From 663585c0427f539d90bce6b4a3f0cc55c8471663 Mon Sep 17 00:00:00 2001 From: "jaspreet.ss" Date: Mon, 23 Dec 2024 14:45:14 -0800 Subject: [PATCH] Fix offerId and analytics rule and repackage solution update fix analytics rule and repackage solution --- ...pplicationPrivilegeEscalationOrChange.yaml | 4 +- ...SamsungKnoxKeyguardDisabledFeatureSet.yaml | 4 +- ...SamsungKnoxMobileDeviceBootCompromise.yaml | 4 +- .../SamsungKnoxPasswordLockout.yaml | 4 +- ...oxPeripheralAccessDetectionWithCamera.yaml | 4 +- ...gKnoxPeripheralAccessDetectionWithMic.yaml | 4 +- .../SamsungKnoxSecurityLogFull.yaml | 4 +- .../SamsungKnoxSuspiciousURLs.yaml | 4 +- .../Package/3.0.0.zip | Bin 13418 -> 13420 bytes .../Package/mainTemplate.json | 100 +++++++++--------- .../SolutionMetadata.json | 2 +- 11 files changed, 67 insertions(+), 67 deletions(-) diff --git a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxApplicationPrivilegeEscalationOrChange.yaml b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxApplicationPrivilegeEscalationOrChange.yaml index f751b6f2660..9dcc3bd99fe 100644 --- a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxApplicationPrivilegeEscalationOrChange.yaml +++ b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxApplicationPrivilegeEscalationOrChange.yaml @@ -19,13 +19,13 @@ query: | | where Name == "PROCESS_PRIVILEGE_ESCALATION" | where MitreTtp has "T1548" suppressionEnabled: false -suppressionDuration: 5h +suppressionDuration: 5H incidentConfiguration: createIncident: true groupingConfiguration: enabled: false reopenClosedIncident: false - lookbackDuration: 5h + lookbackDuration: 5H matchingMethod: AllEntities eventGroupingSettings: aggregationKind: SingleAlert \ No newline at end of file diff --git a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxKeyguardDisabledFeatureSet.yaml b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxKeyguardDisabledFeatureSet.yaml index a9b7145c531..31537856fd5 100644 --- a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxKeyguardDisabledFeatureSet.yaml +++ b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxKeyguardDisabledFeatureSet.yaml @@ -18,13 +18,13 @@ query: | | where Name == "TAG_KEYGUARD_DISABLED_FEATURES_SET" and MitreTtp has "T1461" suppressionEnabled: false -suppressionDuration: 5h +suppressionDuration: 5H incidentConfiguration: createIncident: true groupingConfiguration: enabled: false reopenClosedIncident: false - lookbackDuration: 5h + lookbackDuration: 5H matchingMethod: AllEntities eventGroupingSettings: aggregationKind: SingleAlert \ No newline at end of file diff --git a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxMobileDeviceBootCompromise.yaml b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxMobileDeviceBootCompromise.yaml index eedc0798921..025209b794d 100644 --- a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxMobileDeviceBootCompromise.yaml +++ b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxMobileDeviceBootCompromise.yaml @@ -19,13 +19,13 @@ query: | | where Name == "BOOT_COMPROMISED_SOFTWARE_BINARY" and MitreTtp has "T1645" suppressionEnabled: false -suppressionDuration: 5h +suppressionDuration: 5H incidentConfiguration: createIncident: true groupingConfiguration: enabled: false reopenClosedIncident: false - lookbackDuration: 5h + lookbackDuration: 5H matchingMethod: AllEntities eventGroupingSettings: aggregationKind: SingleAlert \ No newline at end of file diff --git a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPasswordLockout.yaml b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPasswordLockout.yaml index b6cf11d8b1a..7d74c797326 100644 --- a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPasswordLockout.yaml +++ b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPasswordLockout.yaml @@ -19,13 +19,13 @@ query: | | where Name == "PASSWORD_LOCKOUT" and MitreTtp has "T1110" suppressionEnabled: false -suppressionDuration: 5h +suppressionDuration: 5H incidentConfiguration: createIncident: true groupingConfiguration: enabled: false reopenClosedIncident: false - lookbackDuration: 5h + lookbackDuration: 5H matchingMethod: AllEntities eventGroupingSettings: aggregationKind: SingleAlert diff --git a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPeripheralAccessDetectionWithCamera.yaml b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPeripheralAccessDetectionWithCamera.yaml index 9b8c00649a8..017343ba9bb 100644 --- a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPeripheralAccessDetectionWithCamera.yaml +++ b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPeripheralAccessDetectionWithCamera.yaml @@ -17,13 +17,13 @@ query: | | where Name == "PERIPHERAL_ACCESS_THROUGH_POLICY_DETECTED_CAMERA" and MitreTtp has "KNOX.2" suppressionEnabled: false -suppressionDuration: 5h +suppressionDuration: 5H incidentConfiguration: createIncident: true groupingConfiguration: enabled: false reopenClosedIncident: false - lookbackDuration: 5h + lookbackDuration: 5H matchingMethod: AllEntities eventGroupingSettings: aggregationKind: SingleAlert diff --git a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPeripheralAccessDetectionWithMic.yaml b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPeripheralAccessDetectionWithMic.yaml index afa510d85c6..e028b431ab5 100644 --- a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPeripheralAccessDetectionWithMic.yaml +++ b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxPeripheralAccessDetectionWithMic.yaml @@ -19,13 +19,13 @@ query: | alertDetailsOverride: alertDynamicProperties: [] suppressionEnabled: false -suppressionDuration: 5h +suppressionDuration: 5H incidentConfiguration: createIncident: true groupingConfiguration: enabled: false reopenClosedIncident: false - lookbackDuration: 5h + lookbackDuration: 5H matchingMethod: AllEntities eventGroupingSettings: aggregationKind: SingleAlert diff --git a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxSecurityLogFull.yaml b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxSecurityLogFull.yaml index cd0f7f3835c..06a8eb92b55 100644 --- a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxSecurityLogFull.yaml +++ b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxSecurityLogFull.yaml @@ -17,13 +17,13 @@ query: | | where Name == "LOG_IS_FULL" and MitreTtp has "KNOX.1" suppressionEnabled: false -suppressionDuration: 5h +suppressionDuration: 5H incidentConfiguration: createIncident: true groupingConfiguration: enabled: false reopenClosedIncident: false - lookbackDuration: 5h + lookbackDuration: 5H matchingMethod: AllEntities eventGroupingSettings: aggregationKind: SingleAlert diff --git a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxSuspiciousURLs.yaml b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxSuspiciousURLs.yaml index a8d19e14931..d573106ae99 100644 --- a/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxSuspiciousURLs.yaml +++ b/Solutions/Samsung Knox Asset Intelligence/Analytic Rules/SamsungKnoxSuspiciousURLs.yaml @@ -19,13 +19,13 @@ query: | | where Name == "SUSPICIOUS_URL_ACCESSED" and ConfidenceScore > 0.9 suppressionEnabled: false -suppressionDuration: 5h +suppressionDuration: 5H incidentConfiguration: createIncident: true groupingConfiguration: enabled: false reopenClosedIncident: false - lookbackDuration: 5h + lookbackDuration: 5H matchingMethod: AllEntities eventGroupingSettings: aggregationKind: SingleAlert diff --git a/Solutions/Samsung Knox Asset Intelligence/Package/3.0.0.zip b/Solutions/Samsung Knox Asset Intelligence/Package/3.0.0.zip index a4a75db35df7426f8708eef859da5aee3636f1ce..05384a986ba30d3f7168483c39b13829a027e326 100644 GIT binary patch delta 9829 zcmV-rCYssmXzXYWP)h>@6aWAK2mm8{m$40C3KAoGmswC?&kjH-005R(0RRyIlR-2S zvyuv)0)O0ZE3Rl`MP^n+KIIm;QB>qcF|xSfrG*6!-h`x{8V9yDFowr^BP8?T!66+O zmcd#{QjR4JlMcNK(Z#7) zd^@Y1O{l~CglZl`j^W62w|&RpZd6Iwr}!_xsee>Sh{`3^rjFq~_#`4+A(@a&X|gj< zl~_M{6_ZgTvg^N`Pz`my5%#<(vQ;;>Gep~{=H*s&P1&eUE#r?VMLI|U4 z_)$u7HHnbs+_Ckk=4+GS)>Ch3gpIJJR6BL#d!xFcYa8qX;p|^>_63d9>@4eHm={i^ zkbl^`ytKBJvPY{&I?>dckqHtl5}h6MbzxV>g2Q-rS&7NU6R{Xf9@F$$CN>geSc{6@ z_p?+qk@2v3CRgv*9N8nHGhPD!G*ivvOds{7h>x1(cNHdb-(T27z6dsEts|+rW(*^) z_0dLAMKEg~p$OEs-G=m&(tbh6E8Mt}EB>Ufw>ng%xVMv>wJ9gA_W79&%gxRDhUVk<00Qj095 zz^b#b0{a0w^1`VU6NwkN!IX{57m4F%b+?(LyUoJ7%Tf;d?VV0b+f|x7T0?2;YJXqZ zY1K7_)_1yEf4A3Z^y+E4+gx6Eixgj2cbjX{-C{x%*WKp&b+?d6bL(y^M|WF=b(f_a zsI*60y@sMvx&utM2Eb&ap){MFj@s_1t$M$ern{{b=x%}H3+rxcUAkLHh~m22`UP~i zh)8qmZaYVJ+l6(v&He6RP*-<*N`GUw*90a9JBr%d(UfMVt$~5<^mgeWO?TU?@VoiN z7uMbO+Wc-2A&Tp6`xnsNA|lPLyPX`}?G)BsmQvF@&F-MBD|(;qD(yylSJ_ePs|>HCfzM2L~-5itY3Evi8QzFc5`&MTUd8lN`Km}x0(YT zZL8i<+O2w1>G!m{GH4Czt(`h;wi>B1Lw9-IEmC}8-R-VPcZ&&8Tz9+c*WE%Q&8@q= z9Np~|)?J=*M{n!xK}+d&kx68Cw+o%aPE%|28twY7*3i;)x3|3R7Ad~4?)KKCyTybk zuDiYU>uw>Da&*@(DlXpw;(xj3!s5vV0kb&ZOj?rkR@jxm|NN;#f4Uf?`N{;InGP*F z^Rqp1>^nn;a<)ZP`8E<#{D~2o4{X+(ExzLgkJ(ENMmDHqLmfh9z4oQvA~|+VRVoUA&X3SOHf4ElMN0 zs^&5BE;0uneKl)i^5;k7TUhCrbN};AorcPvG0%olZzY+hpJNFx5uNd!CB2{t`}uDT zi#h4{)S`}|eLkK|l7C_rVXfipeHJtMiOC?LF|(}TCUNpVUVDaT7Fkq5HqUtjY$el~ zO#7zcj%awXS#rvd!Jn$mt#02JGJKq=C4OTO(TFa2u%~Q^irP0!&_P_0q=AAts%iX_ zlCcesDRG5{5_*U0+lXrE#I%PlrbeNNHg!FF3^`m}xW!ZkK7SB7_r-H)4n;3xSQ?a! zWcsR0bpj42SQCVOzw3J>x0YN7Lr0yA{>K!QBEcr*Pf|0p+@OV^O>#BNmF=k}_lpkI zC@v#QER9@pc zaaE``x^TV3x_^>03(V87C}BFz)-r*zIE0r%{yE`;8sv~GkN$Q}Cm7jdWKG58#?wJT#x$sQT2 z-#76ib9!I{`c^y(UpHsCmW_7eJ+S0kDV3Pa{G9b6^?!5Onh4td+0_Az8ldxYS5ON9 zrRP`=pQwku_X_GEp!6K;0sa08DnXEWjx})k;6h0&r~{wS&#r~S9gK(~jXQ{e4j>SM z4pv>Dvyq|pu`2>GStF?xcqf)DCl|z$%;{lIph-^bp=^;tl?uTkLVhH~H{^>`dPCHq zz1gbkDSy=smAhm!sCTMiia<3bj>jm-Q@yDhUa=iZV7MX{hcpA#bZJ7eL<_0FP-ASk zIJ!z6Zm>jhw0JJYNg2(TrYU@2BXbuXnx*Pdl=VZyh3NX>ihlQyx`W#+Fh0LW%_gCQ zLuw%_~5~q^e`V;L^cyr#ez zpI0NpjqcQrf#*|~x}klmxU2OT6vkzKbpQMq9KY(3$ zgm+kH4_oB;uqun#48=A0f`2g>Eq+t{WjmI)I5!#HQ!oj2b#zV|L?H*f1_RNdYSpB; z>Zvv94AlrLdW4mOrmC7Is79WuV@Q=?CUOx)m8eoLO|cc8O&vjS-7Bd3F!XQlLWn1c#4!giUnpb!m#J%06S zBeJDh*Bqq=KO3)J@fZ)<{uU?QP*ahZoWl!MnoeQhWV+c}&b5;9bUYqUJ)Aa0brwwk zMWt1GQB7`wCZDk}Tz`@-9P*_MKJ`P+^pj|GqlRAIU_R_?n$D{F*sy|tnzwwQ31V8c zCRzs@hbhFZYOtITjT+k{drW!dg_Z2pt3%Zt^=;Jw%b^}Nw)^VUZ$dRebvZBw^$-0H zwvA^`6bF?GD#!tiCiZ|mKW98aqY@I>sBnk)-ef{DPdoyzr+;cVQ-K_8$k1|wF}HEb z)^>pRmTYkqf>(O9SvJB50_sz0MUo!_cS&)3G-3 z6GK~Zu;g zdw}%5lCja}Y$RFQ!4bFTgNr$eZxTkg9cph;saJRqjEE>A)#vM>=D%czflQem4yGn+ z)J~1Or2|{`;Lxw3PpV?3fiXl9v)VxV5AxI$;V5z1-hXv@C_zB(ef>@aE7pB7T&h>E zHpTHFuY>ekuU;V|UDio}4NnjcWQ-@BW)dh$Rd`>h17sNlFX{?g*s1eM!MZORDYE4p zezhbphiCNgI2G$AR&iok12_VFy3Zl9f$l2l;hBYjOQ2M~(d4i8OIwWV=YLqy`b2q*Rpk5+T)B)hzMC%eEMEHg zC*q)k?Z{CEAs+MA^a0P*hmzL5tar&{Zz7WUdm?7mBIX_n6rm%1(P55j3;W8sSJMg- znV!+-L=N1N*Yg$iZONn3DtYN!fChGn7U6 zfJ?ScKIQ1OaKc5Mh0Omk$5&MJ=p^VO3!PfA5nd#UU*yjAaIy&{Y zx1VX*4N3VMk^amZkg_)(&5Zfy-)OYR2BWz*7Db}zXw#-{q)FZAIM2qJUwOk!9)Er_ z-^Q3f#+F}oL(4*PrfppLB{!@rBw_l-lwWj1O1eWXw(%qt zY|hxijVr~L`OmSuKX-#l-halFoDC^6*lL`{idrpu!%4Z(B%ykXZ7^BA#$|6L z$p+(NGy54EMH2L?$i|RzL&!7U5E9ds)Sf1H)plO5{M=S)=Y_K6YV7B|8hdrCuou^q zasg0r%};D1T5sW+jO zhrq7t5ZJ^k@BAszmvi>(>=kK0{n*!81Dm}kFk>-x!8`OqSyy$mDu>yMog=%GbmBqw zmX5?h`<$Z?-wTWJ47gJNLR~(F_a`A-)@!7!8E`1ZkkBPT=N0k%I=CymZ`r=XctbdG zs*4QR!-3HmHVjh!E_z6QDStJH67XRYhR48Q8t<@mIVau-M}P#igZ0TSu!1aAv5Vx0 z&foz&i3e?G@ihvnWsg+|QCOH`J35aJM%0`Th=Od$jgu{M2?O31J%Qj0xp&B5>ad>J zu8~ztbPI z>8{dk_IH#v9W)h{_FD?o^k#c^(C;>OdW=A!Qc!l5;((!{IPG`G0FUKH&m$)kIIhum~xUF2bu*e9-FF@#nD`f3eeTr@ZOb+dC<* znw{Ndoxl4AEP?si_gqB5=OZ!-QZaw^T{KKexz~KUF(FOB0b@ZlQMcc2^;(0v($gBM z((dUyN?)bA($_kAUDJEbR*NpsM96O6fp{&UamYKvgp5U+$A54?7&;i?ml3s2Z0$C? z>7K6U;0NAAxP$yNL7;!_Dvc)myK3ybt~XxS>;LPz5~*6XT^|fIO#`p4)C`mF25bD+>_Kun>bk+hLK#AyF}|5Cie`HK8e03h zf(GM`?E6DL;(-Kg@)cVXV;uB^tf;To*VmO1L<{)0O7Qm>$XV7|V zQr~Z}5VRXKsaORSJiwJS!8fsZD0sjZp#&{2#?5~d3J_(MIcL{5mc@pvD(3i$Cw@QKpA0W2zpf*QaABs&`&p-Ssk_P>EAo{bmD8-5Wo3M zQK(Jq<$uy5fmTi=5K&-O1?-K9lNQ)gWRHPkn_EAwgC!}+t2Frg$KT)s%N{gsK8@%) z#tR+Fu=_d4;xiMpz4?DvuIcb!eV{2!hd23n(ER` zr1WO5Rj-nUUM2inFZ`uZZH%g&@m5fDNX$)1?KQ!&z@{zMNK*?(R-4Q!Hn;rsY7w7? zBY%<2X!9VJaJysA)=EvCLgjXYeo?(0#YRGU#Xg?~B<3S@b3;tiFT7aJ(I7p3UohfU9RHPuv| z&Cts&Ka(h9pt3pdy%>@0s7?R(Ml2g-h!S`eGch4;X$z$-%-RC#28I#%MTE9&Qh^7) zY)=OVn0T~oV_wCl_=A85k~@IV-ddQRv{drVS#Tn(1+F@8k}-{@?8Ky z5d2%i;MwEP4O)NMusHDb3q@3AM1TDvBI>gDdy3vqZ2!Qh|A+5*Uo+(7abs@}^ER5> z@DDLN7>vBG*UA1VcsBglfRBuNl{`WJnMgF?F^gP~3JHY-E#41@dSD;WOX<%y5F5iA zUdL45sBW0{{RX4PXGeel8y^LE_V$R#(yB(EG6K!mL!?)2RO|7cz8&f51AnY4f^GgP z{ryvS&z@n5cSFa}qkS!3v=W+O(QI=%woX+~8wunvRAYW>45pg?g8+wP1jZBFg&yv$ z>O{+8mUG47a_G4#RasgnS-`@l0J{uv0Pk!L6FO9X%NBMC0IOIo+u<`fb7V2GkhcuE zd;IqJ7|I#c60?Y#U#^bAtbZ>i@Z#0{x@`lmzqO%_9i|q?Td(6=szacqteE$5jwB%U1hQe-t%Wune3f zNGalhn)2=9^l?Tag}$_h0`z?_J(*Id{bz}RLg1tW9e9~dpJGOh6n`_Cs1PcNnFPzW zsKB|W<34rXvE)1*gh%+P(W|0JAp!yFu2anz(jiKSWV)!WD zT^d8n7(j4jdH(CxBNGzm9p19;Ef|2gI6A{e?{K*zvhtWTQfkywhDwck6s2DRLobI3 z>IlBDp zLH7|`2E!eK3~6S&>IQoke#L-5c(p6v#QXhrtlO6vc8VgTkAEu&4$7|nC3W=+g?eRt z@Pw0Se}Vv^*o2-uIEEj?6P>t&_iRoN{z@wNnXS`0WJ|rtsjY)6#-&xD()<~Fgz2yY zhNmz(HKBXGaXsAWwHf=0iP%!Fh~fDQ!0`Vq_K6u`?5PDB2{8fnxjH?*x;P?N5YAWz zI8$fLGASG*?8)HsvPvf>C_NNUEZ#3<*?P&g9qwP?5p~#I}ihp+KcHgx7 z+hY}X{fa$o{;n>zTMc-V|LEL9w)Gfl8w%Ltp?&SFkJ0MaZ#-FWgmiXVVHw9` z+$k&-A|ajdGJEW{tKax3g?o|epVfrl{GGoS6n}mjcl2EKMn$yKo%VSNzsWP49hvR1 z7FPYFW6#3p@26SboHyeX+b|p2@+uv{9QWbm?JyR(%d2priOQ>R7P<;2@kG49QKVIc z4B^<3d7loGxzofUvWZ8&;!o;5a1jeEb_%wiH+;(kI?2`C(VD?g_BrHh<177S;YE}3NocXj23FY#--5~7!d zk7vlgmP_Vd;6|>ZS?373p4%Bms<>4I4=Lo~I*3sVKb<-Ks66{!>$x`2h zAN$U^kpT82d4OgnZYBHMPZw9KKeuU4> zWfDco4v*C39R>+0k}q5cB3u&8FS4Ut_x8wj<^1C8;OO%5=KSLLZ^tJ`?~iVdE)Vuk z_OFi5K3!LW9CGT7Ro->ws?llh;QQp`jyMQ~ynF!tO-uvhKQIy0tV4023maQrH9q7d zKgz8L|0amazC6n`>%jO(WSDf2JAeM9+}ExJcQ}S>{_xK4v*cq$}riQ%N&DDn^WftZaXvVGZTHW$Fq4!=Xbt zJn0A8klv)skrqQ8Bm{a8KEpGuz@cEQNa7;a%u_hX#bpUlsvLN0X_71Oqt71>Yv#aV%@Ph<9US(N zJ`AU-qaPYB3%%b#$U1d!SHPbb0*h;)$k=?@5Lh$Sl{a4;1a@rc*rTw8ORC2}F1#Ox z!8jNj>cSlGLO^C8WWWu>#j{G)@cN~~K$kQ%B5jQbW5fGqR*7xNsekuGWb11G{msXt zzrX*ye{pzoczn74_T=dB=H1c$)#r<&%bUxitLqA6#3fNP;8wfaD8a3t3T`Fe)h>UY z4B9&8C*ke0CB3TywLpJLP^$#BN>FP)P%9peK!?0GP^-BdsFfhfvY^&nVat<%TE)Ue zLA3<6qKQgSs|2;;*?-mzY87-TOMzNNM*|DsSZVD0B${*MSaXtGf$Mz!I94kM$7+>0 z*6MJqQ?`zU@7jKA+Yrc)fymf!|IACd;uY^U-mDKZr&b$+Q0ZaVp55CRkz(K@v5JSR|R`nelB2jjwTF6lPD~e0;PeI zzbssTKM~TB=Z^ebKMRE=C5W;turyaJ z@g%@fu^3KJErF$Iq7qmtfu(r1bpuNUUCMI6()^+L0)SJRBtD7G+kUcCE)av04Lz{PmDIj^-yH&zHGFAshjG~yDuMYVz=H-Mz%$N5yUCh%Yg;B%oHYP*G4VL9J+_64WX|t$4O|gIWcDUCN3< zt;}eD0YEEF3ZF!GZa`~Jk}L3_&mYk0J+`X3xUqud2CsUU?L^BQTmYuAQCVzdVaXV4T2$~Cj$iT>+@-wht_=`8D7e50lFi&JobbP?l5n>BTqueLi zA9(rs^8EPV`0VrL4R9gwt)oMKz0`p(*rjGe&Nrl9+buz?7r#yLi4JP-bi3sq!4mZ< zQLp(>uXqFlefZi?uikQ~SAr{67`CIXInSwRnVm@ zg?bep04#uarSb2R=*^9H%}H_vzVnIkE(yde0(UJ6PNktZcNuD%(IXVs{g?t4?>8!w zY2SpAFm(=-N#yy`aJcco8#7<}`{d2f{9#oHf5VlyeL(`Yx;t64oe&1H#L^!@;WAm~40CFaE_4_7mf^ZE@PZ=P zH^RSS2?X^`g;6P17S^ZX5-CWPOlGTlJX^~(pUo?Igi=DB2$_g)jYQU9Q2BfmAQ zB5FS7Ck=9Z$gPoow+|qqM~7Gvr17b+p{L6VFzumB297;W6`I4QP%BJt$SK$Xut`qr zA*2K6!X)26Kdwd<(WG9aB5Y@c;eJP+K*r2 z31iXBY*$=3r^bE%@5UIk+0jB(;;8pE?&%N~6?D>_p73{|#J2D2#I=EF0XJa_sJVB; z>k4R^?v0>-#9n9e9lnC~LI3N2e^V$7OAqnVhL`C%5(in?gR6xGRdWxf!ZCQ_;3;#^ zRCuryE+%tGNp>L60o=tSaHi8;k$4L`Q? zpM~a6Kr48E{Lpq1;u_t?^*6Kgs}+CbtdJ`<8YD1E5KHJP$pT4qZFULQa+6)TtD3N6 zCT;~rUX!WE*VO#w@h|@$P)h*<6ay3h000O8BYT&V-!noDBYT%wP+-pvKq&wKmXj_t LHU`o&00000*-jyz delta 9818 zcmZXaRZyKxuxN3Y;10n(KyY_=3%YR+Y+M6;xVr^{YjB5+ySr;}3GNmkaP!}Xd+XGB znSSZ&np(BGW~QdkY))*@)f8djaG{`}kf4@glIze-P|*KHJ@MtBKO&4!P~i z)-9n6nru${`8OEPLWMq+0RY;lNI?S7`c%f_j&|8gkF|p`8e*Z4oZVV7@H|?P9z&ey z_xB*gu5>@Pwn90vs;w@Ya!rPt4N~xROvc@g2vA~t>tXhHI5C9|93BA0O;stv z`oeQxOO|4k5^NHWHqu>DUwH7*hZ@Eelz4I?22F0#OQt{9C4TJJ*ShPxSK_xsLq)h6;r;Zhvw#soJJW}FPfR_1*$Fy%q9Z{sUOjVL@Q`&_e5vBvaHtaVM8!4M^)xu0+mMjJUEWw?%WIeZufqDj3ZE+5 z9WFc(gWKBHHHq6h0Xla674?P9xDqZw2Xr+1pAbbv+qQM1(5*?fuG)*{LUt+G9v`xwkY8FdP_{@Z3CSJdhb$t-N&=xZC-nDgia7DAp*-9Hyo z#lNaKo-f!oEXu_awT+*G6L(Qh!Jf)(21*gTZR?=!3w-SVc5!e7uBpAaNfGohaKzMC zfJ7@%wYP(gNIib&7cSc@dp3oom9%#rxI^TwL){?|x(!x3Dd&yzDq~O7$dtl%e|6_S z_#dXZ2>^W6YN+%*=O0x1owua&$=I^(B>+&1|Sb=FIWfW9r>e~ta=r_DQ%6 zNWfQg>&u4pQB@@bLc;3k5_v{sxFQrIku9O);!xBh3tRr8UZT?N*X&sTvXtpHn&q$`6DQU6??1PsD&xGNYnIPaA)n84@8kz~ zlu5>UHJPLq{g$>({2i|LKw@8=`L_)0#fwOvI#3yptlCZcCAvbQX*Tqfb}2PW4=~9I zlSZC*ZuUY>8KmsMy+MqUAU?i%OJqE4l75qBKcR|!u6Hrt0|k;8h*=%i6bh-(mGu6_ zZdPdHDXk9oaHqVZD|V+|5WAR}?v4;7i|_p%Pz53~S9loF{o55ukueWTG6UJwdy?Sq zZ?bR1xeTP;QYag+IQ(6SS(ZD#1W3(1Ojl!=EI?)Fwg>4WF$fR)JV^;}lGrR5<9$p)zLE z#ihIhOOnxkHN&DEUrNTmkKo*72A6%r9_jigD$FQzD(XPsth^#?uW2yVW*kH ziihls|Fi6KZH!sSBDBo6EV@?sg2Zz)Uu#(@G2YXoW*%v;@XIgIOmy00s0iON z;snpj2&e*6x*Zf~kX_oEOtcwbEU6KcwQI`Ow%E%*kclD_K4W6%mhS0-+$P^|H@J+@-%fd5gQ^b6_Lp=14NB4K>8U~ zhzPfnT#caNBDxhzs)bf5qxD z;0L%e^~V-AthUE_B<1olHGLNmEN8*_j;=z|UjhnL=-w~N{5<11%be&S*vb<%nsNP5 zyz5yQo|MoM=DLzDJ)vC|cUK(dh|gn<)xy#cl*h{B4;8PYu|WA3Op|BniM(?65Uo?9 zZCR$f40x~SR@D5Fqtu(keWx$1D?-T;|ARn9&^cuP_^RB>WWSKMVW%< zFLd3l+R2x5{852I87fKs%QEHMF{)ZLMFVn)Q;i7|K%^sYP-}Wo?m}1A{P5JxFCG?0 zbt4#*ao0U{cOXm0yDX-5BGgM)9iru{6<`pY&3H=0CM=*w{?tKC1a|xCfhLsOwt()S zHRw<|oX7s@w(#Zm@b;5-yi&=94FZ37T4VA&V#F%xOH6D*?sOlf1*=EzNrWhB2QpMyg}; z2!VYmXptBXsdAEw=m?R)W6!j>N3b1(Swbi2=}Mn42pzk<2R`#TAmW@d|0B=E(5@i~ zqgcB)!;>0D;@9P+CU`s#Umt%D=ce~#l&|L+oqI~g9DocDCS^yzz_%5u;c#ue0V{^; zUV@lj8{j%~mu|?GLA%ab z+`xg>#?*!OusI!z5Ff#miEUluGKO+qEz?)o44~!;65mssoPm2Xe!+-QKJxhRGD_3{ zeC?9_I^(O4k@Wn?%CTX!Rj&^X-KvJrg40};1s`gIbaq{#Lz39J*mlUk{j}tv^qvAn?shJmSSF51oohwD#F>`s!~ z4v@fRc~wT?Qj#lGNWy)0gK%qVJn!~paX1VQZlU7)WnN<#htf;o6ErRp5&l67^L39jbOrolc0 z3vS`36?!(Aj<|eEz|E7-5eoDlWX8{-6!YzsbK&{ws3qnOyYykryJPF+;&ya;UEpwN{tyBxLCbH{XK#>>db5LxPQr@si?+1jrQcxp;_Yv2?5wm zGMj-&1%Y$W5U%lKzn`<-j2_g2W8guXv{iqX(#CKU(v`=~cP<#$amj zG$Mg3?iNi9Sa4ypK%?erp8!i;s(gA`auOI-c~Ac=Osb^3RGLlft%%rs)|+oEnX5IZ z1Zy5aW7QORN3qYr*r&eR*m-)R1_TBCdU?)9`BM2}(V|sjG}&_$z`QhwE?hB)#W$!GzuxmNRcYLL4zmxjeS|Erz62?plDjx*Dea^>zo zJ%SUQ{UQs)Sv?M8q;;{B#+5r?=f*R*qVOT57h^HSqhV8X;b96&q)d3N1Zb>&_{ONM z(;A)qJ0(p8!-e{zn7&z@ibYJ0uS@;O@00ML!s4i@UdwDE?G9b6&S}jHb*BPU8;dFh zm5!L!Kq|y#n*AHJIQLvh3)l@Egefy!$WC$iwPy2ec3v)~KM8_l!umwrxE z*zaOxzJ;U4=ii$Nm#6Cr?t#dgU*#izC|X>ItbKVwM|vH1x2gl;i0g@kXc9t)RmZS7 zWtg;8etMTl!<$kxw~ta2mC_T!xC|1q&jtOY%lHqet~DiiG@peFrz1&QXls5mpR6b8 zbcU+p$Qx*62k6m04cPONT61P(4@kCvUo~4$>Jrb>zB`THw(m()dja0OS$l?(TS5Gx zYLkJgCKV^5B^8-UN%aA~9=U^%kO>z$b`E;P{p9)sCToW1E9md`*}h|XUw1;H1yD2I z&EslHk7ng(r11sD>kAAVHS}`$uV{w6`}EISZ>CT0->{b?^4%*|EIH@v*y`I4mrqAD zA=?%>3M+T@N91{plfY-TPcFJ^$otYLic(0UiQ*nowQ4l%o^T&7_^`jdPULhsVN!ge zYn3(5qi5R;wtn~({kRgJvFW7zk{fmT%_ryp2DQEH?yqtgIg6v{d_76h4KLN-4Bn5H zjzT|(Zl}9vZ4%LCTpd}Wq~>Q!lsDv(+h(0}VmZ5S!ZL(jt-63%j_$*-^iYe5m8Y8u zu$P|PR7@;u_eoe<=)Tf=%Z(yfS5L0*E|#(TC@jS-+|Yhco@phkeU`>Nc+_=8_om8( z+sZK}yR2)`J_O_iYu`qiL1Lo8+hqavip+6KXzDE<8A_vR^yeng%dvtTry|jbV!h2Z z_XaKyQafT9`2i9QtJ+1rSiC0vhp=RqLV1aM{B@IhpV;wDxg_+VVXFsDo+z3l?ZjBh zgRlha4oaF5<}zXBi}Ldhqd%=xb5p36IAGalHTx-_}J*_|%d)aPiL zk1sA9*qyj=ySM&$KGx9`4cA^cc2a%I2!Xe@1bUNAGyz8mX3Rj)B4ur)&gLJ@0=D00 z%d51DZ2>p_lTT| z-_YB9(JoabS}K?2^f|-Nzko&;&61ZF@^e&hR*O_imPH^l8u1t~k?4gxkzOy>~X z^5e;ei@Ys|vpd2-iQ>F7mO*GqN$0gw7|cWyHdA(SSw?_#PNQY?mSiPQx0bE}U zW^i!gT$ybQ`qER)YVf|tf_rdy=;sh2b6-va+{wFV?#2gqc=RE%)yHt(0a)afedcDm zA-*GIJ$2)nni^*62>dI@)a^@-kznI1f+O^|KSP<4rQ#i>PU~}4KbP%;QA!&F4e0K> z>I<8Q$Ks5Z*Y(>MkB-i1*U}&cz=F$uq4fF!eZoS{bl&|+QP-9kr46r*MjZ;1R{*nZ zkfYhP+EoCX1hT$SOy)Zs?#D3}*Qx49lN%iz*gl%H=qmB;rWfLkkQm!R>QX~dv!-CI zcn-ncz|VbSAMVQ8i@>|%dAVS&1_8U(`EJj%&V~N?2oDU%K~ffKbXkT?N<|)m$pG7jomZdusgAPAfJ)kNj?BMWmWni?-*0 ztlk!U&8?#$lYmTma-Q-au|>9d>)Begkilo0(DwmsuEpX^x#LNr3L{$dPK76k(UW4~ z8lkq}URB;vLV9M>+SeeoYMmJx>6l6 zUCBh#2F&6(qFS;q35vB$>f)jepPAAvNf=ii9X{twV|AK{Y|YcKJQ>;LwaMqoHiPZ9 z+1+}?UW^JU9p{sC!m5X#lC0&r?8(vJ%n9oj$3Fr)f7GGP!=AnO*3PFfQ1S~U_HMD? zSS}PR<0-U5amU34MsBtTNSN5zc+|jb3bXx~nK|cnC}hBEL}IhaZs(R zXTDv=>hg?ypuJ+UGLu-F!&fj!Z-QSyN29)qMsip!g2D7%&B4H6zqVN&>bb%tRwmQH zx*SMg5c$aqh2aKRX2$c^iG=nmYj+1r+9SSnt-b%<+W%Dq%#b7;OMQ?2jKEUs;cXKX zP03_t@&|vo#b526(fjF?Ug$Z_W;w%BWIG^D7zJ^M8I8ty-?T+@AXp3Vn$aP1fJ5oo zQ|c-?i_ZT>9S1isMCChKCBY}r53^;Hhgl`e#dq+$-wqY@@d*;v+c2C<()db!kQ z5LG%B@hmL`ELdJX;&$e)yalSiV{Tn{S&fYD4Q-MiI&eXDD9k+A3B5rz$$vGk?4RnO zDTwZwyo2626K#6T@moLQVWS}HcTiy5_lV?upUZXp$P>of5m(lwzQKO}f-Vy~9R~%? zBZ6{sc8--;tQ{+23HPHeT&`xVbZJl6PjGG?QCAxdSbx=ie))NkBixUB85Wl>`=Z}v zL(A1)uzKibpIx5AgFRweI`q0gsKosj5gKC{DTcloRrr^|Vr1GN%kQZEgBe%t^7=-# z`hZYXXb+-YsLfSUI=9ldG}be0s4sPf&HdI+ha+ZYl#WC$k5A{<94VZov{qQW-G*eL zdd5oIz+lBONiKCHqUQt?W?!I6$0xRVuIjpE!%RNS(>Qxg&*0%8&guv8pht}U)jEV$ zM&!fZOj&FMIoAFM<_RYHD~(TY@f9Df(yAT`-x%zwO^Emu6Ep^3xewL{kN0AvQ2cB$ z;g4QSd_EVey-Z`nhW5xK3S5286d8;mX0+l`2Pn0$Ig!&G)B{~rhy6}E%tyTikm9d2 z3w5LuCE#EdKtF$Q4B66WHK=uy>>WR4_j|695=-{G4qmBuv~z`}aRh9S+`KMV$AM-gMDK zYmMwljmmM3(Nq34;u3Axc%7i^CYfX-lMzAg=8Rf|b#?o*8hkIF#v55Zg z=`{*E@XAi7EAsK>To=N|d4?-3N1^k96i5O6RXjN%K)D}#+D4|IeS?FRs6!U^c0v;k zqZe>Syj;y9e@)f8;xzc_K9c5>tZ9I#6QfumR{V$a0cqY85lz+9%}(OcXV0f){wwDL z9!_1c5mx^#LBP(t!5I!`--;$G7q%J9iL1Mhue-BU^~bC_G^djNC#U(1q_eWPLO{f% z)hlbaY={4DEK@7k-Hght541%{V;Z_WCn!>u%=8H-^$$%0t~s(yQ)PgXEu~$UE9r+nZW_6g8gysfn>L_;tESV zyhB+lIYSQ8XR0K`n>K6K>$9(&GVA$Q5{V=b-1oDY^Df&*$S~8zGv2qAR}jb^LVV?u z?baZE#`NQE9mgvE(?h3jtvZM0SM*xta2`<`r7y}4`7GT-+O*34p%<#{K)Do;_4CeQ zz4G_YT$<+J=c4{{eH6$2Mrm`OEuYcj(QCKFeFM}djNBT7`N33rzuI>kX|#5YS_i@C z250`%Z?mo8_NN>RJh-*Pk}qp|6ord5TVD0sNXKW5eV^loTQqfe|72@E!O!dFtd-C5!#SbTTdEBm{EkD6 z&89q!2igKb{1^SB>!vI&-*tARa8h-4SlsYbb|bw43*{6Z!jdz#bXrfR5tDAOV+1p%(ZEu2^2RO;qQG>U9~L~6J}@csr{ z`RJv89MRy}Ukx*i% zZogSZnLjbr*(>(;7sl=f-<$hkQw)V+$ltLh!O=xRq4JIaG*KyJUZEo56S&J$0^{tT}6&K?|0{u#X9ic^i-q}U(@k)P$B8I$GuwN=CM?=O&4bexW9 z7tU|?K8_BPIe$R${sZ-#nT{|7m{67Kh3|?H@HBVW`Hsl@rx;+pDSt@y^G>r}3cOAn zVL$%p`6}NE)Cm6_D^)9K#F9089?0C2KRRiUWB2uPl0&o?bi7GDZJ>03`5P5J?$*Rb z#Du&tY_AvTc8~>TvMrGvjNnK}J;&s#%+G=-3GV=WZVch{f5k}VGE?~H%u0hp#4!7; zy-M&#;*mx1^_Ykt+GwFj(j%W);lEpxr8g_yfB1t7Z2aaqKAz8?hluIjsx1vKH0v1KOKwdr^XP{gvVY=nAg* z`Zg>H;8TpYVH#BNSRf>gt`$b~`E{q(3WIcsWv6zr*YsZ_I+Y7N=kL@XJ&_HZY9e~V zzeZBlwje~sOnyfX*8zcXccN}s}_?n#O8(tH?_xN|I&y0rO@RJdV39;S>g~ycFbix29cG*KWhf* z)0S!n>E8zGUpv7G>^BAKPacR>!KtUgHyxrF%UaI>1ME61(2tx zhqAyVK&%TjtYE%HKbu7|{3CfE#qjs-aGgFs-tSO4Xi`IA zFV;q5c*|mmb@%nom0!vq!JT}h(X0n3f$Bw=ZSlX;DyCrDn^vgfb~bl627WkVg<>&- zwRTzHf~=%r+VyG84jcpJLMk_NvUxxoq*>WH##!0q#^hw1hB=+>&-H+_+wH^C{M+Cb zR#_`W0f0$Nkr(&Tfw@d9XAe%PUbWNys}`+Umtz1K`Uk-1Qh>gL)u{!Z4R6+6MjE(Ic+VjvKEZuzwi%$N!dRD7`i`1agCvz z6p{z%XER8g{*$5O=oT@njXyvW0+;2Fy$$F47CBqeLLL>f@jaFYaM#@Memp2tK3iHJ z9ceyd3*sB};hzbh7tc(C%~XlU)WFwG6-&-jhf$7(Qf8uq#|ap6o)*&~MUvJSH@Bte z86{ftUP1R&ZZRx_Yf?}<<^LzJ8l1r1KY=&?zrcF`S74_9C2$^~sK-&7N_5T!Wm7D_ zlYBIVZZj$G0#APT2Ufq6RIEY=M!y2K@zc+Xff=-KC;nZ0&hGi6L!0AaH9lo= z?T?>#Dn@pWElxDTZA$Vt>XR2|;jRQQV|ac+_4R44`f*Zb;;ip|E1W?5Ohoi4?v;I6 zm)kpu6->`WB<>0g5D~6w`Xk_@*MV#Vtw%37!~u4LJ^@* zw?VeAFEl=`dmz^&!@x^lvkpZVj_4jxbdaVk!xSiN&FT(m&|S17VDKe&?BCz6DUDKg zzXi5;7Z)km_iAY3`HVeVUGkG|vNU$WmgzP|(POn=w_wQ5YvXjs zxd@f!E5s#|JwSTW0TbbA-5hDYw1JhRX9K_f-Jl^34++r4>)Udo1ski;p(z|K4L!Rb z#Cl1r6mCHld9mVZR#to~MFO&rE6X8v4rk!@AZ~y$1$ASv)3W6gT1OtzL+n+JE{wRJ zrfEw=YUsUfixi3mZSv{~`Sg;@r1h-=d49?VdI`E+1L{O>LM;)B(v~X%Cf8j;wTo*! z!E|Ja!-hyj9?K&oUri6l(_e3dqwuIbH;beu=EJ>ODrZX`p-TCCL&}Jqgoq#Uf8>Kn zDO`ZB`{%F`N3)b^aJIfo_D9F{FiPK!k^;@+HA4?;85dCINnB7opzM=yz9Aj=w6c#r zPRCcMOLLVGlp(DXm8V^+e&P(|;g~?Avret$$m8%bK_glsnN8^sAPuzg`mxpb;eDTF!!DUWpIecDYq+EF9ETPfz zJNn(HAkO zwx~yj%@|rc$i93#SOnEIee(X@{?ppsnyW@}^UstoXhU7(G|98eT48