to a specific device in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Get machine related alerts API to retrieve all alerts related to a specific device in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, devices, related, alerts search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md b/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md index d836586aa9..2f71cafa18 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machineaction-object.md @@ -1,6 +1,6 @@ --- title: Get MachineAction object API -description: Learn how to use the Get MachineAction API to retrieve a specific Machine Action by its ID in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Get MachineAction API to retrieve a specific Machine Action by its ID in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, machineaction object search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md index 33538ea489..a5a15025f7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machineactions-collection.md @@ -1,6 +1,6 @@ --- title: List machineActions API -description: Learn how to use the List MachineActions API to retrieve a collection of Machine Actions in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the List MachineActions API to retrieve a collection of Machine Actions in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, machineaction collection search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-machinesecuritystates-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-machinesecuritystates-collection.md index e681c4545a..985254debd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-machinesecuritystates-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-machinesecuritystates-collection.md @@ -1,6 +1,6 @@ --- title: Get machines security states collection API -description: Retrieve a collection of device security states using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). +description: Retrieve a collection of device security states using Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, device, security, state search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-ti-indicators-collection.md b/windows/security/threat-protection/microsoft-defender-atp/get-ti-indicators-collection.md index c58fc04d84..96de9049fc 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-ti-indicators-collection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-ti-indicators-collection.md @@ -1,6 +1,6 @@ --- title: List Indicators API -description: Learn how to use the List Indicators API to retrieve a collection of all active Indicators in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the List Indicators API to retrieve a collection of all active Indicators in Microsoft Defender for Endpoint. keywords: apis, public api, supported apis, Indicators collection search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md index 7d9e81fca1..3fdd092e57 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-information.md @@ -1,6 +1,6 @@ --- title: Get user information API -description: Learn how to use the Get user information API to retrieve a User entity by key, or user name, in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Get user information API to retrieve a User entity by key, or user name, in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, user, user information search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md index 782f1f620c..55a7c50119 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-alerts.md @@ -1,6 +1,6 @@ --- title: Get user-related alerts API -description: Retrieve a collection of alerts related to a given user ID using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). +description: Retrieve a collection of alerts related to a given user ID using Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, user, related, alerts search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md index e726dab081..592e5ebbde 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/get-user-related-machines.md @@ -1,6 +1,6 @@ --- title: Get user-related machines API -description: Learn how to use the Get user-related machines API to retrieve a collection of devices related to a user ID in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Get user-related machines API to retrieve a collection of devices related to a user ID in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, get, user, user related alerts search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/helpful-resources.md b/windows/security/threat-protection/microsoft-defender-atp/helpful-resources.md index e2f8bfd7a6..e20fd67535 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/helpful-resources.md +++ b/windows/security/threat-protection/microsoft-defender-atp/helpful-resources.md @@ -1,6 +1,6 @@ --- -title: Helpful Microsoft Defender Advanced Threat Protection resources -description: Access helpful resources such as links to blogs and other resources related to Microsoft Defender Advanced Threat Protection +title: Helpful Microsoft Defender for Endpoint resources +description: Access helpful resources such as links to blogs and other resources related to Microsoft Defender for Endpoint keywords: Microsoft Defender Security Center, product brief, brief, capabilities, licensing search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/import-ti-indicators.md b/windows/security/threat-protection/microsoft-defender-atp/import-ti-indicators.md index 65dcff272b..a6642a76d6 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/import-ti-indicators.md +++ b/windows/security/threat-protection/microsoft-defender-atp/import-ti-indicators.md @@ -1,6 +1,6 @@ --- title: Import Indicators API -description: Learn how to use the Import batch of Indicator API in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Import batch of Indicator API in Microsoft Defender for Endpoint. keywords: apis, supported apis, submit, ti, indicator, update search.product: eADQiWindows 10XVcnh ms.prod: w10 diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md index e1191dde6c..8121e79ad5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-alerts.md @@ -1,5 +1,5 @@ --- -title: Investigate Microsoft Defender Advanced Threat Protection alerts +title: Investigate Microsoft Defender for Endpoint alerts description: Use the investigation options to get details on alerts are affecting your network, what they mean, and how to resolve them. keywords: investigate, investigation, devices, device, alerts queue, dashboard, IP address, file, submit, submissions, deep analysis, timeline, search, domain, URL, IP search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-domain.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-domain.md index 72a0bfbd88..46c6efd790 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-domain.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-domain.md @@ -1,5 +1,5 @@ --- -title: Investigate Microsoft Defender Advanced Threat Protection domains +title: Investigate Microsoft Defender for Endpoint domains description: Use the investigation options to see if devices and servers have been communicating with malicious domains. keywords: investigate domain, domain, malicious domain, microsoft defender atp, alert, URL search.product: eADQiWindows 10XVcnh @@ -77,7 +77,7 @@ You can view events from different periods of time by entering the dates into th 5. Clicking any of the device names will take you to that device's view, where you can continue investigate reported alerts, behaviors, and events. ## Related topics -- [View and organize the Microsoft Defender Advanced Threat Protection Alerts queue](alerts-queue.md) +- [View and organize the Microsoft Defender for Endpoint Alerts queue](alerts-queue.md) - [Manage Microsoft Defender for Endpoint alerts](manage-alerts.md) - [Investigate Microsoft Defender for Endpoint alerts](investigate-alerts.md) - [Investigate a file associated with a Microsoft Defender for Endpoint alert](investigate-files.md) diff --git a/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md b/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md index de2db9a059..e8ab071434 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md +++ b/windows/security/threat-protection/microsoft-defender-atp/investigate-files.md @@ -1,5 +1,5 @@ --- -title: Investigate Microsoft Defender Advanced Threat Protection files +title: Investigate Microsoft Defender for Endpoint files description: Use the investigation options to get details on files associated with alerts, behaviors, or events. keywords: investigate, investigation, file, malicious activity, attack motivation, deep analysis, deep analysis report search.product: eADQiWindows 10XVcnh @@ -65,7 +65,12 @@ For more information on these actions, see [Take response action on a file](resp The file details, incident, malware detection, and file prevalence cards display various attributes about the file. -You'll see details such as the file’s MD5, the Virus Total detection ratio, and Microsoft Defender AV detection if available, and the file’s prevalence, both worldwide and within your organizations. +You'll see details such as the file’s MD5, the Virus Total detection ratio, and Microsoft Defender AV detection if available, and the file’s prevalence. + +The file prevalence card shows where the file was seen in devices in the organization and worldwide. + +> [!NOTE] +> Different users may see dissimilar values in the *devices in organization* section of the file prevalence card. This is because the card displays information based on the RBAC scope that a user has. Meaning, if a user has been granted visibility on a specific set of devices, they will only see the file organizational prevalence on those devices. ![Image of file information](images/atp-file-information.png) diff --git a/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md b/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md index a8a4b7a434..c3eaf21d3f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md +++ b/windows/security/threat-protection/microsoft-defender-atp/isolate-machine.md @@ -1,6 +1,6 @@ --- title: Isolate machine API -description: Learn how to use the Isolate machine API to isolate a device from accessing external network in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Isolate machine API to isolate a device from accessing external network in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, isolate device search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md index fecdb626d7..99d7be60b1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/linux-whatsnew.md @@ -1,5 +1,5 @@ --- -title: What's new in Microsoft Defender Advanced Threat Protection for Linux +title: What's new in Microsoft Defender for Endpoint for Linux description: List of major changes for Microsoft Defender ATP for Linux. keywords: microsoft, defender, atp, linux, whatsnew, release search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/live-response-command-examples.md b/windows/security/threat-protection/microsoft-defender-atp/live-response-command-examples.md index 92ac9ef16f..80665010c7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/live-response-command-examples.md +++ b/windows/security/threat-protection/microsoft-defender-atp/live-response-command-examples.md @@ -1,6 +1,6 @@ --- title: Live response command examples -description: Learn to run basic or advanced live response commands for Microsoft Defender Advanced Threat Protection (ATP) and see examples on how it's used. +description: Learn to run basic or advanced live response commands for Microsoft Defender for Endpoint and see examples on how it's used. keywords: example, command, cli, remote, shell, connection, live, response, real-time, command, script, remediate, hunt, export, log, drop, download, file search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md b/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md index a053822f50..dcdfc97f08 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-schedule-scan-atp.md @@ -97,6 +97,6 @@ You can create a scanning schedule using the *launchd* daemon on a macOS device. ## Schedule a scan with Intune -You can also schedule scans with Microsoft Intune. The [runMDATPQuickScan.sh](https://github.com/microsoft/shell-intune-samples/tree/master/Misc/MDATP#runmdatpquickscansh) shell script available at [Scripts for Microsoft Defender Advanced Threat Protection](https://github.com/microsoft/shell-intune-samples/tree/master/Misc/MDATP) will persist when the device resumes from sleep mode. +You can also schedule scans with Microsoft Intune. The [runMDATPQuickScan.sh](https://github.com/microsoft/shell-intune-samples/tree/master/Misc/MDATP#runmdatpquickscansh) shell script available at [Scripts for Microsoft Defender for Endpoint](https://github.com/microsoft/shell-intune-samples/tree/master/Misc/MDATP) will persist when the device resumes from sleep mode. See [Use shell scripts on macOS devices in Intune](https://docs.microsoft.com/mem/intune/apps/macos-shell-scripts) for more detailed instructions on how to use this script in your enterprise. diff --git a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md index 093e303240..73179f83a8 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnew.md @@ -1,6 +1,6 @@ --- -title: What's new in Microsoft Defender Advanced Threat Protection for Mac -description: Learn about the major changes for previous versions of Microsoft Defender Advanced Threat Protection for Mac. +title: What's new in Microsoft Defender for Endpoint for Mac +description: Learn about the major changes for previous versions of Microsoft Defender for Endpoint for Mac. keywords: microsoft, defender, atp, mac, installation, macos, whatsnew search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/machine.md b/windows/security/threat-protection/microsoft-defender-atp/machine.md index 93a132cb3a..4e94851be0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machine.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machine.md @@ -1,6 +1,6 @@ --- title: Machine resource type -description: Learn about the methods and properties of the Machine resource type in Microsoft Defender Advanced Threat Protection. +description: Learn about the methods and properties of the Machine resource type in Microsoft Defender for Endpoint. keywords: apis, supported apis, get, machines search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/machineaction.md b/windows/security/threat-protection/microsoft-defender-atp/machineaction.md index 53f094852d..83b5b8f8de 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/machineaction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/machineaction.md @@ -1,6 +1,6 @@ --- title: machineAction resource type -description: Learn about the methods and properties of the MachineAction resource type in Microsoft Defender Advanced Threat Protection. +description: Learn about the methods and properties of the MachineAction resource type in Microsoft Defender for Endpoint. keywords: apis, supported apis, get, machineaction, recent search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/manage-alerts.md index 41774a9023..b3c72eb278 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-alerts.md @@ -1,5 +1,5 @@ --- -title: Manage Microsoft Defender Advanced Threat Protection alerts +title: Manage Microsoft Defender for Endpoint alerts description: Change the status of alerts, create suppression rules to hide alerts, submit comments, and review change history for individual alerts with the Manage Alert menu. keywords: manage alerts, manage, alerts, status, new, in progress, resolved, resolve alerts, suppress, supression, rules, context, history, comments, changes search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/manage-suppression-rules.md b/windows/security/threat-protection/microsoft-defender-atp/manage-suppression-rules.md index a1e9db40c0..97a7f5bb15 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/manage-suppression-rules.md +++ b/windows/security/threat-protection/microsoft-defender-atp/manage-suppression-rules.md @@ -1,5 +1,5 @@ --- -title: Manage Microsoft Defender Advanced Threat Protection suppression rules +title: Manage Microsoft Defender for Endpoint suppression rules description: You might need to prevent alerts from appearing in the portal by using suppression rules. Learn how to manage your suppression rules in Microsoft Defender ATP. keywords: manage suppression, rules, rule name, scope, action, alerts, turn on, turn off search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-integration.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-integration.md index 0bcd942eab..09d31106dd 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-integration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-cloud-app-security-integration.md @@ -1,7 +1,7 @@ --- title: Microsoft Cloud App Security integration overview ms.reviewer: -description: Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) integrates with Cloud App Security by forwarding all cloud app networking activities. +description: Microsoft Defender for Endpoint integrates with Cloud App Security by forwarding all cloud app networking activities. keywords: cloud, app, networking, visibility, usage search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md index a949ca592e..8e68ee578b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-advanced-threat-protection.md @@ -123,7 +123,7 @@ Microsoft Defender for Endpoint's new managed threat hunting service provides pr **[Centralized configuration and administration, APIs](management-apis.md)**
-Integrate Microsoft Defender Advanced Threat Protection into your existing workflows. +Integrate Microsoft Defender for Endpoint into your existing workflows. diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md index 6d7d435373..5d914f0a39 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac.md @@ -1,7 +1,7 @@ --- title: Microsoft Defender ATP for Mac ms.reviewer: -description: Learn how to install, configure, update, and use Microsoft Defender Advanced Threat Protection for Mac. +description: Learn how to install, configure, update, and use Microsoft Defender for Endpoint for Mac. keywords: microsoft, defender, atp, mac, installation, deploy, uninstallation, intune, jamf, macos, catalina, mojave, high sierra search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-security-center.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-security-center.md index 610f3f8fb7..f459bd1990 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-security-center.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-security-center.md @@ -1,6 +1,6 @@ --- title: Microsoft Defender Security Center -description: Microsoft Defender Security Center is the portal where you can access Microsoft Defender Advanced Threat Protection. +description: Microsoft Defender Security Center is the portal where you can access Microsoft Defender for Endpoint. keywords: windows, defender, security, center, defender, advanced, threat, protection search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md b/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md index b4dbe0976b..20ecaac216 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/microsoft-threat-experts.md @@ -1,7 +1,7 @@ --- title: Microsoft Threat Experts ms.reviewer: -description: Microsoft Threat Experts provides an additional layer of expertise to Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). +description: Microsoft Threat Experts provides an additional layer of expertise to Microsoft Defender for Endpoint. keywords: managed threat hunting service, managed threat hunting, managed detection and response (MDR) service, MTE, Microsoft Threat Experts, MTE-TAN, targeted attack notification, Targeted Attack Notification search.product: Windows 10 search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md index 4e056cd0a5..8fd79337d1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md +++ b/windows/security/threat-protection/microsoft-defender-atp/offboard-machines.md @@ -1,7 +1,7 @@ --- title: Offboard devices from the Microsoft Defender ATP service description: Onboard Windows 10 devices, servers, non-Windows devices from the Microsoft Defender ATP service -keywords: offboarding, microsoft defender advanced threat protection offboarding, windows atp offboarding +keywords: offboarding, microsoft defender for endpoint offboarding, windows atp offboarding search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md b/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md index 707d4681f7..dac501cc50 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md +++ b/windows/security/threat-protection/microsoft-defender-atp/onboard-configure.md @@ -1,7 +1,7 @@ --- title: Onboard devices to the Microsoft Defender ATP service description: Onboard Windows 10 devices, servers, non-Windows devices and learn how to run a detection test. -keywords: onboarding, microsoft defender advanced threat protection onboarding, windows atp onboarding, sccm, group policy, mdm, local script, detection test +keywords: onboarding, microsoft defender for endpoint onboarding, windows atp onboarding, sccm, group policy, mdm, local script, detection test search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md b/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md index e2686d0b0d..48b9e9bb5a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md +++ b/windows/security/threat-protection/microsoft-defender-atp/overview-attack-surface-reduction.md @@ -2,7 +2,7 @@ title: Overview of attack surface reduction ms.reviewer: description: Learn about the attack surface reduction capabilities of Microsoft Defender ATP. -keywords: asr, attack surface reduction, microsoft defender atp, microsoft defender advanced threat protection, microsoft defender, antivirus, av, windows defender +keywords: asr, attack surface reduction, microsoft defender atp, microsoft defender for endpoint, microsoft defender, antivirus, av, windows defender search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/portal-overview.md b/windows/security/threat-protection/microsoft-defender-atp/portal-overview.md index b7f89066a3..0efb827699 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/portal-overview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/portal-overview.md @@ -1,5 +1,5 @@ --- -title: Microsoft Defender Advanced Threat Protection portal overview +title: Microsoft Defender for Endpoint portal overview description: Microsoft Defender Security Center can monitor your enterprise network and assist in responding to potential advanced persistent threats (APT) or data breaches. keywords: Microsoft Defender Security Center, portal, cybersecurity threat intelligence, dashboard, alerts queue, devices list, settings, device management, advanced attacks search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md b/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md index 53360643c8..2cd109f94f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md +++ b/windows/security/threat-protection/microsoft-defender-atp/post-ti-indicator.md @@ -1,6 +1,6 @@ --- title: Submit or Update Indicator API -description: Learn how to use the Submit or Update Indicator API to submit or update a new Indicator entity in Microsoft Defender Advanced Threat Protection. +description: Learn how to use the Submit or Update Indicator API to submit or update a new Indicator entity in Microsoft Defender for Endpoint. keywords: apis, graph api, supported apis, submit, ti, indicator, update search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/preview-settings.md b/windows/security/threat-protection/microsoft-defender-atp/preview-settings.md index 626aafb55f..2464347292 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/preview-settings.md +++ b/windows/security/threat-protection/microsoft-defender-atp/preview-settings.md @@ -1,6 +1,6 @@ --- title: Turn on the preview experience in Microsoft Defender ATP -description: Turn on the preview experience in Microsoft Defender Advanced Threat Protection to try upcoming features. +description: Turn on the preview experience in Microsoft Defender for Endpoint to try upcoming features. keywords: advanced features, settings, block file search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/preview.md b/windows/security/threat-protection/microsoft-defender-atp/preview.md index 169dd4dda9..5e35758c3f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/preview.md +++ b/windows/security/threat-protection/microsoft-defender-atp/preview.md @@ -1,7 +1,7 @@ --- title: Microsoft Defender ATP preview features -description: Learn how to access Microsoft Defender Advanced Threat Protection preview features. -keywords: preview, preview experience, Microsoft Defender Advanced Threat Protection, features, updates +description: Learn how to access Microsoft Defender for Endpoint preview features. +keywords: preview, preview experience, Microsoft Defender for Endpoint, features, updates search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/raw-data-export-event-hub.md b/windows/security/threat-protection/microsoft-defender-atp/raw-data-export-event-hub.md index 3b4e3677f2..16ce7dcb31 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/raw-data-export-event-hub.md +++ b/windows/security/threat-protection/microsoft-defender-atp/raw-data-export-event-hub.md @@ -1,5 +1,5 @@ --- -title: Stream Microsoft Defender Advanced Threat Protection events to Azure Event Hubs +title: Stream Microsoft Defender for Endpoint events to Azure Event Hubs description: Learn how to configure Microsoft Defender ATP to stream Advanced Hunting events to your Event Hub. keywords: raw data export, streaming API, API, Azure Event Hubs, Azure storage, storage account, Advanced Hunting, raw data sharing search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/raw-data-export-storage.md b/windows/security/threat-protection/microsoft-defender-atp/raw-data-export-storage.md index 0b8aaf517a..262969540e 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/raw-data-export-storage.md +++ b/windows/security/threat-protection/microsoft-defender-atp/raw-data-export-storage.md @@ -1,5 +1,5 @@ --- -title: Stream Microsoft Defender Advanced Threat Protection events to your Storage account +title: Stream Microsoft Defender for Endpoint events to your Storage account description: Learn how to configure Microsoft Defender ATP to stream Advanced Hunting events to your Storage account. keywords: raw data export, streaming API, API, Event Hubs, Azure storage, storage account, Advanced Hunting, raw data sharing search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/raw-data-export.md b/windows/security/threat-protection/microsoft-defender-atp/raw-data-export.md index 98400242b3..f124eec8b0 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/raw-data-export.md +++ b/windows/security/threat-protection/microsoft-defender-atp/raw-data-export.md @@ -1,5 +1,5 @@ --- -title: Stream Microsoft Defender Advanced Threat Protection event +title: Stream Microsoft Defender for Endpoint event description: Learn how to configure Microsoft Defender ATP to stream Advanced Hunting events to Event Hubs or Azure storage account keywords: raw data export, streaming API, API, Event hubs, Azure storage, storage account, Advanced Hunting, raw data sharing search.product: eADQiWindows 10XVcnh diff --git a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md index 3c45e7a6ad..9467a76c50 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/review-alerts.md @@ -1,5 +1,5 @@ --- -title: Review alerts in Microsoft Defender Advanced Threat Protection +title: Review alerts in Microsoft Defender for Endpoint description: Review alert information, including a visualized alert story and details for each step of the chain. keywords: incident, incidents, machines, devices, users, alerts, alert, investigation, graph, evidence ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md index e50d7962b8..102567ceca 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-api.md @@ -1,7 +1,7 @@ --- title: Advanced Hunting API ms.reviewer: -description: Learn to use the advanced hunting API to run advanced queries on Microsoft Defender Advanced Threat Protection. Find out about limitations and see an example. +description: Learn to use the advanced hunting API to run advanced queries on Microsoft Defender for Endpoint. Find out about limitations and see an example. keywords: apis, supported apis, advanced hunting, query search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md index 672ca68dd2..2ba2ea5174 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-powershell.md @@ -1,7 +1,7 @@ --- title: Advanced Hunting with PowerShell API Basics ms.reviewer: -description: Learn the basics of querying the Microsoft Defender Advanced Threat Protection API, using PowerShell. +description: Learn the basics of querying the Microsoft Defender for Endpoint API, using PowerShell. keywords: apis, supported apis, advanced hunting, query search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md index f8160dceca..f55687551f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-advanced-query-sample-python.md @@ -1,7 +1,7 @@ --- title: Advanced Hunting with Python API Guide ms.reviewer: -description: Learn how to query using the Microsoft Defender Advanced Threat Protection API, by using Python, with examples. +description: Learn how to query using the Microsoft Defender for Endpoint API, by using Python, with examples. keywords: apis, supported apis, advanced hunting, query search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/run-detection-test.md b/windows/security/threat-protection/microsoft-defender-atp/run-detection-test.md index e4acca12b4..86b7d73c1d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/run-detection-test.md +++ b/windows/security/threat-protection/microsoft-defender-atp/run-detection-test.md @@ -1,7 +1,7 @@ --- title: Run a detection test on a newly onboarded Microsoft Defender ATP device description: Run the detection script on a newly onboarded device to verify that it is properly onboarded to the Microsoft Defender ATP service. -keywords: detection test, detection, powershell, script, verify, onboarding, microsoft defender advanced threat protection onboarding, clients, servers, test +keywords: detection test, detection, powershell, script, verify, onboarding, microsoft defender for endpoint onboarding, clients, servers, test search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md b/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md index fae7709749..31dd3d807f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/security-operations-dashboard.md @@ -68,7 +68,7 @@ This tile shows you a list of devices with the highest number of active alerts. ![The Devices at risk tile shows a list of devices with the highest number of alerts, and a breakdown of the severity of the alerts](images/devices-at-risk-tile.png) -Click the name of the device to see details about that device. For more information see, [Investigate devices in the Microsoft Defender Advanced Threat Protection Devices list](investigate-machines.md). +Click the name of the device to see details about that device. For more information see, [Investigate devices in the Microsoft Defender for Endpoint Devices list](investigate-machines.md). You can also click **Devices list** at the top of the tile to go directly to the **Devices list**, sorted by the number of active alerts. For more information see, [Investigate devices in the Microsoft Defender for Endpoint Devices list](investigate-machines.md). diff --git a/windows/security/threat-protection/microsoft-defender-atp/set-device-value.md b/windows/security/threat-protection/microsoft-defender-atp/set-device-value.md index 366f94269c..e0f9065062 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/set-device-value.md +++ b/windows/security/threat-protection/microsoft-defender-atp/set-device-value.md @@ -1,6 +1,6 @@ --- title: Set device value API -description: Learn how to specify the value of a device using a Microsoft Defender Advanced Threat Protection API. +description: Learn how to specify the value of a device using a Microsoft Defender for Endpoint API. keywords: apis, graph api, supported apis, tags, machine tags search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/stop-and-quarantine-file.md b/windows/security/threat-protection/microsoft-defender-atp/stop-and-quarantine-file.md index f39ff29d54..7e2f2ae7e4 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/stop-and-quarantine-file.md +++ b/windows/security/threat-protection/microsoft-defender-atp/stop-and-quarantine-file.md @@ -1,6 +1,6 @@ --- title: Stop and quarantine file API -description: Learn how to stop running a file on a device and delete the file in Microsoft Defender Advanced Threat Protection. See an example. +description: Learn how to stop running a file on a device and delete the file in Microsoft Defender for Endpoint. See an example. keywords: apis, graph api, supported apis, stop and quarantine file search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index 750fbb2666..9701697f8c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -71,7 +71,7 @@ To verify that your onboarded devices are properly connected to Microsoft Defend |Operating system |Guidance | |---------|---------| |- Windows 10
- Windows Server 2019
- Windows Server, version 1803
- Windows Server 2016
- Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender Advanced Threat Protection for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | +|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender ATP for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | ## Uninstall your non-Microsoft solution diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index 0b8c881393..2c3c1e1db1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -72,7 +72,7 @@ To verify that your onboarded devices are properly connected to Microsoft Defend |Operating system |Guidance | |---------|---------| |- Windows 10
- Windows Server 2019
- Windows Server, version 1803
- Windows Server 2016
- Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender Advanced Threat Protection for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | +|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender for Endpoint for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | ## Uninstall Symantec diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md index 1e91ad143b..7a945710f7 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-and-vuln-mgt-event-timeline.md @@ -1,7 +1,7 @@ --- title: Event timeline in threat and vulnerability management description: Event timeline is a risk news feed that helps you interpret how risk is introduced into the organization, and which mitigations happened to reduce it. -keywords: event timeline, mdatp event timeline, mdatp tvm event timeline, threat and vulnerability management, Microsoft Defender Advanced Threat Protection +keywords: event timeline, mdatp event timeline, mdatp tvm event timeline, threat and vulnerability management, Microsoft Defender for Endpoint search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/threat-indicator-concepts.md b/windows/security/threat-protection/microsoft-defender-atp/threat-indicator-concepts.md index b779e7d95a..114c394734 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/threat-indicator-concepts.md +++ b/windows/security/threat-protection/microsoft-defender-atp/threat-indicator-concepts.md @@ -1,6 +1,6 @@ --- -title: Understand threat intelligence concepts in Microsoft Defender ATP -description: Create custom threat alerts for your organization and learn the concepts around threat intelligence in Microsoft Defender Advanced Threat Protection. +title: Understand threat intelligence concepts in Microsoft Defender for Endpoint +description: Create custom threat alerts for your organization and learn the concepts around threat intelligence in Microsoft Defender for Endpoint keywords: threat intelligence, alert definitions, indicators of compromise, ioc search.product: eADQiWindows 10XVcnh search.appverid: met150 diff --git a/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md b/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md index 2fb809a07f..e01601e03d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md +++ b/windows/security/threat-protection/microsoft-defender-atp/ti-indicator.md @@ -1,6 +1,6 @@ --- title: Indicator resource type -description: Specify the entity details and define the expiration of the indicator using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). +description: Specify the entity details and define the expiration of the indicator using Microsoft Defender for Endpoint. keywords: apis, supported apis, get, TiIndicator, Indicator, recent search.product: eADQiWindows 10XVcnh ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-asr.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-asr.md index 102416451a..ec74e725a5 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-asr.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-asr.md @@ -1,7 +1,7 @@ --- title: Troubleshoot problems with attack surface reduction rules -description: Resources and sample code to troubleshoot issues with attack surface reduction rules in Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). -keywords: troubleshoot, error, fix, windows defender eg, asr, rules, hips, troubleshoot, audit, exclusion, false positive, broken, blocking, microsoft defender atp, microsoft defender advanced threat protection +description: Resources and sample code to troubleshoot issues with attack surface reduction rules in Microsoft Defender for Endpoint. +keywords: troubleshoot, error, fix, windows defender eg, asr, rules, hips, troubleshoot, audit, exclusion, false positive, broken, blocking, microsoft defender for endpoint, microsoft defender advanced threat protection search.product: eADQiWindows 10XVcnh ms.pagetype: security ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp.md index 4a5c3f1d71..b1fc3b50af 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-mdatp.md @@ -1,7 +1,7 @@ --- -title: Troubleshoot Microsoft Defender Advanced Threat Protection service issues +title: Troubleshoot Microsoft Defender for Endpoint service issues description: Find solutions and work arounds to known issues such as server errors when trying to access the service. -keywords: troubleshoot Microsoft Defender Advanced Threat Protection, troubleshoot Windows ATP, server error, access denied, invalid credentials, no data, dashboard portal, allow, event viewer +keywords: troubleshoot microsoft defender for endpoint, troubleshoot Windows ATP, server error, access denied, invalid credentials, no data, dashboard portal, allow, event viewer search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-np.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-np.md index 429e13a849..609d3153a1 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-np.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-np.md @@ -1,7 +1,7 @@ --- title: Troubleshoot problems with Network protection -description: Resources and sample code to troubleshoot issues with Network protection in Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP). -keywords: troubleshoot, error, fix, windows defender eg, asr, rules, hips, troubleshoot, audit, exclusion, false positive, broken, blocking, microsoft defender atp, microsoft defender advanced threat protection +description: Resources and sample code to troubleshoot issues with Network protection in Microsoft Defender for Endpoint. +keywords: troubleshoot, error, fix, windows defender eg, asr, rules, hips, troubleshoot, audit, exclusion, false positive, broken, blocking, microsoft defender for endpoint, microsoft defender advanced threat protection search.product: eADQiWindows 10XVcnh ms.prod: m365-security ms.mktglfcycl: manage diff --git a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md index 1983efe55b..c06e227e7a 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md +++ b/windows/security/threat-protection/microsoft-defender-atp/troubleshoot-onboarding-error-messages.md @@ -1,7 +1,7 @@ --- title: Troubleshoot onboarding issues and error messages -description: Troubleshoot onboarding issues and error message while completing setup of Microsoft Defender Advanced Threat Protection. -keywords: troubleshoot, troubleshooting, Azure Active Directory, onboarding, error message, error messages, microsoft defender atp +description: Troubleshoot onboarding issues and error message while completing setup of Microsoft Defender for Endpoint. +keywords: troubleshoot, troubleshooting, Azure Active Directory, onboarding, error message, error messages, microsoft defender for endpoint search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md b/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md index e4895d3691..5f92a2153f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md +++ b/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score.md @@ -1,7 +1,7 @@ --- title: Exposure score in threat and vulnerability management description: The threat and vulnerability management exposure score reflects how vulnerable your organization is to cybersecurity threats. -keywords: exposure score, mdatp exposure score, mdatp tvm exposure score, organization exposure score, tvm organization exposure score, threat and vulnerability management, Microsoft Defender Advanced Threat Protection +keywords: exposure score, mdatp exposure score, mdatp tvm exposure score, organization exposure score, tvm organization exposure score, threat and vulnerability management, Microsoft Defender for Endpoint search.product: eADQiWindows 10XVcnh search.appverid: met150 ms.prod: m365-security diff --git a/windows/security/threat-protection/microsoft-defender-atp/user.md b/windows/security/threat-protection/microsoft-defender-atp/user.md index d652b20f95..0226020ed9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/user.md +++ b/windows/security/threat-protection/microsoft-defender-atp/user.md @@ -1,6 +1,6 @@ --- title: User resource type -description: Retrieve recent Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) alerts related to users. +description: Retrieve recent Microsoft Defender for Endpoint alerts related to users. keywords: apis, graph api, supported apis, get, alerts, recent search.product: eADQiWindows 10XVcnh ms.prod: m365-security From 5465b7c7b05d0fb4de07d413626f5d3faa7904a6 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:34:05 -0800 Subject: [PATCH 161/206] Update switch-to-microsoft-defender-onboard.md --- .../switch-to-microsoft-defender-onboard.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md index fc39b63653..3215fbbf72 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-onboard.md @@ -54,11 +54,11 @@ Deployment methods vary, depending on which operating system is selected. Refer |Operating system |Method | |---------|---------| -|Windows 10 |- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [Mobile Device Management (Intune)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm)
- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows 8.1 Enterprise
- Windows 8.1 Pro
- Windows 7 SP1 Enterprise
- Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | -|- Windows Server 2019 and later
- Windows Server 2019 core edition
- Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows Server 2016
- Windows Server 2012 R2
- Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra)

iOS

Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | +| Windows 10 |- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [Mobile Device Management (Intune)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm)
- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | +| Windows 8.1 Enterprise

Windows 8.1 Pro

Windows 7 SP1 Enterprise

Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | +| Windows Server 2019 and later

Windows Server 2019 core edition

Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | +|Windows Server 2016

Windows Server 2012 R2

Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | +| macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra)

iOS

Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | ## Run a detection test @@ -66,9 +66,9 @@ To verify that your onboarded devices are properly connected to Microsoft Defend |Operating system |Guidance | |---------|---------| -|- Windows 10
- Windows Server 2019
- Windows Server, version 1803
- Windows Server 2016
- Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | -|Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender ATP for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | +| Windows 10

Windows Server 2019

Windows Server, version 1803

Windows Server 2016

Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | +|macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | +|Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender ATP for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | ## Uninstall your non-Microsoft solution From 1d1252e39d17aa5e0848fc7346da460ed0592227 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:39:25 -0800 Subject: [PATCH 162/206] Update switch-to-microsoft-defender-prepare.md --- .../switch-to-microsoft-defender-prepare.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md index c34bb7e48e..a8aeed902f 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-prepare.md @@ -37,9 +37,9 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho This migration phase includes the following steps: 1. [Get and deploy updates across your organization's devices](#get-and-deploy-updates-across-your-organizations-devices) -2. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint). -3. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center). -4. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings). +2. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint) +3. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center) +4. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings) ## Get and deploy updates across your organization's devices @@ -97,12 +97,12 @@ To enable communication between your devices and Microsoft Defender for Endpoint |Capabilities | Operating System | Resources | |--|--|--| -|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | -|EDR |- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | -|EDR |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)
- [Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| -|Antivirus |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|Antivirus |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | +|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | +|EDR |[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | +|EDR |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)

[Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| +|Antivirus |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|Antivirus |Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | ## Next step From 6cfa7f7383e3569e3a1230c780d926841d3fd39d Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:48:05 -0800 Subject: [PATCH 163/206] Update switch-to-microsoft-defender-setup.md --- .../switch-to-microsoft-defender-setup.md | 26 +++++++++---------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md index fb128c2f4b..a71e17f965 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/switch-to-microsoft-defender-setup.md @@ -34,13 +34,13 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho ||*You are here!* | | **Welcome to the Setup phase of [switching to Microsoft Defender for Endpoint](switch-to-microsoft-defender-migration.md#the-migration-process)**. This phase includes the following steps: -1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode). -2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus). -3. [Add Microsoft Defender for Endpoint to the exclusion list for your existing endpoint solution](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-your-existing-solution). -4. [Add your existing solution to the exclusion list for Microsoft Defender Antivirus](#add-your-existing-solution-to-the-exclusion-list-for-microsoft-defender-antivirus). -5. [Add your existing solution to the exclusion list for Microsoft Defender for Endpoint](#add-your-existing-solution-to-the-exclusion-list-for-microsoft-defender-for-endpoint). -6. [Set up your device groups, device collections, and organizational units](#set-up-your-device-groups-device-collections-and-organizational-units). -7. [Configure antimalware policies and real-time protection](#configure-antimalware-policies-and-real-time-protection). +1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode) +2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus) +3. [Add Microsoft Defender for Endpoint to the exclusion list for your existing endpoint solution](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-your-existing-solution) +4. [Add your existing solution to the exclusion list for Microsoft Defender Antivirus](#add-your-existing-solution-to-the-exclusion-list-for-microsoft-defender-antivirus) +5. [Add your existing solution to the exclusion list for Microsoft Defender for Endpoint](#add-your-existing-solution-to-the-exclusion-list-for-microsoft-defender-for-endpoint) +6. [Set up your device groups, device collections, and organizational units](#set-up-your-device-groups-device-collections-and-organizational-units) +7. [Configure antimalware policies and real-time protection](#configure-antimalware-policies-and-real-time-protection) ## Enable Microsoft Defender Antivirus and confirm it's in passive mode @@ -48,10 +48,10 @@ On certain versions of Windows, such as Windows Server, Microsoft Defender Antiv This step of the migration process includes the following tasks: - [Setting DisableAntiSpyware to false on Windows Server](#set-disableantispyware-to-false-on-windows-server) -- [Reinstalling Microsoft Defender Antivirus on Windows Server](#reinstall-microsoft-defender-antivirus-on-windows-server); +- [Reinstalling Microsoft Defender Antivirus on Windows Server](#reinstall-microsoft-defender-antivirus-on-windows-server) - [Setting Microsoft Defender Antivirus to passive mode on Windows Server](#set-microsoft-defender-antivirus-to-passive-mode-on-windows-server) -- [Enabling Microsoft Defender Antivirus on your Windows client devices](#enable-microsoft-defender-antivirus-on-your-windows-client-devices); and -- [Confirming that Microsoft Defender Antivirus is set to passive mode](#confirm-that-microsoft-defender-antivirus-is-in-passive-mode). +- [Enabling Microsoft Defender Antivirus on your Windows client devices](#enable-microsoft-defender-antivirus-on-your-windows-client-devices) +- [Confirming that Microsoft Defender Antivirus is set to passive mode](#confirm-that-microsoft-defender-antivirus-is-in-passive-mode) ### Set DisableAntiSpyware to false on Windows Server @@ -90,7 +90,7 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d #### Are you using Windows Server 2016? -If you're using Windows Server 2016 and are having trouble enabling Microsoft Defender Antivirus, use the following PowerShell cmdlet: +If you're using Windows Server 2016 and are having trouble enabling Microsoft Defender Antivirus, use the following PowerShell cmdlet on the device: `mpcmdrun -wdenable` @@ -158,8 +158,8 @@ The specific exclusions to configure depend on which version of Windows your end |OS |Exclusions | |--|--| -|- Windows 10, [version 1803](https://docs.microsoft.com/windows/release-health/status-windows-10-1803) or later (See [Windows 10 release information](https://docs.microsoft.com/windows/release-health/release-information))
- Windows 10, version 1703 or [1709](https://docs.microsoft.com/windows/release-health/status-windows-10-1709) with [KB4493441](https://support.microsoft.com/help/4493441) installed
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server, version 1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |`C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`
`C:\Program Files\Windows Defender Advanced Threat Protection\SenseCncProxy.exe`
`C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe`
`C:\Program Files\Windows Defender Advanced Threat Protection\SenseIR.exe`
| -|- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |`C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 6\45\MsSenseS.exe`
**NOTE**: Where Monitoring Host Temporary Files 6\45 can be different numbered subfolders.
`C:\Program Files\Microsoft Monitoring Agent\Agent\AgentControlPanel.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\HealthService.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\HSLockdown.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\MOMPerfSnapshotHelper.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe`
`C:\Program Files\Microsoft Monitoring Agent\Agent\TestCloudConnection.exe` | +|Windows 10, [version 1803](https://docs.microsoft.com/windows/release-health/status-windows-10-1803) or later (See [Windows 10 release information](https://docs.microsoft.com/windows/release-health/release-information))

Windows 10, version 1703 or [1709](https://docs.microsoft.com/windows/release-health/status-windows-10-1709) with [KB4493441](https://support.microsoft.com/help/4493441) installed

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server, version 1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |`C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseCncProxy.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseIR.exe` | +|[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |`C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 6\45\MsSenseS.exe`

**NOTE**: Where Monitoring Host Temporary Files 6\45 can be different numbered subfolders.
`C:\Program Files\Microsoft Monitoring Agent\Agent\AgentControlPanel.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HealthService.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HSLockdown.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MOMPerfSnapshotHelper.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\TestCloudConnection.exe` | ## Add your existing solution to the exclusion list for Microsoft Defender Antivirus From 58ee78e17c1cafccb7a5d6aa040f759b2e81eed9 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:55:55 -0800 Subject: [PATCH 164/206] Update symantec-to-microsoft-defender-atp-onboard.md --- ...antec-to-microsoft-defender-atp-onboard.md | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index af35ec691e..3984f7078b 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -36,10 +36,10 @@ ms.reviewer: depicker, yongrhee, chriggs **Welcome to Phase 3 of [migrating from Symantec to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-migration.md#the-migration-process)**. This migration phase includes the following steps: -1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint). -2. [Run a detection test](#run-a-detection-test). -3. [Uninstall Symantec](#uninstall-symantec). -4. [Make sure Microsoft Defender for Endpoint is in active mode](#make-sure-microsoft-defender-for-endpoint-is-in-active-mode). +1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint) +2. [Run a detection test](#run-a-detection-test) +3. [Uninstall Symantec](#uninstall-symantec) +4. [Make sure Microsoft Defender for Endpoint is in active mode](#make-sure-microsoft-defender-for-endpoint-is-in-active-mode) ## Onboard devices to Microsoft Defender for Endpoint @@ -55,10 +55,10 @@ Deployment methods vary, depending on which operating system is selected. Refer |Operating system |Method | |---------|---------| |Windows 10 |- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [Mobile Device Management (Intune)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm)
- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows 8.1 Enterprise
- Windows 8.1 Pro
- Windows 7 SP1 Enterprise
- Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | -|- Windows Server 2019 and later
- Windows Server 2019 core edition
- Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows Server 2016
- Windows Server 2012 R2
- Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra)

iOS

Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | +| Windows 8.1 Enterprise

Windows 8.1 Pro

Windows 7 SP1 Enterprise

Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | +|Windows Server 2019 and later

Windows Server 2019 core edition

Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | +|Windows Server 2016

Windows Server 2012 R2

Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | +|macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra)

iOS

Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | ## Run a detection test @@ -66,9 +66,9 @@ To verify that your onboarded devices are properly connected to Microsoft Defend |Operating system |Guidance | |---------|---------| -|- Windows 10
- Windows Server 2019
- Windows Server, version 1803
- Windows Server 2016
- Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | -|Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender for Endpoint for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | +|Windows 10

Windows Server 2019

Windows Server, version 1803

Windows Server 2016

Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | +|macOS
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender for Endpoint for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | +|Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.
2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.
3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender for Endpoint for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | ## Uninstall Symantec From 0def9eb8163ef14401d99c73d8494d7a398fb16a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 16:58:00 -0800 Subject: [PATCH 165/206] Update symantec-to-microsoft-defender-atp-prepare.md --- .../symantec-to-microsoft-defender-atp-prepare.md | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index 170fae78d0..5a51739655 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -37,9 +37,9 @@ ms.reviewer: depicker, yongrhee, chriggs **Welcome to the Prepare phase of [migrating from Symantec to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-migration.md#the-migration-process)**. This migration phase includes the following steps: -1. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint). -2. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center). -3. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings). +1. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint) +2. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center) +3. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings) ## Get Microsoft Defender for Endpoint @@ -75,10 +75,10 @@ To enable communication between your devices and Microsoft Defender for Endpoint |Capabilities | Operating System | Resources | |:----|:----|:---| -|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | -|EDR |- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | -|EDR |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)
- [Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| +|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | +|EDR |[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | +|EDR |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)

[Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| |Antivirus |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft -Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | |Antivirus |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | From e548a323c046cb58d38d260a2579ffb6e65c3a2a Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 17:05:11 -0800 Subject: [PATCH 166/206] Update symantec-to-microsoft-defender-atp-prepare.md --- .../symantec-to-microsoft-defender-atp-prepare.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md index 5a51739655..a00af7000d 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-prepare.md @@ -79,8 +79,8 @@ To enable communication between your devices and Microsoft Defender for Endpoint |EDR |[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | |EDR |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | |[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |[Windows 10](https://docs.microsoft.com/windows/release-health/release-information/)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)

[Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| -|Antivirus |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft -Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|Antivirus |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | +|Antivirus |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft -Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|Antivirus |Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) | ## Next step From c099d0b1f6238c58de5e5febb8790b07be386f30 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 18:53:24 -0800 Subject: [PATCH 167/206] Update symantec-to-microsoft-defender-atp-setup.md --- .../symantec-to-microsoft-defender-atp-setup.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md index da841e02fc..97c3eac1ea 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-setup.md @@ -35,9 +35,9 @@ ms.reviewer: depicker, yongrhee, chriggs **Welcome to the Setup phase of [migrating from Symantec to Microsoft Defender for Endpoint](symantec-to-microsoft-defender-atp-migration.md#the-migration-process)**. This phase includes the following steps: -1. [Enable or reinstall Microsoft Defender Antivirus (for certain versions of Windows)](#enable-or-reinstall-microsoft-defender-antivirus-for-certain-versions-of-windows). -2. [Enable Microsoft Defender Antivirus](#enable-microsoft-defender-antivirus). -3. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus). +1. [Enable or reinstall Microsoft Defender Antivirus (for certain versions of Windows)](#enable-or-reinstall-microsoft-defender-antivirus-for-certain-versions-of-windows) +2. [Enable Microsoft Defender Antivirus](#enable-microsoft-defender-antivirus) +3. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus) 4. [Add Microsoft Defender for Endpoint to the exclusion list for Symantec](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-symantec). 5. [Add Symantec to the exclusion list for Microsoft Defender Antivirus](#add-symantec-to-the-exclusion-list-for-microsoft-defender-antivirus). 6. [Add Symantec to the exclusion list for Microsoft Defender for Endpoint](#add-symantec-to-the-exclusion-list-for-microsoft-defender-for-endpoint). From 468c40edd7453c2bc6e09e494396b308f3406464 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 18:58:24 -0800 Subject: [PATCH 168/206] migration guide fixes --- .../mcafee-to-microsoft-defender-migration.md | 1 - .../mcafee-to-microsoft-defender-onboard.md | 23 ++++++++----------- 2 files changed, 10 insertions(+), 14 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md index f32f4af0d0..e2d49d85b9 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-migration.md @@ -32,7 +32,6 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho If you are planning to switch from McAfee Endpoint Security (McAfee) to [Microsoft Defender for Endpoint](https://docs.microsoft.com/windows/security/threat-protection) (Microsoft Defender for Endpoint), you're in the right place. Use this article as a guide. - :::image type="content" source="images/mcafee-mde-migration.png" alt-text="Overview of migrating from McAfee to Defender for Endpoint"::: When you make the switch from McAfee to Defender for Endpoint, you begin with your McAfee solution in active mode, configure Defender for Endpoint in passive mode, onboard to Defender for Endpoint, and then set Defender for Endpoint to active mode and remove McAfee. diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md index 14270c916e..fb5e596932 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-onboard.md @@ -37,19 +37,16 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho **Welcome to Phase 3 of [migrating from McAfee Endpoint Security (McAfee) to Microsoft Defender Advanced Threat Protection (Microsoft Defender for Endpoint)](mcafee-to-microsoft-defender-migration.md#the-migration-process)**. This migration phase includes the following steps: -1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint). -2. [Run a detection test](#run-a-detection-test). -3. [Uninstall McAfee](#uninstall-mcafee). -4. [Make sure Microsoft Defender for Endpoint is in active mode](#make-sure-microsoft-defender-for-endpoint-is-in-active-mode). +1. [Onboard devices to Microsoft Defender for Endpoint](#onboard-devices-to-microsoft-defender-for-endpoint) +2. [Run a detection test](#run-a-detection-test) +3. [Uninstall McAfee](#uninstall-mcafee) +4. [Make sure Microsoft Defender for Endpoint is in active mode](#make-sure-microsoft-defender-for-endpoint-is-in-active-mode) ## Onboard devices to Microsoft Defender for Endpoint 1. Go to the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)) and sign in. - 2. Choose **Settings** > **Device management** > **Onboarding**. - 3. In the **Select operating system to start onboarding process** list, select an operating system. - 4. Under **Deployment method**, select an option. Follow the links and prompts to onboard your organization's devices. Need help? See [Onboarding methods](#onboarding-methods) (in this article). ### Onboarding methods @@ -59,10 +56,10 @@ Deployment methods vary, depending on which operating system is selected. Refer |Operating system |Method | |---------|---------| |Windows 10 |- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [Mobile Device Management (Intune)](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-mdm)
- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | -|- Windows 8.1 Enterprise
- Windows 8.1 Pro
- Windows 7 SP1 Enterprise
- Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | -|- Windows Server 2019 and later
- Windows Server 2019 core edition
- Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | +| Windows 8.1 Enterprise

Windows 8.1 Pro

Windows 7 SP1 Enterprise

Windows 7 SP1 Pro | [Microsoft Monitoring Agent](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp)

**NOTE**: Microsoft Monitoring Agent is now Azure Log Analytics agent. To learn more, see [Log Analytics agent overview](https://docs.microsoft.com/azure/azure-monitor/platform/log-analytics-agent). | +|Windows Server 2019 and later

Windows Server 2019 core edition

Windows Server version 1803 and later |- [Local script](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-script)
- [Group Policy](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-gp)
- [Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm)
- [System Center Configuration Manager](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-sccm#onboard-windows-10-devices-using-earlier-versions-of-system-center-configuration-manager)
- [VDI onboarding scripts for non-persistent devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-vdi)

**NOTE**: A local script is suitable for a proof of concept but should not be used for production deployment. For a production deployment, we recommend using Group Policy, Microsoft Endpoint Configuration Manager, or Intune. | |- Windows Server 2016
- Windows Server 2012 R2
- Windows Server 2008 R2 SP1 |- [Microsoft Defender Security Center](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#option-1-onboard-servers-through-microsoft-defender-security-center)
- [Azure Security Center](https://docs.microsoft.com/azure/security-center/security-center-wdatp) | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra)

iOS

Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | +|macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra)

iOS

Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Onboard non-Windows devices](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-endpoints-non-windows) | ## Run a detection test @@ -71,9 +68,9 @@ To verify that your onboarded devices are properly connected to Microsoft Defend |Operating system |Guidance | |---------|---------| -|- Windows 10
- Windows Server 2019
- Windows Server, version 1803
- Windows Server 2016
- Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | -|macOS
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender ATP for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | -|Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.

2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.

3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender ATP for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | +|Windows 10

Windows Server 2019

Windows Server, version 1803

Windows Server 2016

Windows Server 2012 R2 |See [Run a detection test](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/run-detection-test).

Visit the Microsoft Defender for Endpoint demo scenarios site ([https://demo.wd.microsoft.com](https://demo.wd.microsoft.com)) and try one or more of the scenarios. For example, try the **Cloud-delivered protection** demo scenario. | +|macOS
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |Download and use the DIY app at [https://aka.ms/mdatpmacosdiy](https://aka.ms/mdatpmacosdiy).

For more information, see [Microsoft Defender ATP for Mac](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac). | +|Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |1. Run the following command, and look for a result of **1**:
`mdatp health --field real_time_protection_enabled`.
2. Open a Terminal window, and run the following command:
`curl -o ~/Downloads/eicar.com.txt https://www.eicar.org/download/eicar.com.txt`.
3. Run the following command to list any detected threats:
`mdatp threat list`.

For more information, see [Microsoft Defender ATP for Linux](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux). | ## Uninstall McAfee From 7bf7cb753deee02d68a1a83d5836df223872cace Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 19:02:20 -0800 Subject: [PATCH 169/206] Update mcafee-to-microsoft-defender-prepare.md --- .../mcafee-to-microsoft-defender-prepare.md | 27 +++++++------------ 1 file changed, 9 insertions(+), 18 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md index 4b9d123c45..1e99cff4a3 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-prepare.md @@ -39,9 +39,9 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho This migration phase includes the following steps: 1. [Get and deploy updates across your organization's devices](#get-and-deploy-updates-across-your-organizations-devices) -2. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint). -3. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center). -4. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings). +2. [Get Microsoft Defender for Endpoint](#get-microsoft-defender-for-endpoint) +3. [Grant access to the Microsoft Defender Security Center](#grant-access-to-the-microsoft-defender-security-center) +4. [Configure device proxy and internet connectivity settings](#configure-device-proxy-and-internet-connectivity-settings) ## Get and deploy updates across your organization's devices @@ -50,13 +50,9 @@ As a best practice, keep your organization's devices and endpoints up to date. M ### Make sure your McAfee solution is up to date Keep McAfee up to date, and make sure that your organization's devices have the latest security updates. Need help? Here are some McAfee resources: - - [McAfee Enterprise Product Documentation: How Endpoint Security Works](https://docs.mcafee.com/bundle/endpoint-security-10.7.x-common-product-guide-windows/page/GUID-1207FF39-D1D2-481F-BBD9-E4079112A8DD.html) - - [McAfee Knowledge Center Technical Article: Windows Security Center intermittently incorrectly reports that Endpoint Security is disabled when running on Windows 10](https://kc.mcafee.com/corporate/index?page=content&id=KB91830) - - [McAfee Knowledge Center Technical Article: Windows Security Center reports Endpoint Security is disabled when Endpoint Security is running](https://kc.mcafee.com/corporate/index?page=content&id=KB91428) - - Your McAfee support ServicePortal ([http://mysupport.mcafee.com](http://mysupport.mcafee.com)) ### Make sure your organization's devices are up to date @@ -76,11 +72,8 @@ Need help updating your organization's devices? See the following resources: Now that you've updated your organization's devices, the next step is to get Microsoft Defender for Endpoint, assign licenses, and make sure the service is provisioned. 1. Buy or try Microsoft Defender for Endpoint today. [Start a free trial or request a quote](https://aka.ms/mdatp). - 2. Verify that your licenses are properly provisioned. [Check your license state](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/production-deployment#check-license-state). - 3. As a global administrator or security administrator, set up your dedicated cloud instance of Microsoft Defender for Endpoint. See [Microsoft Defender for Endpoint setup: Tenant configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/production-deployment#tenant-configuration). - 4. If endpoints (such as devices) in your organization use a proxy to access the internet, see [Microsoft Defender for Endpoint setup: Network configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/production-deployment#network-configuration). At this point, you are ready to grant access to your security administrators and security operators who will use the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)). @@ -95,14 +88,12 @@ The Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka Permissions to the Microsoft Defender Security Center can be granted by using either basic permissions or role-based access control (RBAC). We recommend using RBAC so that you have more granular control over permissions. 1. Plan the roles and permissions for your security administrators and security operators. See [Role-based access control](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/prepare-deployment#role-based-access-control). - 2. Set up and configure RBAC. We recommend using [Intune](https://docs.microsoft.com/mem/intune/fundamentals/what-is-intune) to configure RBAC, especially if your organization is using a combination of Windows 10, macOS, iOS, and Android devices. See [setting up RBAC using Intune](https://docs.microsoft.com/mem/intune/fundamentals/role-based-access-control). If your organization requires a method other than Intune, choose one of the following options: - [Configuration Manager](https://docs.microsoft.com/mem/configmgr/core/servers/deploy/configure/configure-role-based-administration) - [Advanced Group Policy Management](https://docs.microsoft.com/microsoft-desktop-optimization-pack/agpm) - [Windows Admin Center](https://docs.microsoft.com/windows-server/manage/windows-admin-center/overview) - 3. Grant access to the Microsoft Defender Security Center. (Need help? See [Manage portal access using RBAC](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/rbac)). ## Configure device proxy and internet connectivity settings @@ -111,12 +102,12 @@ To enable communication between your devices and Microsoft Defender for Endpoint |Capabilities | Operating System | Resources | |--|--|--| -|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | -|EDR |- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | -|EDR |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) |- [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)
- [Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus)
| -|Antivirus |macOS:
- 10.15 (Catalina)
- 10.14 (Mojave)
- 10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | -|Antivirus |Linux:
- RHEL 7.2+
- CentOS Linux 7.2+
- Ubuntu 16 LTS, or higher LTS
- SLES 12+
- Debian 9+
- Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) +|[Endpoint detection and response](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/overview-endpoint-detection-response) (EDR) | [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |[Configure machine proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/configure-proxy-internet) | +|EDR | [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |[Configure proxy and internet connectivity settings](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/onboard-downlevel#configure-proxy-and-internet-connectivity-settings) | +|EDR |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|[Microsoft Defender Antivirus](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/microsoft-defender-antivirus-in-windows-10) | [Windows 10](https://docs.microsoft.com/windows/release-health/release-information)

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server 1803 or later](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803)

[Windows Server 2016](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-2016) |[Configure and validate Microsoft Defender Antivirus network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-network-connections-microsoft-defender-antivirus) | +|Antivirus |macOS:
10.15 (Catalina)
10.14 (Mojave)
10.13 (High Sierra) |[Microsoft Defender for Endpoint for Mac: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-mac#network-connections) | +|Antivirus |Linux:
RHEL 7.2+
CentOS Linux 7.2+
Ubuntu 16 LTS, or higher LTS
SLES 12+
Debian 9+
Oracle Linux 7.2 |[Microsoft Defender for Endpoint for Linux: Network connections](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/microsoft-defender-atp-linux#network-connections) ## Next step From b77da8f6ab673de9cf92229b418fa07baae791b8 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Wed, 3 Mar 2021 19:16:02 -0800 Subject: [PATCH 170/206] Update mcafee-to-microsoft-defender-setup.md --- .../mcafee-to-microsoft-defender-setup.md | 100 ++++++------------ 1 file changed, 35 insertions(+), 65 deletions(-) diff --git a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md index dc706c0bbc..df37f40e0c 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md +++ b/windows/security/threat-protection/microsoft-defender-atp/mcafee-to-microsoft-defender-setup.md @@ -35,13 +35,13 @@ ms.reviewer: jesquive, chventou, jonix, chriggs, owtho ||*You are here!* | | **Welcome to the Setup phase of [migrating from McAfee Endpoint Security (McAfee) to Microsoft Defender for Endpoint](mcafee-to-microsoft-defender-migration.md#the-migration-process)**. This phase includes the following steps: -1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode). -2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus). -3. [Add Microsoft Defender for Endpoint to the exclusion list for McAfee](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-mcafee). -4. [Add McAfee to the exclusion list for Microsoft Defender Antivirus](#add-mcafee-to-the-exclusion-list-for-microsoft-defender-antivirus). -5. [Add McAfee to the exclusion list for Microsoft Defender for Endpoint](#add-mcafee-to-the-exclusion-list-for-microsoft-defender-for-endpoint). +1. [Enable Microsoft Defender Antivirus and confirm it's in passive mode](#enable-microsoft-defender-antivirus-and-confirm-its-in-passive-mode) +2. [Get updates for Microsoft Defender Antivirus](#get-updates-for-microsoft-defender-antivirus) +3. [Add Microsoft Defender for Endpoint to the exclusion list for McAfee](#add-microsoft-defender-for-endpoint-to-the-exclusion-list-for-mcafee) +4. [Add McAfee to the exclusion list for Microsoft Defender Antivirus](#add-mcafee-to-the-exclusion-list-for-microsoft-defender-antivirus) +5. [Add McAfee to the exclusion list for Microsoft Defender for Endpoint](#add-mcafee-to-the-exclusion-list-for-microsoft-defender-for-endpoint) 6. [Set up your device groups, device collections, and organizational units](#set-up-your-device-groups-device-collections-and-organizational-units). -7. [Configure antimalware policies and real-time protection](#configure-antimalware-policies-and-real-time-protection). +7. [Configure antimalware policies and real-time protection](#configure-antimalware-policies-and-real-time-protection) ## Enable Microsoft Defender Antivirus and confirm it's in passive mode @@ -49,27 +49,21 @@ On certain versions of Windows, such as Windows Server, Microsoft Defender Antiv This step of the migration process includes the following tasks: - [Setting DisableAntiSpyware to false on Windows Server](#set-disableantispyware-to-false-on-windows-server) -- [Reinstalling Microsoft Defender Antivirus on Windows Server](#reinstall-microsoft-defender-antivirus-on-windows-server); +- [Reinstalling Microsoft Defender Antivirus on Windows Server](#reinstall-microsoft-defender-antivirus-on-windows-server) - [Setting Microsoft Defender Antivirus to passive mode on Windows Server](#set-microsoft-defender-antivirus-to-passive-mode-on-windows-server) -- [Enabling Microsoft Defender Antivirus on your Windows client devices](#enable-microsoft-defender-antivirus-on-your-windows-client-devices); and -- [Confirming that Microsoft Defender Antivirus is set to passive mode](#confirm-that-microsoft-defender-antivirus-is-in-passive-mode). +- [Enabling Microsoft Defender Antivirus on your Windows client devices](#enable-microsoft-defender-antivirus-on-your-windows-client-devices) +- [Confirming that Microsoft Defender Antivirus is set to passive mode](#confirm-that-microsoft-defender-antivirus-is-in-passive-mode) ### Set DisableAntiSpyware to false on Windows Server The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/desktop/unattend/security-malware-windows-defender-disableantispyware) registry key was used in the past to disable Microsoft Defender Antivirus, and deploy another antivirus product, such as McAfee. In general, you should not have this registry key on your Windows devices and endpoints; however, if you do have `DisableAntiSpyware` configured, here's how to set its value to false: 1. On your Windows Server device, open Registry Editor. - 2. Navigate to `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender`. - 3. In that folder, look for a DWORD entry called **DisableAntiSpyware**. - - If you do not see that entry, you're all set. - - If you do see **DisableAntiSpyware**, proceed to step 4. - 4. Right-click the DisableAntiSpyware DWORD, and then choose **Modify**. - 5. Set the value to `0`. (This sets the registry key's value to *false*.) > [!TIP] @@ -84,21 +78,13 @@ The [DisableAntiSpyware](https://docs.microsoft.com/windows-hardware/customize/d > - Windows Server 2016 1. As a local administrator on the endpoint or device, open Windows PowerShell. - -2. Run the following PowerShell cmdlets:
- +2. Run the following PowerShell cmdlets:
`Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
- - `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
- -> [!NOTE] -> When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. -> Example:
-> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
-> `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`
- -3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
- + `Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`

+ When using the DISM command within a task sequence running PS, the following path to cmd.exe is required. Here are some examples: + `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender-Features`
+ `c:\windows\sysnative\cmd.exe /c Dism /online /Get-FeatureInfo /FeatureName:Windows-Defender`

+3. To verify Microsoft Defender Antivirus is running, use the following PowerShell cmdlet:
`Get-Service -Name windefend` #### Are you using Windows Server 2016? @@ -116,11 +102,8 @@ Because your organization is still using McAfee, you must set Microsoft Defender 1. Open Registry Editor, and then navigate to
`Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Advanced Threat Protection`. - -2. Edit (or create) a DWORD entry called **ForceDefenderPassiveMode**, and specify the following settings: - +2. Edit (or create) a DWORD entry called **ForceDefenderPassiveMode**, and specify the following settings: - Set the DWORD's value to **1**. - - Under **Base**, select **Hexadecimal**. > [!NOTE] @@ -137,9 +120,9 @@ To enable Microsoft Defender Antivirus, we recommend using Intune. However, you |Method |What to do | |---------|---------| -|[Intune](https://docs.microsoft.com/mem/intune/fundamentals/tutorial-walkthrough-endpoint-manager)

**NOTE**: Intune is now Microsoft Endpoint Manager. |1. Go to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and sign in.

2. Select **Devices** > **Configuration profiles**, and then select the profile type you want to configure.
If you haven't yet created a **Device restrictions** profile type, or if you want to create a new one, see [Configure device restriction settings in Microsoft Intune](https://docs.microsoft.com/intune/device-restrictions-configure).

3. Select **Properties**, and then select **Configuration settings: Edit**.

4. Expand **Microsoft Defender Antivirus**.

5. Enable **Cloud-delivered protection**.

6. In the **Prompt users before sample submission** dropdown, select **Send all samples automatically**.

7. In the **Detect potentially unwanted applications** dropdown, select **Enable** or **Audit**.

8. Select **Review + save**, and then choose **Save**.

For more information about Intune device profiles, including how to create and configure their settings, see [What are Microsoft Intune device profiles?](https://docs.microsoft.com/intune/device-profiles).| -|Control Panel in Windows |Follow the guidance here: [Turn on Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/user-help/turn-on-defender-windows).

**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. | -|[Advanced Group Policy Management](https://docs.microsoft.com/microsoft-desktop-optimization-pack/agpm/)
or
[Group Policy Management Console](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus) |1. Go to `Computer configuration > Administrative templates > Windows components > Microsoft Defender Antivirus`.

2. Look for a policy called **Turn off Microsoft Defender Antivirus**.

3. Choose **Edit policy setting**, and make sure that policy is disabled. This enables Microsoft Defender Antivirus.

**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. | +|[Intune](https://docs.microsoft.com/mem/intune/fundamentals/tutorial-walkthrough-endpoint-manager)

**NOTE**: Intune is now Microsoft Endpoint Manager. |1. Go to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and sign in.
2. Select **Devices** > **Configuration profiles**, and then select the profile type you want to configure.
If you haven't yet created a **Device restrictions** profile type, or if you want to create a new one, see [Configure device restriction settings in Microsoft Intune](https://docs.microsoft.com/intune/device-restrictions-configure).
3. Select **Properties**, and then select **Configuration settings: Edit**.
4. Expand **Microsoft Defender Antivirus**.
5. Enable **Cloud-delivered protection**.
6. In the **Prompt users before sample submission** dropdown, select **Send all samples automatically**.
7. In the **Detect potentially unwanted applications** dropdown, select **Enable** or **Audit**.
8. Select **Review + save**, and then choose **Save**.

For more information about Intune device profiles, including how to create and configure their settings, see [What are Microsoft Intune device profiles?](https://docs.microsoft.com/intune/device-profiles).| +|Control Panel in Windows |Follow the guidance here: [Turn on Microsoft Defender Antivirus](https://docs.microsoft.com/mem/intune/user-help/turn-on-defender-windows).

**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. | +|[Advanced Group Policy Management](https://docs.microsoft.com/microsoft-desktop-optimization-pack/agpm/)
or
[Group Policy Management Console](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/use-group-policy-microsoft-defender-antivirus) |1. Go to `Computer configuration > Administrative templates > Windows components > Microsoft Defender Antivirus`.
2. Look for a policy called **Turn off Microsoft Defender Antivirus**.
3. Choose **Edit policy setting**, and make sure that policy is disabled. This enables Microsoft Defender Antivirus.

**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. | ### Confirm that Microsoft Defender Antivirus is in passive mode @@ -147,8 +130,8 @@ Microsoft Defender Antivirus can run alongside McAfee if you set Microsoft Defen |Method |What to do | |---------|---------| -|Command Prompt |1. On a Windows device, open Command Prompt as an administrator.

2. Type `sc query windefend`, and then press Enter.

3. Review the results to confirm that Microsoft Defender Antivirus is running in passive mode. | -|PowerShell |1. On a Windows device, open Windows PowerShell as an administrator.

2. Run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/Get-MpComputerStatus) cmdlet.

3. In the list of results, look for either **AMRunningMode: Passive Mode** or **AMRunningMode: SxS Passive Mode**.| +|Command Prompt |1. On a Windows device, open Command Prompt as an administrator.
2. Type `sc query windefend`, and then press Enter.
3. Review the results to confirm that Microsoft Defender Antivirus is running in passive mode. | +|PowerShell |1. On a Windows device, open Windows PowerShell as an administrator.
2. Run the [Get-MpComputerStatus](https://docs.microsoft.com/powershell/module/defender/Get-MpComputerStatus) cmdlet.
3. In the list of results, look for either **AMRunningMode: Passive Mode** or **AMRunningMode: SxS Passive Mode**.| > [!NOTE] > You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows. @@ -174,8 +157,8 @@ The specific exclusions to configure depend on which version of Windows your end |OS |Exclusions | |--|--| -|- Windows 10, [version 1803](https://docs.microsoft.com/windows/release-health/status-windows-10-1803) or later (See [Windows 10 release information](https://docs.microsoft.com/windows/release-health/release-information))
- Windows 10, version 1703 or [1709](https://docs.microsoft.com/windows/release-health/status-windows-10-1709) with [KB4493441](https://support.microsoft.com/help/4493441) installed
- [Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)
- [Windows Server, version 1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |`C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseCncProxy.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseIR.exe`
| -|- [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows 7](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)
- [Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)
- [Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)
- [Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |`C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 6\45\MsSenseS.exe`

**NOTE**: Where Monitoring Host Temporary Files 6\45 can be different numbered subfolders.

`C:\Program Files\Microsoft Monitoring Agent\Agent\AgentControlPanel.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HealthService.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HSLockdown.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MOMPerfSnapshotHelper.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\TestCloudConnection.exe` | +|Windows 10, [version 1803](https://docs.microsoft.com/windows/release-health/status-windows-10-1803) or later (See [Windows 10 release information](https://docs.microsoft.com/windows/release-health/release-information))

Windows 10, version 1703 or [1709](https://docs.microsoft.com/windows/release-health/status-windows-10-1709) with [KB4493441](https://support.microsoft.com/help/4493441) installed

[Windows Server 2019](https://docs.microsoft.com/windows/release-health/status-windows-10-1809-and-windows-server-2019)

[Windows Server, version 1803](https://docs.microsoft.com/windows-server/get-started/whats-new-in-windows-server-1803) |`C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseCncProxy.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseSampleUploader.exe`

`C:\Program Files\Windows Defender Advanced Threat Protection\SenseIR.exe` | +| [Windows 8.1](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows 7](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1)

[Windows Server 2016](https://docs.microsoft.com/windows/release-health/status-windows-10-1607-and-windows-server-2016)

[Windows Server 2012 R2](https://docs.microsoft.com/windows/release-health/status-windows-8.1-and-windows-server-2012-r2)

[Windows Server 2008 R2 SP1](https://docs.microsoft.com/windows/release-health/status-windows-7-and-windows-server-2008-r2-sp1) |`C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 6\45\MsSenseS.exe`

**NOTE**: Where Monitoring Host Temporary Files 6\45 can be different numbered subfolders.

`C:\Program Files\Microsoft Monitoring Agent\Agent\AgentControlPanel.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HealthService.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\HSLockdown.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MOMPerfSnapshotHelper.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe`

`C:\Program Files\Microsoft Monitoring Agent\Agent\TestCloudConnection.exe` | ## Add McAfee to the exclusion list for Microsoft Defender Antivirus @@ -191,33 +174,27 @@ You can choose from several methods to add your exclusions to Microsoft Defender |Method | What to do| |--|--| -|[Intune](https://docs.microsoft.com/mem/intune/fundamentals/tutorial-walkthrough-endpoint-manager)

**NOTE**: Intune is now Microsoft Endpoint Manager. |1. Go to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and sign in.

2. Select **Devices** > **Configuration profiles**, and then select the profile that you want to configure.

3. Under **Manage**, select **Properties**.

4. Select **Configuration settings: Edit**.

5. Expand **Microsoft Defender Antivirus**, and then expand **Microsoft Defender Antivirus Exclusions**.

6. Specify the files and folders, extensions, and processes to exclude from Microsoft Defender Antivirus scans. For reference, see [Microsoft Defender Antivirus exclusions](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions).

7. Choose **Review + save**, and then choose **Save**. | -|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/) |1. Using the [Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/manage/admin-console), go to **Assets and Compliance** > **Endpoint Protection** > **Antimalware Policies**, and then select the policy that you want to modify.

2. Specify exclusion settings for files and folders, extensions, and processes to exclude from Microsoft Defender Antivirus scans. | -|[Group Policy Object](https://docs.microsoft.com/previous-versions/windows/desktop/Policy/group-policy-objects) | 1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.

2. In the **Group Policy Management Editor**, go to **Computer configuration** and click **Administrative templates**.

3. Expand the tree to **Windows components > Microsoft Defender Antivirus > Exclusions**.
**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows.

4. Double-click the **Path Exclusions** setting and add the exclusions.
- Set the option to **Enabled**.
- Under the **Options** section, click **Show...**.
- Specify each folder on its own line under the **Value name** column.
- If you specify a file, make sure to enter a fully qualified path to the file, including the drive letter, folder path, filename, and extension. Enter **0** in the **Value** column.

5. Click **OK**.

6. Double-click the **Extension Exclusions** setting and add the exclusions.
- Set the option to **Enabled**.
- Under the **Options** section, click **Show...**.
- Enter each file extension on its own line under the **Value name** column. Enter **0** in the **Value** column.

7. Click **OK**. | -|Local group policy object |1. On the endpoint or device, open the Local Group Policy Editor.

2. Go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Exclusions**.
**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows.

3. Specify your path and process exclusions. | -|Registry key |1. Export the following registry key: `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\exclusions`.

2. Import the registry key. Here are two examples:
- Local path: `regedit.exe /s c:\temp\ MDAV_Exclusion.reg`
- Network share: `regedit.exe /s \\FileServer\ShareName\MDAV_Exclusion.reg` | +|[Intune](https://docs.microsoft.com/mem/intune/fundamentals/tutorial-walkthrough-endpoint-manager)

**NOTE**: Intune is now Microsoft Endpoint Manager. |1. Go to the [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431) and sign in.
2. Select **Devices** > **Configuration profiles**, and then select the profile that you want to configure.
3. Under **Manage**, select **Properties**.
4. Select **Configuration settings: Edit**.
5. Expand **Microsoft Defender Antivirus**, and then expand **Microsoft Defender Antivirus Exclusions**.
6. Specify the files and folders, extensions, and processes to exclude from Microsoft Defender Antivirus scans. For reference, see [Microsoft Defender Antivirus exclusions](https://docs.microsoft.com/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus-exclusions).
7. Choose **Review + save**, and then choose **Save**. | +|[Microsoft Endpoint Configuration Manager](https://docs.microsoft.com/mem/configmgr/) |1. Using the [Configuration Manager console](https://docs.microsoft.com/mem/configmgr/core/servers/manage/admin-console), go to **Assets and Compliance** > **Endpoint Protection** > **Antimalware Policies**, and then select the policy that you want to modify.
2. Specify exclusion settings for files and folders, extensions, and processes to exclude from Microsoft Defender Antivirus scans. | +|[Group Policy Object](https://docs.microsoft.com/previous-versions/windows/desktop/Policy/group-policy-objects) | 1. On your Group Policy management computer, open the [Group Policy Management Console](https://technet.microsoft.com/library/cc731212.aspx), right-click the Group Policy Object you want to configure and click **Edit**.
2. In the **Group Policy Management Editor**, go to **Computer configuration** and click **Administrative templates**.
3. Expand the tree to **Windows components > Microsoft Defender Antivirus > Exclusions**.
**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows.
4. Double-click the **Path Exclusions** setting and add the exclusions.
- Set the option to **Enabled**.
- Under the **Options** section, click **Show...**.
- Specify each folder on its own line under the **Value name** column.
- If you specify a file, make sure to enter a fully qualified path to the file, including the drive letter, folder path, filename, and extension. Enter **0** in the **Value** column.
5. Click **OK**.
6. Double-click the **Extension Exclusions** setting and add the exclusions.
- Set the option to **Enabled**.
- Under the **Options** section, click **Show...**.
- Enter each file extension on its own line under the **Value name** column. Enter **0** in the **Value** column.
7. Click **OK**. | +|Local group policy object |1. On the endpoint or device, open the Local Group Policy Editor.
2. Go to **Computer Configuration** > **Administrative Templates** > **Windows Components** > **Microsoft Defender Antivirus** > **Exclusions**.
**NOTE**: You might see *Windows Defender Antivirus* instead of *Microsoft Defender Antivirus* in some versions of Windows.
3. Specify your path and process exclusions. | +|Registry key |1. Export the following registry key: `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\exclusions`.
2. Import the registry key. Here are two examples:
- Local path: `regedit.exe /s c:\temp\ MDAV_Exclusion.reg`
- Network share: `regedit.exe /s \\FileServer\ShareName\MDAV_Exclusion.reg` | ## Add McAfee to the exclusion list for Microsoft Defender for Endpoint To add exclusions to Microsoft Defender for Endpoint, you create [indicators](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/manage-indicators#create-indicators-for-files). 1. Go to the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)) and sign in. - 2. In the navigation pane, choose **Settings** > **Rules** > **Indicators**. - 3. On the **File hashes** tab, choose **Add indicator**. - -3. On the **Indicator** tab, specify the following settings: +4. On the **Indicator** tab, specify the following settings: - File hash (Need help? See [Find a file hash using CMPivot](#find-a-file-hash-using-cmpivot) in this article.) - Under **Expires on (UTC)**, choose **Never**. - -4. On the **Action** tab, specify the following settings: +5. On the **Action** tab, specify the following settings: - **Response Action**: **Allow** - Title and description - -5. On the **Scope** tab, under **Device groups**, select either **All devices in my scope** or **Select from list**. - -6. On the **Summary** tab, review the settings, and then click **Save**. +6. On the **Scope** tab, under **Device groups**, select either **All devices in my scope** or **Select from list**. +7. On the **Summary** tab, review the settings, and then click **Save**. ### Find a file hash using CMPivot @@ -226,15 +203,10 @@ CMPivot is an in-console utility for Configuration Manager. CMPivot provides acc To use CMPivot to get your file hash, follow these steps: 1. Review the [prerequisites](https://docs.microsoft.com/mem/configmgr/core/servers/manage/cmpivot#prerequisites). - 2. [Start CMPivot](https://docs.microsoft.com/mem/configmgr/core/servers/manage/cmpivot#start-cmpivot). - 3. Connect to Configuration Manager (`SCCM_ServerName.DomainName.com`). - 4. Select the **Query** tab. - 5. In the **Device Collection** list, and choose **All Systems (default)**. - 6. In the query box, type the following query:
```kusto @@ -248,16 +220,14 @@ File(c:\\windows\\notepad.exe) | Collection type | What to do | |--|--| -|[Device groups](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-groups) (formerly called machine groups) enable your security operations team to configure security capabilities, such as automated investigation and remediation.

Device groups are also useful for assigning access to those devices so that your security operations team can take remediation actions if needed.

Device groups are created in the Microsoft Defender Security Center. |1. Go to the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)).

2. In the navigation pane on the left, choose **Settings** > **Permissions** > **Device groups**.

3. Choose **+ Add device group**.

4. Specify a name and description for the device group.

5. In the **Automation level** list, select an option. (We recommend **Full - remediate threats automatically**.) To learn more about the various automation levels, see [How threats are remediated](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations#how-threats-are-remediated).

6. Specify conditions for a matching rule to determine which devices belong to the device group. For example, you can choose a domain, OS versions, or even use [device tags](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-tags).

7. On the **User access** tab, specify roles that should have access to the devices that are included in the device group.

8. Choose **Done**. | -|[Device collections](https://docs.microsoft.com/mem/configmgr/core/clients/manage/collections/introduction-to-collections) enable your security operations team to manage applications, deploy compliance settings, or install software updates on the devices in your organization.

Device collections are created by using [Configuration Manager](https://docs.microsoft.com/mem/configmgr/). |Follow the steps in [Create a collection](https://docs.microsoft.com/mem/configmgr/core/clients/manage/collections/create-collections#bkmk_create). | -|[Organizational units](https://docs.microsoft.com/azure/active-directory-domain-services/create-ou) enable you to logically group objects such as user accounts, service accounts, or computer accounts. You can then assign administrators to specific organizational units, and apply group policy to enforce targeted configuration settings.

Organizational units are defined in [Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services). | Follow the steps in [Create an Organizational Unit in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/create-ou). | +|[Device groups](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-groups) (formerly called machine groups) enable your security operations team to configure security capabilities, such as automated investigation and remediation.

Device groups are also useful for assigning access to those devices so that your security operations team can take remediation actions if needed.

Device groups are created in the Microsoft Defender Security Center. |1. Go to the Microsoft Defender Security Center ([https://aka.ms/MDATPportal](https://aka.ms/MDATPportal)).
2. In the navigation pane on the left, choose **Settings** > **Permissions** > **Device groups**.
3. Choose **+ Add device group**.
4. Specify a name and description for the device group.
5. In the **Automation level** list, select an option. (We recommend **Full - remediate threats automatically**.) To learn more about the various automation levels, see [How threats are remediated](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/automated-investigations#how-threats-are-remediated).
6. Specify conditions for a matching rule to determine which devices belong to the device group. For example, you can choose a domain, OS versions, or even use [device tags](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-atp/machine-tags).
7. On the **User access** tab, specify roles that should have access to the devices that are included in the device group.
8. Choose **Done**. | +|[Device collections](https://docs.microsoft.com/mem/configmgr/core/clients/manage/collections/introduction-to-collections) enable your security operations team to manage applications, deploy compliance settings, or install software updates on the devices in your organization.

Device collections are created by using [Configuration Manager](https://docs.microsoft.com/mem/configmgr/). |Follow the steps in [Create a collection](https://docs.microsoft.com/mem/configmgr/core/clients/manage/collections/create-collections#bkmk_create). | +|[Organizational units](https://docs.microsoft.com/azure/active-directory-domain-services/create-ou) enable you to logically group objects such as user accounts, service accounts, or computer accounts. You can then assign administrators to specific organizational units, and apply group policy to enforce targeted configuration settings.

Organizational units are defined in [Azure Active Directory Domain Services](https://docs.microsoft.com/azure/active-directory-domain-services). | Follow the steps in [Create an Organizational Unit in an Azure Active Directory Domain Services managed domain](https://docs.microsoft.com/azure/active-directory-domain-services/create-ou). | ## Configure antimalware policies and real-time protection Using Configuration Manager and your device collection(s), configure your antimalware policies. - - See [Create and deploy antimalware policies for Endpoint Protection in Configuration Manager](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-antimalware-policies). - - While you create and configure your antimalware policies, make sure to review the [real-time protection settings](https://docs.microsoft.com/mem/configmgr/protect/deploy-use/endpoint-antimalware-policies#real-time-protection-settings) and [enable block at first sight](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/configure-block-at-first-sight-microsoft-defender-antivirus). > [!TIP] From ec751d29efa11beac6ad2e0ed92ad0825a8b5e66 Mon Sep 17 00:00:00 2001 From: ImranHabib <47118050+joinimran@users.noreply.github.com> Date: Thu, 4 Mar 2021 16:00:29 +0500 Subject: [PATCH 171/206] Addition of Note As there is a clearance required on the page regarding office, I have researched and found that Office volume license version has few limitation and added this information as note. Please refer to the page https://docs.microsoft.com/en-us/deployoffice/delivery-optimization#:~:text=Volume%20licensed%20versions%20of%20Office,installing%20or%20for%20foreground%20updates. for the same. Problem: https://github.com/MicrosoftDocs/windows-itpro-docs/issues/8966 --- windows/deployment/update/waas-delivery-optimization.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/waas-delivery-optimization.md b/windows/deployment/update/waas-delivery-optimization.md index d497aeae62..061eccaaf8 100644 --- a/windows/deployment/update/waas-delivery-optimization.md +++ b/windows/deployment/update/waas-delivery-optimization.md @@ -32,8 +32,8 @@ Delivery Optimization is a cloud-managed solution. Access to the Delivery Optimi For information about setting up Delivery Optimization, including tips for the best settings in different scenarios, see [Set up Delivery Optimization for Windows 10 updates](waas-delivery-optimization-setup.md). For a comprehensive list of all Delivery Optimization settings, see [Delivery Optimization reference](waas-delivery-optimization-reference.md). ->[!NOTE] ->WSUS can also use [BranchCache](waas-branchcache.md) for content sharing and caching. If Delivery Optimization is enabled on devices that use BranchCache, Delivery Optimization will be used instead. +> [!NOTE] +> WSUS can also use [BranchCache](waas-branchcache.md) for content sharing and caching. If Delivery Optimization is enabled on devices that use BranchCache, Delivery Optimization will be used instead. ## New in Windows 10, version 2004 @@ -68,6 +68,9 @@ For information about setting up Delivery Optimization, including tips for the b - Edge browser installs and updates - [Dynamic updates](https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-benefits-of-windows-10-dynamic-update/ba-p/467847) +> [!NOTE] +> Volume licensed versions of Office 2019, such as Office Professional Plus 2019, can take advantage of Delivery Optimization, but only for background updates. Delivery Optimization isn't available for installing or for foreground updates. The same applies to volume licensed versions of Project 2019 and Visio 2019. + ## Requirements The following table lists the minimum Windows 10 version that supports Delivery Optimization: From 3d860d82bc4fb23ea64775783913440c5ee0f48b Mon Sep 17 00:00:00 2001 From: Anders Ahl <58516456+GenerAhl@users.noreply.github.com> Date: Thu, 4 Mar 2021 14:12:46 +0100 Subject: [PATCH 172/206] Update waas-manage-updates-wufb.md Clarification on what Office updates are delivered through Windows Update. The majority of Enterprise customers are not using the legacy MSI version and need to understand where Office updates are coming from. --- windows/deployment/update/waas-manage-updates-wufb.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/windows/deployment/update/waas-manage-updates-wufb.md b/windows/deployment/update/waas-manage-updates-wufb.md index 5a410e9d8c..7971fe2239 100644 --- a/windows/deployment/update/waas-manage-updates-wufb.md +++ b/windows/deployment/update/waas-manage-updates-wufb.md @@ -47,10 +47,12 @@ Windows Update for Business enables an IT administrator to receive and manage a Windows Update for Business provides management policies for several types of updates to Windows 10 devices: - **Feature updates:** Previously referred to as "upgrades," feature updates contain not only security and quality revisions, but also significant feature additions and changes. Feature updates are released semi-annually in the fall and in the spring. -- **Quality updates:** Quality updates are traditional operating system updates, typically released on the second Tuesday of each month (though they can be released at any time). These include security, critical, and driver updates. Windows Update for Business also treats non-Windows updates (such as updates for Microsoft Office or Visual Studio) as quality updates. These non-Windows Updates are known as "Microsoft updates" and you can set devices to receive such updates (or not) along with their Windows updates. +- **Quality updates:** Quality updates are traditional operating system updates, typically released on the second Tuesday of each month (though they can be released at any time). These include security, critical, and driver updates. Windows Update for Business also treats non-Windows updates (such as updates for Microsoft Office MSI or Visual Studio) as quality updates. These non-Windows Updates are known as "Microsoft updates" and you can set devices to receive such updates (or not) along with their Windows updates. - **Driver updates:** Updates for non-Microsoft drivers that are relevant to your devices. Driver updates are on by default, but you can use Windows Update for Business policies to turn them off if you prefer. - **Microsoft product updates**: Updates for other Microsoft products, such as versions of Office that are installed by using Windows Installer (MSI). Versions of Office that are installed by using Click-to-Run can't be updated by using Windows Update for Business. Product updates are off by default. You can turn them on by using Windows Update for Business policies. +>[!NOTE] +>There's a difference between Microsoft Office MSI and Microsoft 365 Apps (formerly known as [Office 365 ProPlus](https://docs.microsoft.com/deployoffice/name-change)). Microsoft Office MSI receives patches from Windows Update and Microsoft 365 Apps are serviced through different [update channels](https://docs.microsoft.com/deployoffice/overview-update-channels) from the Office Content Delivery Network (CDN) ## Offering You can control when updates are applied, for example by deferring when an update is installed on a device or by pausing updates for a certain period. @@ -126,7 +128,7 @@ The large number of different policies offered for Windows 10 can be overwhelmin The Update Baseline toolkit makes it easy by providing a single command for IT Admins to apply the Update Baseline to devices. You can get the Update Baseline toolkit from the [Download Center](https://www.microsoft.com/download/details.aspx?id=101056). >[!NOTE] ->The Update Baseline toolkit is available only for Group Policy. Update Baseline does not affect your offering policies, whether you’re using deferrals or target version to manage which updates are offered to your devices when. +>The Update Baseline toolkit is available only for Group Policy. Update Baseline does not affect your offering policies, whether you’re using deferrals or target version to manage which updates are offered to your devices and when.