From 10ebd0331f965df415baa5990a0b1c3a352c4bad Mon Sep 17 00:00:00 2001 From: v-shukore Date: Thu, 12 Dec 2024 15:56:41 +0530 Subject: [PATCH] Added IllumioSaaS solution in a domain solution list --- .../Solution_NetworkSessionEssentials.json | 5 +- .../Package/3.0.5.zip | Bin 0 -> 41670 bytes .../Package/createUiDefinition.json | 2 +- .../Package/mainTemplate.json | 161 +++++++++--------- .../ReleaseNotes.md | 1 + 5 files changed, 87 insertions(+), 82 deletions(-) create mode 100644 Solutions/Network Session Essentials/Package/3.0.5.zip diff --git a/Solutions/Network Session Essentials/Data/Solution_NetworkSessionEssentials.json b/Solutions/Network Session Essentials/Data/Solution_NetworkSessionEssentials.json index 82fe8947b30..63ee1824993 100644 --- a/Solutions/Network Session Essentials/Data/Solution_NetworkSessionEssentials.json +++ b/Solutions/Network Session Essentials/Data/Solution_NetworkSessionEssentials.json @@ -50,10 +50,11 @@ "azuresentinel.azure-sentinel-solution-paloaltopanos", "vectraaiinc.vectra_sentinel_solution", "watchguard-technologies.watchguard_firebox_mss", - "zscaler1579058425289.zscaler_internet_access_mss" + "zscaler1579058425289.zscaler_internet_access_mss", + "illumioinc1629822633689.illumio_sentinel" ], "BasePath": "C:\\Github\\Azure-Sentinel\\Solutions\\Network Session Essentials", - "Version": "3.0.4", + "Version": "3.0.5", "Metadata": "SolutionMetadata.json", "TemplateSpec": true, "Is1PConnector": false diff --git a/Solutions/Network Session Essentials/Package/3.0.5.zip b/Solutions/Network Session Essentials/Package/3.0.5.zip new file mode 100644 index 0000000000000000000000000000000000000000..f6b782102073babe1581f4bb3e2d81d2ca6e2692 GIT binary patch literal 41670 zcmV)aK&rn`O9KQH000080HS`3S=$DTV2l+20Hb9902crN0Aq4xVRU6xX+&jaX>MtB zX>V>WYIARH?LBLA+c=Wnuj>8-N_QFCDM^;!cIvXTik)OUXD6D-6W>mfNAmCcAC2s9e~?gsYHfBhH68vm|?v50x&0c(u& zJk<}@*G)@1<_RB(SR{Fyzb`V;4peO4>Ge)~qrKTmGjS=!Wc@G`JQu$nABmw%WG+?G zJ}shLzKq+yYnA+4qe*j(c@jnMo!4;hb`&Vq-p zJ$5oaX^&(+E(V1b8O)d?h7dQj67z4X4~;Sr(K;XtfLuROBc;u|x9(kAUyfck*hGf; z7$(@;N#DWaSjf>h_s@TOoxD!&-+!iZ@!h7%x9hc-+}-Yd#b(?S*cq8Q>)#Hc~|%DRn{U|FOuThxE<8 zt?s?eC-65^0pQQ`67+&b;#T;tLr~>s%Ok55a9E}q-P_zUaFwrq2;tSk&d$BP!_Ef$ zbHOjA9uN419?N^%o%(cphXb+6w-0tZ`}$_<2>C_DpJ4g=0Cj;CNCup^Ft;;6kLk%VP}njjANk^nk6a+VhW-n6wo+jI5Y!! zk-*lfOt+ENnUx>V(a@-8$4vZDNEnx?L@+fZUIn@ciy-%%G|((?K5H_r*+fJU{uifG z&^s&VV(^z{*Q&?@0gz=ekK}t1IuY`!+dn>?qv!4b$PeGFwT%?&WrE<+G8gPY>;8S> z+hfBq2GWeh$VC?7NP=7lOMsgMins)@Q#J)?SWxI(#SCX*AkzVl8i6X3NCg)(#wCvm zTKlC8VXVQljwt|*ZM0c8=I;S*=VAbynqA5OPzP@|;SI6_djiOuAe7L!b8^ zse~lvu__4ovS;iL21K440;lZ+-UJf|JMb_hn}0CcxhE{uX zd<=YRERO+DI3K7>VTl*)1{pA(rnJ?DiHkVq85lMAsX^ci0iqZzwUF98XCCLMdBy;4 zGzEBVAH(&4QNq&w`+Yl}py2_@k)Jb-_;dj3r{ul~U}r{B0qin|7eGl`juJVP0Z($6 zQO5Y0nFdfXM5&VmUN)Qq=i%T@)&&erbC@$LBG`c+*iQwjs}cL75E<-=l|JqRjg+v_ z1knA5FYrTbKEP)8`7h>kY~RCnB3Tqkl%P80z~bwvn|&PxKu)`I#b~u5Xcw;NOq@VHhrrglQSJDq zeE3jB8R!tc5MAIoaHRIx7wDwO5JUkQ|3AqPsmKk|1Qp9hAkKi=hZ*QBQgCVn0>w}v z=wOG68gw6Oi)w%|B?pmk4#^VG-G-7znuDLCXnXt)NEsl6w|Q1n2Xa5{4>xe>@_5py z`aWQWB2*1n<4O12FQp1qK21g4ee-19?q+c}m4{%^WGbqE1s2np#8os%cn@WSjvK1- zl6U}}JZA#eWUL_pZi+Qn2nkGs(-43;Q5zeK93y>k^j9NtBeT^=B%^%1T0`RMS{qlm z*6ggkY1B~-az^Kih-9qLacn$&d{(DSa6j`g%?R@Yd8}5M6DE>jbEU!!pUOZ#@>I60 z|w>Yfa|b7Si7ubXWxg zI;L^R=3TW^wDRX`gY(yo2d^6|O@`g*t0r4{-DtjU5G0G=eprE_-^|ddbtA%g8BxVp zDUzz4ETO$|(gRHS^rOOKp(w8t()?@So)g=nzFlc1V5?;4qs5<)~;-NT`IU!&Pgg|GgBG3-Z(&LII=uSXwk-QH|k6KP<^bc(T^h@V<}%7@ifPR7gdrk zEy3BLsUP@^jY{x!KB8mnLm%#1&kJzrC68JFwuGN8^rKs3&CCw}q2BNX=-l{pO!iIa zYVHG%kmV7zxo?)S9sXH_^f|B>vLAK5J|)m+S5Si)w#teny=xZ=3ejImkuAUtT8@c| zdj;<5NM4eYYh1r6eo96sMQ}1c1edExY^|MxhIWwYqcQlHAO~NfYdYfO8tFo(GLWj! z?6|jLdf1WtXYH%t>wEaXWpRts-eaU74%j+Uh2RcGpw_i_Gp*f>79UJ6k}-IN2ouKB zLEYn50{ujSntVunYkXherC>}^6dFbhhe&PUWEL8w2_VMdoXquE-xr}02?t$gBvsXw zuELIn2hYS+e($WT!apBon`Ro`R39tveEZcVop&@A>(=hV*Pp9f7f$wtx^*#x*VU~a zvTs4R)+0?0G>T+^B8`EjFvamPMH!IaLKJVwvo@0ciVCyD=3ic6h62+nEh8Ou%Y>eP zJU?s4!CM(V?5PZPr{!1r)}-sIsmYJ<_ZOi5CKYTqQ8A1PbXkz#pOfQfR?@Fh*nRe` z$?>kujsLmI*e~%8m9a1!39=lBVu*2GPDnxp2);Z9su59%MTNGga4HczLr?;!BQO{Y zAE81MA|b8RWT6B-lwls{NMP!LbpylK4z;~ZSi47x8(f#8hlrpWcv$9Vqi#xP~vSzjxjmW(qpiOKslwBT-)psIDtG0 zipZFaWEdc^jxcL-DUIO-Ru_(D^Nk1{Q8bIV&e_H`Fv(Om*)Zax5!s$ZhG6-<3xuE$ z>rQ8WRQ=@!*0m^a>jo+Bg@_fX^CO`za+P{wdz2M9S_{a8w@Zdw-wGL41n`Tao)J(c zyzXUh>4tS`dz0Hp57#{EU2WiBtVTGLjeAv_Q07v>B^R{!3}=LoA9 z-M0d%-AiqxetIpFfL5hVS;Ih-vKuQ^Y3=nWF$w&SavN1GI{rb<8Wi9gwIs!lY!Pi0 zbxV2eE~7j9H^^zEB~Z3mkqBgP%N(@-t#MGQG}Un!1%S9|qVHpb?;L|+X(WkhQ=Q8h zsE$!pZk16@LrHXs0oVb?&Sfk>h;b9Fgcn#YD-+E1IYWoDR~`&tfReUF(w@i*nTk;I zw#r89__U7O`PTNO0~2{RwTCzC8mCxLn>bjI?n85W16oC%QT~MKsm7uhTP6HY%V-BT z%4oSs`hqayAZaPj6~K28f>=- zrnoUXKi~m;;0nyeI}E!SFNWb%ahjVFb*X^?v?&LoWcVw!#oiNzj7M);c zckLVG^OY}V^zz{o%L2v)mAl(w`6`*0OgvK(U+YxQ(O=c`x|#YqWZz!8-ooe48GI~F zpA}Svs>SS=R91&J>5vLjD8IZkXV1PoX+MM5ziQ^*F7qp--75&3-el_Ch7O-Qp?z}H z?cHwXv9_{1)0d|_vgKu*PCJ4XCuA$J+*zesPZHE4 zp4b2cFmD~{PWf6jh^H|@725jmQmX>9s$w)Yu|F(5qeJCvXb;EDF)RMLo;<%cJ>Fyv z{OY99?Nj6(=fkUFdukoWk0p#u?H^&P7V@gckj;o+HHf@$1$c514+*pGdB49^7HOZ6 z66*PrNSkB;KW(Pz%~q{=C~qScqD z?x@R}dErl<($lm4Q*)3O&()eAns;MfIXc@tHm6YS2~;|mYtH5RG-H=qGNU8L-`;d%a+3uug6Cum}iD7 zi`o3#CX$ai51bx;XgczOW9U?=A%$jhjH7)Qf8WL5Us?R!WVzR=)G^u=z*PAJi~5f$ zC8pgpWe5Ppi>ogv|9Jb7@b1dMfT}YxqLUCyYVm%UF*j*Pz{ITdlFngWBK&G)yo&~? zcEGu$xlzl{zeE<=^v8F3_+1|UGs(l7tiyAMl`tNrDPF}3umfQ-Td5DeS`Z0v4nZ>9 zfe5_gg1n`^Zi$oBV=$5zbfE$;S(Eji_qLks__W(I<#LHiS{(kF#u$8ja@I2rct8dw z40cg1HcF^g)cM?)gDPji>I)2V^!q1GHYm^qF09o$Tg7n~0qvVCuv>Dp=FU752y%=qJj; zESSEMm}#@;ScPwn-iJ-P5eLml6r>d>-C*YGiRMf_wr*MqcbsS>dnUmCOi)IA892SwOcC}RyXpfhWyP{Tp$z?>_XD{Zetd1xcBoLP8 zt(;CPuU6Xg67MS%7R+1_U17|R2%OI-B=CdZWEH_oWs!9SSS=8KW7@1-!JVlxx4>D& z{doSqnH9a_Gpa;?fx7?@lp)wTcx|sznDFt=yyI7xz!f(kx17P6OcfY7Kxbv8I5vYW z>ziy5bady)bDQq1C{AQdA;8tUeeLEY%VOo$Tlo5Ob=$(pzEHI-hVZ(Y%|mvpitUQ( zGPkVq_7{KWnuG>goe}xY!DP=tu?TG|E}N`d1%PRmFS-#}(|9M2^xZ0vhI2`xTUV#2n zF}Q)tY)WeQtCqz1%WRB^5&GL~+|s|^eKw0kl=AFp~hT2t|joQlG!)mRIAD8+p zn9besN;rjo;P3wfP)h>@6aWAK2mm8~j9KetHD5f80093*1^^KN003=aX>L?yZE$R1 zbY(7Tb8l|!UF&Y!NS6M;z`g^a8NfCmI=qROEWFqx?(Q)ron+%o_m3!W7g8EM>YP*GxzvsM_V53uD5JmT!Hmq&=(#eQ z6~!Wd{_Gilay&-~x+HUw6vyc6G9$-9IxoxeXNIPGs%EL0{tS~voZirSAIN+Wqk;WplMCK7%syLiz1=*@=2SOP4WLp{e?ksDDEl4pM0L+p(hjN|Y$c3xY7E zsuVM#{6sb`clqgp)$)YRhGR)FBtN!|hQa2b?eBbg9x7CpKNy_QB ztH`a@^${=$9UdOMCzlK+slq|5J)hqs5Jcl>j{v>7UZqU7;*OeoRDH2i`r3nSg8E?L}ShV@>7o zfIU1o`qWgb4C)PshQvTOZG@0vLco~RHL40{bZAB_IOQc=d8ksWuWD6QO?byS@3-F> zrzHy0l!y{l&?%YIM^!-U)p*4N-x=2XaHt|wuTfdMjtyt{@SrxzE@wsltg4Ild^K&rX)LOmv)r0Yp z0hQa%p}_dXAm<|Q12wt>HbkQ>Jmcnlt=gWZ8?3)w5N@IC5@HMS<_!jHaLMzO6R={Xte@- zXIxMjLEbN8^49++1Vp{%FU9h%&FF&vyAUe|tuYR;4bD}=stLbU3r{90a)_yh2zhp3 z**?+@fs#mQy*c$@{30eQrhfrx9TpzN*ihCrHc2UtT5=2x%1$sw*_~lr zrz(^ePDM^8-r)fQ92c+??E4TlHbL0vx&4(8W>sBBcZlV=s^d?vY7xU!J>mqwsO9M< z_CxG=DY$FArh!ksvH5#TF1YA0NU}GTi~f)+PvB6@-nA z5N1^aKhzvcv%$CwL>bjo*YI5xW^Q=mVqdpNuoA-7?huygUmn8NBSBbBiY*{)JwAk` zWD+23NJ4nB3BnWkT$op#*q-P3Sj9*SRm(9v)wdj^YRDv-f$>BO+?5cX><(d>{^cP& zc_awSNwEclCyx(dDVgq&3)`C@Y*!GrHbU6u(>WLNbJtQW%Z6XRMO4qmf$AGZ2uvEz z#L`zn*xnt&GX2X#*nT7k%So{Xgzd+Nu#`*!ge^%3JDVWva0na6&PE8cs+Ol21Y=({ ztvsBk|ZPT`iXL;622s^t&Sf+n@2s@7iVL2(bfUxuU5SEguhA;q562k5# z2)mURwl_kUSH;M4CuXRcm_Wuu5QGbdOjN^mObsIwPfTYegx%dCEYrU{gxyDiu$&ZI zK-hhJ2usN%cwt)-!rmqbdmO^L1cX`DFz`L>Oae7916{Q|9g=q2bJS2bZ9gQTVcOBWPEmm_-kkqH1?xYos$UG& z7dNPS6~z510K?6|#$vDhRcmi#4LidPM1J};h8SAEhw?hTi~_bF8OG^#XFqbNgMl6% zWs77HcTGXW*&yew-My+t7yftI7Foo1hX1>g4NhQ_2)vhp5n8dk=f^1doR`B7bpvvE z;Iq|O`b$L1Y)NNPg0cX*F#P`#|Gr`ds_1-9zjMxa^<@>idD zx{4v}YsB<1!G@%IA7q1QK)o^|NUGP|q~78ElR@>es*XksWLlo;I&`nnux-`Vyg((M z5eAMFCeUOFq0rkp=AgSKTCiPC_)yt|PTPI!!$rQ#OQLTv!^I8isDvAfBV^;_7C8^#A zS@a!HuZ#$i>a{ni*Opf=tLoXI7hN?W z`{1EcopJDgvDnq3uX3NZ) z%2pn~tz<0%pn}-AAKA|x!N3(7aL--APLUjCXGhe^N-|rkchI~9Ns(} zo{z5A(!uJ3n=qeQW3&|nQScdEl6=KbQy|n9s3@Nr$zXJVu_6-BT9+cXkEyq8q&Xd} z{93ABxsHlibFt-$kEYT(Ak7HRQIu5U)b3Nc|64zGN2T5b&<)|KnSFlhv~Na>%5d8* ztSJqY4H#GT^R4}L(AfGXt=o*TX6sDk)zF%X(Dtr2QWN+bCCm}#Gn5fLP@!k*x~jP_ zbOTlAgSQOo;tobX%%Z%$LP76`L`e`Y>6IgtQ}Zg6G+cArs<~u?60BTCS0q=ElCy=Z z8`_jDE`Fsqm@*WGQ7~3!Bwpkt@@E-A1+SAs-;_p_0F5HLL^NsxrF;Ag2X$vlHxa5@@KM-e#29Ev_dMQYUW zQHRH+7lLo_oVqF2`Y(T3gM#TaQB@UwPe->vfwIXO6%dLPRWayenNB{;25(iJrqn+- zP!lgGmUmS0YKU?eWE87KG-vnnm|ubqFy4p)1i}=<(;_W6@1>2NX|ol-1^%)_psP|NEc+1vaCC8$9o zYzXr~%ct;~f+r#%@>xMa()Bd_ZfUkmIK7Hfcm@o`l^gWwb<+SXkPpwOo1ncFV(2*T zX!IIo3GhCwRHv;}ud7tiE&TmU{H}5~XW$WP_t3bY(nmy?H9(;o*u=6_6vC9s@_bYE zZ7WcHa}w&9`FrwZ89_jY2Sv6d zv`>1YkPC^+S<=sxf8EeLTcba>C6RMdP;lqGGQXZm0|L8~Sc%-CVV3Q?&%G7Tb$3O9 zX|HNwSu08`(^ygB+N;{=j0m1)6u+6Jkw_W67}aV9ouN|3>IQ` z+)mH$h~Rx4C7)ZMZP*6LaIS%Y&mBX7F|&2u!73;ltJVa5xdt-SK(k%b@k|H19%~zb z!~dlOE+hF%lt;`H+|;x`pzM+qZ9(e7*NwH5p7=%O%~gdvOin3Z`U0U`EU87J1WWCd zf)JMkj*mh$gv3|1un)$L4Ob<)@0p%$+K%fyfFP%kct zyoqX=K0R$@dMdpcHF0!LN9N?ai^2nJCCLE$JOpoKKJa|YCBV0aJ(~i`R$Uv0#kVxy z)tvxf<$rJH&)z9#O)@|YqQ`x-;OW9J|DRe$$jk)B((2fsvCjUg%$2?Sp*F%x`mJ^f z1V_w$^B@rwB@^dO64XT$t2vMZo9kGCIM(t6%vo{CNTJNp?@f9_1J~I?Ie}Q8!_)_5 z%HedHL6S_<^<~17%5eGh>&*!bUP@C)e-7JU=}(z*a*tb|Tm<6g}U>7(&RO)WCW_z!zx4)C~^KSt(48)^kPB3*p%H|y}) z{@T%Kw?C@VzVrexj{bvx9>m%?i<0+`w{js7GWvfF+|8q8Sr9;;wuhb^^okT_S&-r- zguT%Pn)9-?AnWMr;%wg87dd2_qT_N>q}31|4!G2#F=&m|OVaDZqf*f6w1EFBXqi?XCmqR~{4E@3o}6#qu4$&8h{ouD288HY;8wl+KN z&CFlqtJ#OLZ3H+Ghzi1-2=oNOnva|44l3pkUR8Wh!oJ+0V(5V+iDF7=K$X*nVH)>TqN+q3eYfsf0pz~>?Aq^&{=#M@e7Ejy z3doe-lYp?-)gJ!*@@Q3;1&lSu>2>nGdZkflOH1z$ud$lNagYZoZY04xkyy?lMT*seYXz z*Nwp~{TYk9-eoSSwmr1CH}XCABkq57c)ujv>-=ARN%%qLKSyI_Xp-E>(o5?ZBF+g| zOH|yf5&euF8cHB(fd1(~m1#H2yIV9Mw~dm+mO93YJrhW`<~LHao36Rs%}h2)Ur%0S zMyex$`>uwDr#dwcbd?nPufK0G3PQA@-n`iZel??tqjSWH z2Hg&3L~|vDCkllX5B*PP27)qzf*Fi851Ii3&aV+Jco>^>k5AQsq!N-VgysnCSPLq@ zjCdbi{};Yr%Yd33G*etU1caW36V zG`E=0edoD!f4W>Bk6knSz1=R*3p(D1`F)t*hxw-x=F4tQqm1kl?Ym_DR6)PX{Eo4| zOYWpk{{b=q=@F4g2&xNYHL<6g6!`Rt6Pt;$_!Z&K-I+8iUQ*Z3?mocy|DD{_Ts97Y z=>)32EyIn@kA~m9^*%d!%GpWRR`z+yK2Kpk`#j~Toh>Z3nG7&~b;dGvE5+baJ?*so+4*UWt_c4EeXKEk*A2s|>r-h(4 z27>Q#A!Up7pd@i0`N0~qx|=zzN)_rmEn6sJMXoS>SLUIzg-wI8GF@P;b9NS)-!tWL z{b}V0l$E>fnRjH`$Ez4xWyucsrf!A?Ss-&2}*hKVzGF$Lrkg( z+($@SX)$-Rl(h=jH6GQ3PDGjy5sfwvfmATctNUOIkc%V!QsP{BYGJ8;&THGqG$`ag zLY4NGEn~8ePW$NeM4}V@r~bBZ%3@riO?QbrgO;$J1+>>MDMK(ML5gCM2ZYH6;eq|R zY_E9ks)v4X>S*IGQKn5oxE9~+EeWOcpX*R2tK-gxbfHWb&HSmwm)-8qGd0o1y-m8D z{tKEIWjA-+satUYU)-qk*;Ql~apsFOj|%b=KAg9 zs(^;?7>e0JEvop4<3N0!C|6&Jv^Nz;{dbO1ZGws9B|xJ5hcAGc4=D#wegB(V(oN^x zz3k1OAf2#c+th3FgnN69X!YvZ=5@5q3q@Jgp?B%u$2*0wiLt98TO}5@%a?B>-&ak| z4lSgI1Wiitwq612qnzNkNlo>G+{<5I(q>9Ja9EMEyz~V^xPQ`%J@3EARx>qNCQ*H>L+nyTsOF0zS+5HasTh}IR10Rhk&?uXxEt3MF@MATK2jrBuw&+oOp|0H^! zKkxJBN6DY%GUNV9@aA;U4hi#axw4E9{j^rbyB(9^bvk5DnCHA&%N14`0Nsct zOgy?)54@@bmH0QCDNr5j_M?eqVqFU^4I; z6hdPjOWMZM)ko|9dP$NCjso_Pb#hVWAzK{L-+~SeKL5|&+b*|_B#EN`Z^V6vTAiIE zYJ!qTeOle4J|kOpw|1VvZmJ&=UMKf-6y%3^@RdZ016~X zk#b>sJt9yaSy@?`Sy`D`cnp#r?9<6tFJfa;boS3hIZ{q@Y5tqhZ|8jz#4FHgI(^64 z+;c#t4F5a`~C=mNx_MW?O2VaPvfhUoywKaX%>@LpnY9%JwT59#aWRkvXiU{K)_@;UB&=hLQg z!?U`S)upU1wamJdxsssjOZh;N?rfnti`JaXhn?4r(rYanlGB|zB1ey0V{K_^6B!{W zR!_2e(sSuaX+cn1Q!4V!Nz|XK&{aJ!zH`NgGR^SGDnM2NT4n_(YeTsVdq2Cu8%De} zY$&RFlxkxZwWw$f)muCD)uU3R%xGFlwRN0nc}CT#0P*$X&5C_*S;8dI1y*stjzK(8 z$t1&o(tsqTr2bV>a^8B_$Qg5KKF(-8K@an{&_W!bkM5nv4@UUcH&i((03ETXw3$_1 z@bk&tUFhB=(7>W*%~J~mlewCzOn3P(NQCmftW?w_IvE1EK}NargT6~&C;CRZuO5CZ zYBUzJaPK;?KqdeCLQ%V*w(EaHMdO=MC|jaX99R{iDuIJ|>hZyRZL33A9byhT1g~p)Fc0ZB+7gR?O7}qEmhgQL`8EdR^u?)&ZHcbl^j0PHq zxp-7H3hZJIYQ*woyV0Vt@q-|S&Uvd6MUzHSO*d%bcn1i3bcRDBv(YS()&WK5b%?a5 zR}9Jyk?>e(R%!fdHKlQ}C{_iFi4gY2lzGe`e`glHvq;{1pl^`7TCtmwxrKNsmbO!f zT5~z83fY+@tQ4<$*(#*TT%>C4{d$S`xD0z|PRm`vtF?kR7{hm>)~zXW*~x<2mt}Wi4;S1V#Zy%2Hi$mas$w zDYuLF^V3M{>D@fjC|ijWi^Vv3YIT>L{UY6^Yju~@jY>DTLah>Gm6+#IV$!nr0%(zK zlxm(-R7z=8bzyJP-OZxKlr5xs3&;pHpk~xPf2c%{R*6ZvJl3G>MqO6Z>NH7nbJJ_E zi>ORrQDCUhSu!P;T5rjNo6#9+=?Dwgb;@DCp839lMJheD!&A~==Yvzewae}m$C2H8 z4{kIqYUqfAzI)bBK*~=E1>i&IK@Wmtclj`tw^za49lbaq88Uw8{R-`0vc=o&blNf> zZxIscfX;=AwqH}}+p$WYHCWNd>Uz(o>($lfa%zxzL}sMcs9K+Lz#=hJTh(jEU^TtT zsvIq8qg7pvui&^#B5N8IPlNQP)I0UIyk=}y>9eLHJuqErsdd0*(dW`Av$m^gZCATi zjj4((5Kld>oUgr5WyU(!uB1Mb7Qu_OU8TF5MWLBTh)xk+7Gts2M})_P^FS9R3By{6SZO4_|T*N$G5+%#l(0jbA%d({P` zXGyt)D&}^1koN8)dwY=8img^WrB+;|_llK?|`ED-5F~r1-GEHe|@wegVBpa)1SFqsH@$&3XZhqC(^-+G-G1gRmOJQfm4 zz1o^j`c;`Ov_eOi`VyE`(++TGRy&xtc3^lFilPYEyHHH-aS%^EUYD9X1AoKUV8lEv+N7`KlpbRlOtA${g~Z&m%TtI*lYV z)){q@Ol$W3l({Gp2#U2_%+qpV?@yVxiec|hAy&P3PW8g*;*Z&k|Ef-5FHo5UlX*?U z-k|c_ddC#8pT)X?y+NgpJT4Z-s%SA0!}bQ1LU}udur-&os+gTw#!3OZv^S`vxqewP zOr8bmyS_rDF1G9)D)tT)eXH_&Nvoe5*BqwM40My2)e)x2_0X-b@uK+s=MJm#9pE6MKt_scK+vQ8Aa-ZI*K;h`iW+?PUB1hR&@!yaK$_3S2a| zbq65TXC3y=m1go*+B;WFu8I&(J?5RSZIvFY^pq++)7`mJDE`e%M)>i#;I+J<= zXQTqDDxz|HBT-aaFKosdHiJE^9542YmYKA{^ih_*qNOp7E{!s4>YCQnwQCibs^|sr z)MLx}+6z@@tpDyxYBbYb(K3Z8CvWOX_cx15Gmki+>F;Qn0y$bmCTHi$!ZEvEGfz90 z{*sp2)f+=&SH9#@t2udaSI5{@3A;6RSz}in9dWN|9g&iDZ^8Gu1VRo}UFh;5DOexS zTPJe+AN)Fi^@YsJK$bwng&R3lOC}^cx65XzNRPaT1Oq0sBSObVK!)U#No#JQ>2}K? zd++&QQhR`8^#e4Fa)IH05si9`v=0ZabGvuAyZNf;yxQD***G zxCaAMxQiQwZO-=kj!!@_VFJi?$E1{k17hqAJR1u_G` zCipA~u=j5d_MQE~=E2V4-sWC!Zy&&R4>k`6uMWHJpwr!Xb=xG^r>^gnLEU%#r%IqZ zyRZ7a9k;W2bm;7C?)AH`HecO#-A(t%=^S=<9GHsTMu854@wgOfD4>V>b87KWx?%g< zg)9}ZSk)z?A)ID!YI3B*dH)GU?)6%~qn1ni#Xmla{f*sH+b#9?u%&L3{zH$gietVw zDt6ht+e~ha${nJ*ea8d{RlS zaMH*U?Vx*P)dQ;@SoPrLsRyYvyQXq6cMF`b@ZIngH$ienyy->9^^Ase`h+v z=>pSDzf2urXUFOY)947+W8Ufp%c&bAxgkp3&CdL~4pkZR!m@bHSEPcda4f5j2CaEv zX_7`%>I`QWDGlMw?**_$xLa0LA-Mq>Wl26A@>iY?Ih!}3PMYMb(~Ke>moy9GvP;Lv zW*lIT6_ZOWCQUuF>&pmLRKEBe1ohFQ6`?uT>_w#@;EOEvov}#R3Ho=1Q`d|LA8_%&@KUOmxrDhnd$%Fk0A~iVyK4Z{XKJ0HHF=wY3O?YjUCaW}ArKv(` z%0w@vOPgs!g#l1YrwC;rotq@6BSmnS(Ik4eoO)3X3 zFWl@q(GYC3*~}WkuGJ8x&=9PDoYf4LQ!}u^W;WQY+B=Tx2dm@RUiTb)wSuUZMXW_O zN{l^LzAdqQGxd$D&)iiRXQRZ-WZ(B5CAM;+v|T$$?1lKo*{$w0I)UBlT2){abSIVeOf^n7$d*ui~`HwqqdkZFub1a8q4z^r9*t=xQV zE8?t(n@z;oSg|H$+w#VWu@P0swo6^a*m8@w#vH;AFjm2{B}HDiwzc}pzvOug^w^Lth7*-$exaroVbnys94ZGW$^W-FGJRj3JM>GTA< zBev?na;gV5{LF@*)!7qkz2+AuioX*HwsZo_dPwufO0p%EWTqS4DY$rkr)$H^Y?#^7 z%ggrn8amdv+xVhF$4~_*3>{-c1>fsKbL&KI|ASu#7B+yAK(+_3=aLgqsy)!?ml##n7juL3+mX|m2r2pT(ePj&!7dyba++= z{Qh)6B)GnZE>^vm5&0V^dKZLGNo84CdvTG zr$2|qY_&@Di28aR_nBr|I8xc+MHuuaKtN2(JLQwfyCuA)hbj-6P^s_(wE&8DS!0Ei z5G?}7NM<2E6B2NuFDQaLduICKx zES<0_ikdB(b)ufCSMRmwuOr8x7DQaKd;PSI7=cRs`iVKJcSO`%79KhK@G$FyNSkF>=B)xz1iS@)HE@j=zTkt{*a z9rmN-H2~YAf3?-`KLdjJSQx4Ub{=Sra~WsT0|7^=WX6hF@q4EgEO>9Zz* zHtFj>I^X{2e&gEPbe$J=>4sqtns#^U4xGs_E^6!K0o2SyAIc5dwP9r+cCGHex`%C}4H$4-Z!{Ub3z`0Z>fL#W#2M_~_&&2f z5>62ZIJH=JgY>Y=_2k!5or_QJ`2jIFRu!ldL=dZ%Oe7fNlrzgXJ+#ey_P zqEj7}(5>gUQmAMj+|Oh=E?6-27K+*UZ)S)pO1E^JZMaR+YZ1|; zfSy5;UfE56$Xkldra_T4X}d1Vlaw?hw3#Pv{8<{0B?q9Zkz_+kjwKD2wF1ZrpzlQh zX?OayEf=l4=>qoHB{Gej1uEYu1zx(aNWJ(e(}$VNOSQ0SA}UhCAK_aAp%PD06>4|p0J3%K(gz}yWF40}Gvb)BaRnbeM{GhlEMb{bw z$tQ^qwWfOyHdq%8ji&nzP06D-82V(Cvi7V8dj0BpatZuMisMmMRE`+&3D}BnUE3%_ zXDpw|Jxu>cGK=?W#~tnIf`@M%sZjW2(0MG>U9 z*xiShf)cSwh_!V*z7T^#QoI4IV$wu|9F!ZR(vnziT+LvaxL`y!^cJmgO`+^PpF`j0 z+>5m1!K;ko0K#Ww7ST|Yev^oB;kFc>pUb@kUp7n#f00sU_ zB*QU4%sr$VA#-WIXS(7}>1$JX4d`b=2dfJ4eywSJzmvm{4P*eJ-R`KM$!IDAfAtA&Eh=_s|Mr)w) zsnHW*`MD=^K~GMGA|?wALEQhG(CBz8fI$X;X;y ziQiAZ9e^kse5e@C2$3?hRH0SAATYPh;!>${s~LfG$Z>FHTboG zJ7b8cDv-}PV8kZwkE6OiSrJV29}P>47Vr#CdJpKJnGg>JbcdSK%(=K8ra~_$B_Nm) zB>9qY93mCt+K&Oe5`-4_0pvdD8Hkn`oVA{=Rv;yNFiZdK?#LV?RgPx>yUWpC^ zw38830o>s)^vtO#wC1#VudZ7eBR}EY@t6?V2_9)BvaI&SmgzF(bj-HxSTZ(g9?ua= zN6F0q&z+0)`UHVy+x5}m76PEBiVk!Mlgvao)aaS{4h2R~e@ae|-Q;EjUkI1AX*>c5 zFO%>nofL-5xGs8T%JBbuPKo&x7ix7tZEXMg#A1#T%_+p3cfAyq~?7EvR8uKWy zXiG5C(L*p~xdxVmr+~p316Y$Zfgu3hVS{NNaP=`WsMl83n1YDL8E6@OjYBga>PI#9566GR2vwQr9c(T4Q(DgB-{7I zK#laU``&<{Mo`IvUX=ZW>ZwDt4EOUxjK-suzmmo{kI38If~f1Bbcvo40Qi6k(nbHL zZ`E>zxPd0J5p&&))}FH`xK|g&7!}PG6u*RL`>=j4S0$ZcQTJj^i+^ETejcxO%-xZc zf>9u(JpNuktj>;O6Q~QWla6DF`j$r&2K5N6+|rb_3+NrAzk(Kd+?-n=eLo1BGS17T5X{*~XiTwkMDasc{ z{?&$_Z3mY=@>5&*}PL%0;gWTnxBmqgENve{{jrQ3LRtx#BL6&z$=&Jm=y z$7EFA95Z~xf{Q*0+*LZmGdGdw+S%o$rE~i$4sAC0jMt(fA9>y?AYxEnGolU4 z)svxgOQ4xzf7|wP)5_4Kb#==ad~p*>-{VLX^m*N&T8~7A){d`8zA>SD+Hs>E%@8`c`T&7NAIH2jqSc+b+(|- z9)sASvfYmFKvmlGbQ(PJv9jNSCD&*(kh*BNLTiu%%OM(@i=W?VC+1UZ(Mw-2BY1>IP9t7k)2t-gDulsL}?Yk68{=DG$CSgHdw2-+b z^iUA`b*JmHXl8exD2kNvaxDI$X_n(FQ{w3B=?q~v0kyWYK;mM6puB##&%tb=ryCf( zf(dl%zy4OAqLS6AYcnBSMQkW<0_50|r_U|k?FbM^oaV1YKc0v$WxE;FzQqYHb8zIC3VZ;sij zj5%0nfS&=WS6jZ7A_CRUk$(ykPvK+)CQ|CD4{OuCUm`&2bxrv zf)o8IU8Sg*0nSfDA4ylq{(JC?y(htc6l*861V|5~9k_Evol@PT_wzKU%IHjP<=0cm zacQ2{Ws17lmz(MqKK3`;d=75UE(`M~ zNxF)Z)7jr%B8!w4zm+nT&dT>k{N17Zh?{B+|kNgB0`l%s5(giMWR2N+5It7lOUKE=YPJg0swicfOOSivH~#yBpnMW4>4 z6eZ+Z(48E~&f&RU8Vz}w$RPzG7s;OwhxN#0RIIgC@7Mkfr}9D#8COqN&F~C{mVGko z22@k{M|8)vCkPnU^#T`_aUrjjq@NWBJ3(4DiB=fQ^E|UdBrx&A%g2IPw1`pVfJ#@rUA@eR) zSxjUd>lov~m^U7SbzpP}C9m260&EKG! z`ll8pg?jP!&Ry!eU3(&Nf?a1}e=S9*352UODgF_%6Ly3gBRBs;H}q`Wx%v4`B!w6s zlkM>`VP2HtCQS@#U(yJu_HiSJbop5X^ET^UoLFsmdp2j}(x=6R0}HgyXzc}x;fAd3 zP?G*Sip`$3Dn)IYOBj-&WHp1ROWUp9gQ-Isfmv0Vi#;Bil<4g?kr88x1a7C{dkLY{(-#46*o6_PMmoV2%D3dS z1jcFVeR3+rwGkvWy$_t*0?w#W+yok`*)%9elto2#k}4E$QwWui&2a1$*P#DGfu zT7@RO07v(q)$$fxZ34RW=eCu?@R!ynv+Vl34(7eV ze2tmBQ07b4w=grmD7qH{$>beVlQ=zKB2IbqQ5$ZSWN8d>t_V&~LXTnh26_>|i30^0 z)-k0PpZyiulmykg1p#o}XS#a?M8SjGWT>hhAuG*g29yLj6X?fg@#0w6-b`jd;|VW+ zi?8tFkord!_1bzqNE4k*_<9raQ$5)^&4{5-x1`xj{49NfEY{V4=!c}QpB4Tt8wb%y z+762x7|}?X4vUx5d~^a&owhSrOaqPSfxdi9(uUOr`Prr}iM{N|_$}i@RhD7`8%p_6 z6OD_wch2$6{nkqB#b1vJgS_<8u9!@kYvVxJr_)#*jsb&I8jGXFNf@-|qlX3bN|ngXG@cXt5B)?(YdpE~ov;>*4W-Te*9&)Vo{8Z&N@ zTCVf+L#?S$$BW$8Tliuh=JK#>8CPsvlV#GKI7eK&p8~Uy^UmvGj)y%2XPb34N1=e0 z?B3qZot+uz?J*cwv8^vG%83qQ&ZZf{4MgPdnZ~CjtDGGRqu>6!rT+szlqBm^+O)B|(3{h@Q-dkqQV9grr)-Kd^gP+^p5CL7l=A|BA@WoF&p&rIYRV9ySDL^e63^paA3Z&N{a_Z#K8-nM9rksljifSUfWY^rPA$ z%nyNqi)Im&ZM+KNRB#(d5p+Nt$p!*XY~prtpsEy=AVUy%r_W)6-w!ZJhNfS-QBqO9 zVPn8tZ9mOl+of?%)>=%RpA&0{B0kXQ2p8C`Zk=I_SF}|o03LfsrZFdcgYaJqCfJNc z1?7qPH87|6E=NKz`DbFSw!wX4w6Lt;n*W%J{AY|Y1@cm!^M~XApjhZ~&ewP(f%|3e zM)>!fCE;a_sCWRx1zh(>UGF{dKQX&1-(Xv(IYsHla*pV^!b0}hSTaT} z*l}*hQh3!;yfC9@p6NjvJ6aA$3}AI}$(y*J4lrXI)-M@;B>~}wItEVXW(WY$&7_`O{33E*r*t!-NWh!M?;xqv@@q6 zP&>0Sf3Os$e|1rBHk(WtN>q-m!nX@-vt0Z=p3+d(b6)gau3vvHgUN4(#?Qv( zFcz%*_dfY;#6@vfFFl4ntiCdQCbMe_%(cqYYUzN@g?yjQ#gemRMVFJLx_#ndMZYMC zy77jin?WMAbAS3ovV(@M+o41j(J({?(~IpcOIz@rn#b|jM`*CkNH5NDZR#3iEB8^2cHJpoSwFUl?sw%vWRZFWCkB%bu(iey$@2K!Ku(LLchUepE7 zd0a*=13Gwm3u{VXiZrNI$D=xe>~74PWXHU43kp?i4o_m&Iy-dg(EC0x#G)8e zSo2nN**9`E4y^)Ahx#v(nj2MbcYU9e`^S)O% zS@tuF1*AQB;7lR)eOweBZMFAeu%+%^__wwr48Hf})8;sd97}Bk&VvQJz1Rb;mtFmy zJP#)Mfm0W@POZkm`wGkq@?YKlSeD3-bET#q_^aITct^hk(k&DmTEN6Do{2wTDx@gy z3-i>Jp4y5}<{x*8fhuU#;pp7AZu>DX=Y*@H!#!!oL(Waena%ia@4@NqTcVrdznnpg zLTGs#z{2CDfLB9su7Ko3@z7+q{`t@afY0|gvTuTmOu2zeS$1xBi#rF{k&cN`m}{{w zbN4`N9+`Q)BH;}fjSmJ?`+oI5eh8dpN-;tVNTs$UnLR7lT@SmUcuQrs_kIV9KqjHN zd3>bgF(Z~KQ{mJ+bcL&>9aZdG`wFyQ` zert&(s&j|W!}9_m?FOCY;A4s_Wn3(i&=3c9M?H zc_9!`@+`;Y+P7q+f%5DgVNEs=US{4lD_Q!nF!t%x;KkB@BO-BP`At3#TDH2b$Er3@2+vLv z44(`u^Ih)mCKyE&F$|t4@NHAE#4a#YaioPqZC~5eKPIOh&%)sN)|xgoE}@6J7L0{H z)7p2>_bf;?4GA@g+CoE^pT(f5x)Mm_!deaT~IpThoobqjc| z+#83y*+l#1>{>xJ_MaD|v>^>{0&HisG$o*(_501%5RwG)f#M&pK`d7W6HUmz z%*a@bh+J38aL>EjSYK50P~s!alK@R+;5>VJ6ka*2+S$U$!&vUG;#}^xYVL5q`+I%) z4di%nQfF&%GgG0rw+wA){KusW1|lsYXu}qGG^6S7wI`d!Ui05;%`R~arHjd-eyefK z;$~ZxHj+K3!mm4*QmX*M^k3@`X+Z@kpp@dPd zuR)n~Q^Wf*+6%88>Y4`g!FYshr`>Yv>pKOX&Ma-ZF;yshN{y-?T4r$()}V3Xcn*r0(rx@6u)5kWu-SpG1K?5LTfk`eZ)*};$=Ul1rYa(4ne-*Krf#~8bK2Gi z_d`QY=K33k?jd6n!8eR_Fd=z>Mo7O!n{$|m?_v4!2rbvc=Jq->2c_Buw`)=z(#lC?Cu#jdeO zi{FW#hnv`0s`peu1j@Qw%~7niC89`yQE-F&WV}b?2?cBD;=5I0Tru<+snH#D3};bQ}QZewBnYo z4(!J&qc_jV)bPiT9o{P%swHct)Az?KDV&X#9ki32lDf$+!gZ3AyoHnzW3q{gXEC>W zLzbV`l~3HOw06Hs9eZt7=C!Mn;Ievmc^=+3%WX4Z(owG@3IH1@zuw%VK=kyr zT3zxf#mp34GUt=^?Pb-)x5=f5fit zv^EeAxNqksOK9e*E;oXyWd!0X6w!rJ*w9>QNr$?T_D5lZd! z>Dsu<;|%aIazQ>9le|wdC%b9J8``)d#^8NQ)j)eJB)p@=^ld*1mhEgmCVFL?LHrJT zP7PL80$W4>eIsRCLi6-YA<3u&__#B}TRKCMUGrF8@>S4p!+~Y>3jejtMIVEZ=>w8c ztub(s89a~)3iUDBvuJ={MpI=d{&c9NXJuy9ZyuIbp36VJFKAJyjh0{hT_roYkJ2R; zBwL>X8v9p=_-O=Z{K95O{Nm!;OMg4SI_L8a+?&*f5AA9`Hll?+&`4*^bX2VXufhAw zEO>Jv9d@b!j|n)94WmB$fIUruu~2Upz-C!k;CN!qR1^~?twKetz&vZ4GapYX zZDMgQ)*)Os6`!`=w6s2KGE@qP;G%gAU;w46%3b%+TS)h?8z%Dc7zxb{eZbcJUiaw( zHf%B;ucr0qKX8H$+oUo4{vS9giW=fOn9}AzL>JnJ5Az|OFuUsNg>WHgl@^~g=*2(4 zB{&*GB}9_uNEA3XQhlbLg_px>K)o+vT>RGK=%>FIAwSt|->nrXn>R09R$h@egAXdiFb2j zZ%lq2_%CdIp#1C$;BkM5tw7KH-FvV@$y*>8^6uR8stDL^xtTk!l;T1xso*-6U}eqj z`c?y_BT}$oF}zxyx+&&By)Um%uZ!O%sU$FFFCE1 z=6+1GqI|fGsgvg3rwjaLp?X=KizBYk%VQz(Jx=#y+%t?I7l#Ac#hISm`JhuSouvJP z5bt{Wyxugfyc{8BHN@K-A0k=)-_`9|UBC<7#?Sq2flvY|7-URd=cePEpduL3wFQYp zLyZ;h)Kuy_$Wd{Zb8=SU<#M-|`KOWXt8PLId^)cUybnH~arI1IAH|qH&q+_RX-fh` z9?G`MJg(SqNx)S?6Pp4;46$ikisx9wv2CuUXxPWM##JHW-I-6ab=c%>?n#X0%V$#q z0z-*yl2>{2pLHw9+~h(9iBg7O7W)PAE&rFSc`3qDcq+nH#e}Z}#*A;&piKaHbm>%A zQ*Q&N5&09qiN< z#v{;YuX^~p4JiwHkKml@ywJ{Ar&iC{^Y$|e*Hah6iqi|^WB&QNeB)v-hgiO{6}8?X z=Yx1b3mv1f+qfJ^@%??7vL*Bpgq#< zW7sgG@&b$hcv%oz(|Cx86kp|$QF*hQgcVra7^+=SSpRT#kfs+l`JKRiD0S^B%p!5q z@|AHC_D{=8qJzi;wARJ0|EX=|7J&C)bO@g@*|J!8V{tgt+9{@o&`=s0RJ{v#rOHdv-`Truy>e(0D)SEnR^n(D9Ro5%~6JTJjI7yBO#DI zo5PJzrn(n((XzrWVX@DK=)84zmG-0a=Auaz1VM#SS8v*LE1Z-ljozbUqQ|OksHyCj zt-R)6E68a0-g{{MgJn+Td3??PYosoz6>ls#}U2c!PwMLUB5|M8+)onKz$0pC@Ai|cO071~M68EWdDk$vE^ zQ_Zhtet@FmHQo4us1>A*V*h!0YgRzBsbu=kR~AsQE|Dpl#UyLH=ah94?Ktaod6VMyPeK@6``{P z;_v%%Q%^Xy5Gs(4*kVlEIxc3_1sP%MsnWQC=mkxp>$B@YNEaqt&Cvrkzyp<;(P}Rv z`%UdZVeO~rchoj$+wvBhAeT*r$8U$86$_rv*(20WVr>x;x-O}SD*{)92flL#lEO=> zkhA;|^YZLM%?#b{Z05Jqeap756&bNUQdqkQ8MqN1KS>z=KyysLf}7TH;3gOLC2U#3 zBcLL5@Hes;hl?{qt}MowC&%%gEGtQ=c1W%SAK3(f+HC3nxj;F5>M|rxbpHew5_Gw; zP8l{-kM{_FXABxZ_$*KixU-kV+@V#LAQgFEoc+%MT3!g_D$b@>%9ef@yHg;EiE(n4 z&pvT*o>%oE?M+{Kdv6a~N&Hz5)5j!!fhA@VNhrsJ%?;c*AxTlMAw55T9KlJ)>lHBu z9CG+OBh#6eyue&ZQj6$Q5djc`%xO}(JI$`b72}}vTzgUZbMBT|p=}lwemt%8pNeTJ z-7rQ@4z>LrU&pgpWL5mCm_w3N_5ZJ8(@OuT*hzVsG*5|bIypw{FAh>8m6ZL5gUY`+ zc+KdfxX0*Zm{r_qoLQWjFlw>lN6i<-z2^t9(}Jp${OLMWFq7u2laIP2hiCDBm{3=# z^-#U9(LV!3-s@=!LwHMKaNrt|;65y5XZ++emcg~WYI)$jO1ul3IEx?q`HqmSf>jZ) zgw$>Nq6--2s@f7*5(KE;yF+J)thY}9sID4ffl9E9O>ma*E)I+mkPesgaz^{$m|9@G z-xLYgH>E&siB?F$>lHtiNc0_i*o^@ZkOWi@IUB@1THTF*1j61vFa{FMhXm&Y{3-`J zK7gZvGsDaY^BMLK8Kbz&-~s@;3qxO-D;tsezWNJy9~szKNRQoQ3q&^cFm8=&SI+NU z16(Z&8$7G3{5w@nSKCA--Jxqz#7cv%X%}?$Pwm>8k0G5vFg0Qq4;>4qsNRqm+hxSt z1uOGq9FbT{cNH55IsvQb^#YHJFJ9kY{h*ZZbP4$8VJi7SFSV*eMhSCvKaj3*D;8hg zUCUgo>+5Sf0!EG<9=2V}(*OF|H)?)Qz->}BZDsW4glIE2`eJ3XzS_K9^^)#*on<@-W@WI~R1$CcA%u zRO*<8|9sovI?k5Z92)@vegJf};;P<;3lKG-R_qScID(Hn zYAtJ3ci^%2)<9-hhMhpi46!~rOBl!E`88A|KngIiv97v!mId4M;f&7JH4 z8n(lzw(#-zXz`$N4$%%YyN3)-M2oAfI@CnEi3ely{Vvq-heAl2mF;c{Qb@U7G{kXp zXO%+l$ZIBeyWkAf zzm7+js4d0olxo~by!(el(%FH|rlWzZ$I_mbSSqJ_OSd1bBuO5t-X84P_l(3q?l8nkamZxCBX5OW}DF@0h zwT;61rLnbeKdhsGrkH)d8;(((p-#Is&7^t2 zeQ*AM*yp$8z8C&~u;lK2&NCNiEunPFp+ge?30?FMQr3dbvol z@4-=>c5of;lY3T~w^Ow=EAHpyGE_2K>J#^)5$!Q*w2t7^F2E~Vl`C*)$6qgbgnyyV_b6&zV<&@aS=w!gNn{tty z%VP`a_VT5?5*=8Eh($KPsPsKCx)ej^esg(vxVf#_kT{*gvP$&et=#~5g13`vZ6*?q zt=#52r=-(cJS6F5bufS1?mgDJXW%H?EDV@CGO=x5|Fd-AAST(2y9n(1C`Y=!f^iIT zY0Ch>S8a!E+#`}k=kg&S!!Q=L9qMz+nbXV2wqLMFwI#|E@W+AiWzGu%H{`J{A8Neo z$rZwY*@Ycp-GT6A1@a2if;`%K<7MLNTutACJR(YAo7xx8nN{CT!tN85Yqst()=}Ge zSM$1Ppq4fHDmb~T;+e-rN&Q&10HbfP@#4ZEqetCw7rk_{;79q%tr6V|PBk>@GQhOTO0%-gB&d-erONZh?JU z-Q>MVVh=O$`wvTxb~h2~zZ05qEp2$jpUtT^9h1%d1$lj`-9U$ePV#LR@M%LdANyb= zl?dgicQR#7K$vf;v6t~c}8 zhHE}Z3~1J=N9u@Mjjo7!7>g{P3aXp$ynbX=AfTF21)96aSQX}TN)Q;b#Qs(zcGl}k1C%I> zH_LP>f#vYmMl}+uwd1uqWJv?MHn|f-FoQU?k08c6)jS=*WA7V1e#D7L{M8^atD7xF zL;hE){dU6mB1@7y4-F6XE(?(9Wt>GG-2k?( z)sx7yAfI$KD_>ugF_qEK2U9Nkx+3Jpv~X-T=ECQCz~1Fy`eJYIffziUAcxv`4{#vm z{t|lBLyqqPQZa=Ir?sx`=v-F~b2Hg!1Wixnb@u+1p`hS7YVJ?WyCmLtYrbo$HG?Cg zFYtP+)&cXLxcu`T5(1uE^@OikW8=vX0Ep4$lI2ZiGR9+pJIWID0?uOBomY}0Ke_38 zps&(T=ML%$mc%2J;107?>8IyI%BZbh$swhdy+x|DZzhPJ*Qy z;UDO-XnH{?(~pOffZ$R~MTCV`=;DZOq5nwd!DL-0zfyp4YN=pZAXNItphg98r8=h! zbwA}t&2>mFQHX_!&()U9Ck>ThcGXi1(ob+O;x=pV4V~aKSfivV&wk{C&sVp!MYWIh zOBeW)<{Y!{sljN5$1XY-?$mEO9O{lig;fzW7HG3S&Td&@ ze)y97ds`-kIb}ZO+NrR4XJllG?Ad)8TE>TxpcO{sbe@S%l5d9W6;{MEqgizFj|GBN zYAhRGP`c&4B17KWl)o;LNkDuVwM7B1Nf+rIN~}_pQZG=|QX!K1mZ;6pvZV3SKTCD> zB~2;7Vw4m)7b8}8=c}YOEbG~vf$}=#sI2B+fticys&|UJ9YFU=-lvM|d6pZAKB=Ns zj;7NOoG2KP1txLDl_jbTi)E;osCB3ZC40G>kyo9?(`!pNlqyhEEvA$6zIM7cHS3e8 zGj%PP+6+@lm|LXUPs3r?s3v!?o<0!jR$0g%CXyW+@j7&9Z|s(x&kB4OY&>j&x6okr zZo)~6s#BKD4T7hJp~4XVyss?S{gd7#T$7`CL&~P7AP`F;JP#^KMGh~X;03VWkFpfY zMt}_8GHfUh%iCuC^0xTGM(%%dZiyPptZke(?eOTyW9*!x#sEeS$;L_eE3*99`)1kOGLC`%(He=S@+w6FAzPt-|+Sv5h?2sB(Tq`N*R5 zwmd<^tEfwyP(?2{+diB0C=oo{{J@)Dsn#&hLa?}!mA!kQ;D9uQXKKt|=|#L?ooo!J ze#KOd)?qcB+>T=&cqq3haYhcd^)juIFQC=j%w8G_mC|A!l)11YP|Rzbsl_c+9EoZN zYNAtaKz!;($($H(Qdv{oPHaNm?#+MDXt)xuWyknq9OF6RoXWDOP8Ux&Vf~rQVU5OA zgRQj!|L;&LOCd8cl7;rWY5Qg`Gk80le0_R;W)XcWRlKw0WS@eZ%<|t(_;<1gc+<$( za@Q>v0YUefg!je4%p9pu@`3p5gyM8#nWfCzj^c{5*F-j>qt&IyMy1EH!KsZ%>E&r! z*&ywCIZp^PeoEm$c~L^516nR}dN$(n{A4`GM?BAunJ|V$5Oy>2PZSvpzA0F<0c`=(`{e9RmoNh6{{PJcS{y`6#6BcinR z6j{xTVTD1t<&3pv!6G~J%?c*?Jq#k&F4&XA&Fc`-8V-$*m(j^UvP} z(q8$W&_Im6WtE)aJR_@k8f~@yz;iQI@=AShDZPWB@0VtKg({cboG2O%k{<;gSu9D0 z&*v+7bC!W>QmIQGl5tCsYAUWd3J=emfUH}v*|o=OPXJ(%Mds5 zCh;uXm*+GsN6)pV36H21Vyh2GiQVKIR!8kV_%n%3PDZTAPD(^En&vDs&*QlnC@C0& z(NdL>#|G!lyH6ByiC1!FoSP~MCrnq3i{c23i9{%qNsq->B?A-N!{wmNqQbB(?I#HV zuKr^b8aql?K{8rU$CC5bG6S8nEkdh`H+xJ@numpXg7(y|H4jzM0K z1<1i=Oqx{ql7jf$6uI2#4mCp*u~3!{vUp0zE1igC&DBZ-OF$G=qUkkQ1x^f6=?(Jb zg>C%)Gk=tcYpxNJ925vEGD?!75=EDlmps$_BqYkA3ej^L*XhY(fJkPFS%;AUDi|@K zd*tB?gd}YZlZ44$58JE$f)M-v%2gI^s`Wp)!mj*77V0}qS3wk-PzROs)HFMqwTwcm ziZN46PLhY7O8k{;r@ZU)-c;sOe?~a9DKK$+9!RVC{-kd)(ZhNkWNYL3y;&#=GRsUA zkvrdv`F~ zy^NSfDp!A7sH!&$x-rTM+`8Gl7mz%Obf$V+mm4S@G?s_Wqv=T~F&Kf7|7uPoG4H(i zL?Jo7Cuc@H8vlzj7bBW?(XdcN>h7tB5}cDVVz*(1T2EN%fXSNUKs+B!ioPhi0}7pV z0kVF_9Oon7Fk4eO?nh(2dhXdctvbrWDKSM6K)NaNYbV5(j0_hd>QUO6F`?Yag-B-= zYj{$TI+K+Hfm|3rqy< z&-Lt?5~2NqAV5T}t<O+o)rPb3jQg($zKi7eCCKWv%tm_+*W;*vku|IS^QE>9P>t~LhY-o4Tvu4p6{J3&6~S}Vl6&#tTqjZa``Bi}tAdZGJQT@;}J%hFb<#N%_NXIn*jR78>r0JVJ;a*9Z^d2#20YDx-=h?`Ig%rD3AMqyU?iKGerF~oJ$&Nm--LHRnZH(vH zBO4{&G;r{GIOY;VA^DNYA2S63_?{r5)v0QMtHvQfX1Nn?F8p9}{^I`I(TB*>!F?HH z&;kb#arZw*#_RAcVO7h!@EgWu?)XAJ1erG9=`Mt?sJ2qTbwalZ8hB=s=REgxS29zObGy>m| zwKJQ6*i&$jHR7!Wh0ziQ|Tra`2dF*+2qHlK+cz-aIM0W{tZ24^$SjjrW zWIEL5`Ilf?C|`$Sg6T*nk@5ufe$DIkg>uxcO#{J7s1arEZ8%v;kfy(6V*IQqZXqty znxd))$E<2xdDZxZqzmm9aY%0_Y>m;!|Aue1TYIBZ+oIx#yz;seIq9y)m-haQdQ05x zs7{`HB{%8*UM(^)rzN5?=~jYZ&mj4tSN!Ehs=a{;7VQiaR#tb$>TVO}i}?dMt$e-_ z^^NZ`diV~Brj^g1_U9Sq(et;;9@#9id=M&NfX#lXZMH%GEpeax@Kv^PI#)^vXMg2iu zMBQR+H2m0Gis)M(C@#)#2m@S;iMAv<6+!nvng$Iv?=DvyPA&yC|NdoX$S}tbg7w8+ z4<0nY^@8QaSwpMJDu47eK^_8e%MW2=_+*}GK?22uR%%PdO$8f=-Z4yh`{@cf%z6NK z3AHM!iZQNv?43EZ8@vYYp)+fEiPrb85Czn0jDDSEIATUN&!eX=N(N?M?e!+Nspg#X zo2Z?o!l|R$-wxV)+4oFfzQo4vd%|3(!FsWrxF{o?qcBmZyB!}DwwIybs3nX)P0(pF zW*7($E??(1v%WrnN2aKP$SyI<4$~!k*TPxmn&%bI=mtQpHT`w z9|hur5R4~KqwQ#i23A74d|pcUOD-Syy0OwpMixT zeJLJLEZ}%E@}H$M>?6ZID!rUR$pX`@7&u4mdL8C)5c!k(PJ}Kb_mqSK zFDELwqqg_eHeo|^TY<^8TXzTjqrA*%HB`_d=8`32T?cFWEA6lskK;M?jHm9?i(MlX z0uGrtbf{BFO_D2H`Pv#_eBaM--p6iRjM3u2?_E=Nv0DNA4b`MFDb_arCwPd{PtCG3 zfz@@8mgrWzRH>3Q)?}wx4~QmT)K-68>y?2N6`*{f?h_;q^RXWZ0e6Sj+gbAOG3D}W zVfc>qN7wn`#vD(14;z$L!4rIf7AbgJp@Wgy?U}4d9VV-s0y8c~H%R$G2hq)0;j2go zZD1u3Ze(lDkuTe_#5{F6cciFs;2o6#5;^QU^i7#g*3PpS5nA;HTj)zX_^shxRUA$UD7V0x$<)Rh1r$ICbTUTEc z5@E{YXo{I9MpnMFoRZ{iPBW;CErsS(4MSF=2aZ)pJGUFe?-!| zB9ydyg)71oD0?GUNB@x&p-d}APh7I_nPa#yTou#VV{d*Fk&^flAuRxnKS;Nk`6&#; zltg9-o*@p}{eMlJWl$Vj)5md_;O-vW0}H_k?h@RBheZRyU4naX4U*vQu0a+S2=2PL zTabPC-urxbXFhbDshO^tIaNJJe*bP6uzRuNr)5EQit<&oc6|_4^Q&#{Q4SHJb`7G_ zj`$gG5N8GEz-(b&EuyVq>zr?Y8>Zn}_YuXVkRq;!pI_G;*?1m=5_LfSI}Y zf*LL_-9u}!AYUrq-a1C%ARJpyUXKpyne$bM@nrtn7W?Ck6ZD)fp2apXnsY z)VT8jb2l&bydZY`kGIs;#Gf|9&lm_nz>kZ?5^7b_=2+!H;#z`Nt)RdeL?NoCjR0hH zwYqg$R^a*i{d7$&c~%ARpmrr9@IK+@&92$LA7)isayC2BpM5r~dI5a|Z3N+}o}D z)<)8oetJ6#)A;3VrPMC^jo5T?U|&T8U__~512zBgsU3Nyr~MepTQ7mxj9U$L=}?qq zR$zYAfI=Rrvg*?FT!c6|lo&>IS_G$9&8!_?7qlkvQ(Li*?C#qNzfOMhy(jHkG*r)q zcYXk$O;P|;wpewxe*~G1Uh=jP2f6ao4)e&}_toYTZYt-Iym6hd+vzX`+|n~{y!T^_ z4#yNh$!cEY%6N4!tLY1LkX`xxmE&L7vp+Unfbqnkt%&b;7Dx6ElX0&cF7G1Z0jUcG zVWDWD{-yNV#&5|}s$s4S)ywvCY!WMs-(I?l?uvw@qC-pZfiW-f)Iw`DRv$LGUoZ+r zQ@7rfY$!qan)W&-uoSa7{OiE`4fJLMQ*q6r1d7P7z~bEg0Lxt>ZsBG0;S|pymT$~| z|6K2+`yr=9M)-sOTNWdHgFjN(^j zv%^@LoE29n^S5WEBNr55oNcyuS?fLc3*R;q{jxHflRQ85XFhV;RUMjVePKl^#$u;p z;dZOoUD_XE9AVvUvzUJA%bys2P9^fGF#$yURiS0?+yp}-KFj&DvMX8|7}WAR?y#vQ zRdLKH9ZHI|8J=WDa9yyK#sMWL&a&tJ6W#552_O}yeTRweY+c6}H5MwTR{g$}WhK%) zREnp9IdXYf7mJ7j=+}%bcw0a&3MPf|F}CVt9+;O&LKDYLA17qU^qt1t?@{%}a$#8*UDNl!Z{vPKdEQfgQ9^l`jT`HD9%dQg@YFo4E z;h|mX@t%t&X=&lbZhby{bCBqgP0C7-WAHOE~Di4 z)CY>vlwp0W;+$}3g~|!CbpYnI_tj|=Gozfj$+v|kVn!2r2((R#bC}X9F59wP5g|^S zc{$R)vtGV^cCbXP&Toc{JdjRTZE978I-Kg`v9UTc$V8HJon4*B=9S(WJkVVqQLK~;U3xCa&D#nPtM)FsIjt0*T~^A78A zJw>IvV%q0xK{gH>B*+(8s3Q(e(^h}C5O~qwTLzY!(Z?OgVaD@JAexvM-PK&o%^ylT zQ-wS3KhJ;ghhxVH-u*t=c2?f7(S6hpl&1obcAt3T zJ*~?#mcZ3NF6Bg)$*2!tF}m2KJLgMdL%ipIG+$;+aW0#4CKwD9E1vCjXj@LB{Ze9b zT1veT^QCE}%B5+gsoHbh&-j$fid0RV+@f;aB%auNXbncIRE<-~O-)vpCfR>4|6Jha zJR3A_BCAM)_}JQ$P)C~fBCzkf@DE`-^%&0!f9z}Pf38JD4DoHDBQiRClCG^*v;D%FMem1X9e9EBx%-N)AKC(L8(zSB`Iie z;jPkv^~1Jo&{dL9Wq;F+ujm^;DH^{hA`G&f)wULk;e6Kz`u~uvIMn1&=J3-=3?PG8 zoa^eV4_@T#on2Pq99RGb*CakiWxit=iw_A_8I;y;TSW$jZ4XOfVq*D(T;h1hpgK}q z|1B3WX^z^T$lj}^DG-qn+3t?S7N|vn4Cs4?_>M^wBLhBf z`-pLi#o+IUbtXLWU%?OG2DITQ#y+X|o0b)vLz5V7A`K*ZLtOrTud&X=Cr)4zrS zMVSH0z!<=B2gv0?7Ga}gkP)BO>S~7-!-rZNrx+6tZWa;=qQOC8$%C zSLjfqVY22+Et4j{oj64LYfOW;q3{>%8(kbxW8-TOx#8dXI1 zw1L-c?pf7H!`$51v%*{>`T#xIz8MSvSG##q;{c!JXF{~u1rGOjv(oJx8c_e()cvNe(R~ZbBY5QOv>|bBQL*|6& z0Dpp+)$hCY35vY0l<)r2n#Uk-83 z$313jUw#S;U2S}@;UzoF{KuHM^Xg|^rQ1)Y#Vl%9rSH`v?XWww<@gwL&%1eRShR`N zrYqN=kC()DBf^N`X##7ZBQz|t)<0+1QYkU;OnaaAe4FiTey8b+J>=Lg7z$*{T}#f6 zHdcHT(r6R@Wexu9Vhs`Ioh9dOY55IsMk}Y|B2TAJkECj;{Gt38l)~eY1P>_%ZuDx` ztb9QHICBOoCMY$8Sgj-PxqA{K1jt*(=`tPjaq~=46vE+f=ZiI{&-8*rsFVl#|2LJ1 zIGJrWn(<4^z;2NH@%R?k0;#B%;!}YXtOC@ z2>r5bGWk0!P0A^68m?vWBxmfze#VPDTX+_qz2y5BPA&OqntaJOC>HpGt6J+A++%~l z%nZ)iq_L%1r*K-n%+IfCpp*UJNKKA{0RXGyPx@v`eM#J2)v2LVhCIt)%78RpY1O%93Q`T zas%{DAEDnHGxP2cyeTXcR5f|2Jx%`MyGW!fiA0^;pUCIdf{EO?B1n7>b-KK zyj;#Mw*3jO@qrb4bIKzw>K&yio=QrFv3B~_PATU=|K?agahvX?4@aLINO}6;tORcf zrhk-`BqEJN2vn%j_IL15YsMsVbMP1I(&!4uj-6QiuuiH1Pk>^XU$jUdoO-((}12T1^Jok$7uCLv)UN4?U$tP@%j?_E`@|O*Ejri(z9|R zQ=j(zap#Cd2d+1RkEm2bG^R#7W}RjOTSTcG&rGD;&n>oq=NH}+UF4^+9K)+d{{)Dx ze*(m+W2^e+q@lZWcaGpa%v75)#r^uSZ+RxT$2ptjOR*eRo$lR&^po9bJ=ez=Q}BGO zVnk;EC^M$_D+^NAamf2*J!7Iqb;1Y8(;A$sf0Q?sPXNs0n<%K%w1)?S@5Gz&`cD56 zx82pe2;WNu{dO$r@ShN3hukp{zFp-6`_4nCOrG2IzK#Hmt@5qMjB+?uA%g@Py1rgM zU9=}VW*6XFnogdJpFbO7t$v)o4>L28TrXcB{&A%2#GtJkxYMV{?W53OsrD{>=JRBX z+8P}#ItfeHwc^X@2_6l~x%ft0b;vmPI%)J5ty?QELSEG?XD-3GEgP|tuF7!G4n=du z?!A!dIkWKL?-#1)er%ubMt^Nub}fay|Dg2PBPOl9*R5U%a(cccKXFJ^?N^^VcfvJ z8|A@KUbJ&jJ7(z?;j7^Fx;x&C0;ziBxX-;G;XZA23>c|TXX2c4_D6lkk?BseQHVTi zUw!z7%!Ip%iXfO5q(;&9?$mE_ZLRojef>R_DEXQmZhI^m*Ob{fo>@GY_YEGd)wZ5? z&~9=vok(O_(0Xo7q|`a4z0^?LrwBrVM4M(fNUli`9^_m9*b)$9=Dv@iz*ty9UC^&X$}&tux+OGa-SYP6xV>%u|iI0_^>uOMQW!m-*t)wlq+Y-awqo zeEo+hyysBRC^_SAWRuuJzA(SPx2k`T0Ps2i{3uAbhtU04yg4WjjLl0F#hft+O zrsSAZazuh9A#MITsO#?rEa>_>6ifmo=@4yK$l#S}(9Urp7fN_MJ5&+9yF9sY zb>QDivi};Y-oVTs&LE`Qaojeq`TBuFW~rjI?-6+zqv0MLehBXplmqOdrT@CMO2wL- zn)Fqi#25993B9~<9eVbmysv$lpRY;v3W6}?cNzMD7k3w)nGNj_k`N?MLH&B06&>V6 zg>2#@NnI_8lvKsGu>AIVgxSH_%d5rS7~COc&~|#=frmf!xF-=w$R9bmBNrJBeRlcs zi_%t?lP)4=K&`9;&bZT6a_;eEx-j|J{QklYJ~zO_!ZDF2TD~JYPE+9hU$Nq^{&!ni zXIF&p>o(Tx+pjsej5W?Qal<($cO8vbtHqgZ7_M65vPGgN0-xsmIhL^%4<;inHIFjzs8V|9C7C9)sA9Z8XAB23s*F;;>^SepV%rBp`uWVMeLLc=wXoMrku?2C+QEB)-DO!DoXkr~ zwZp?30+fOJc3vsvJv>2i&Vsea#h`Wi#KdjVwcO#%=Dav1OdOyVm&27-b0Yr{3-HRh`fy;;`-?-1$_S5EW))CmS?jRtEv~Z?I=FTpv zg5xdrsdG)MwBE%EwHesbl zuXZv%f922`@rS2XvIMY^ivZd1`n$S*X5a!N291x~kT3{C+X1=SdGNK>FR7xU&Ejr$ z!Xe<#yFMG*YzIyn&LP7*MC6i!*3Rb=Rp0=+BrjTdBp(UQ$#c-wwq2RGv0eJD(GBml zPgt%KlcR5*EMR3BNLp{daMyPxH9MP<6mh=g{tVgf38SJy*&@h){}Y{#wF7`!vyY{` z9eZ=l)A}WX7RS<-bQMo*)=K$acZZ%%PN2s-K;mmyuod|snlMXjlHi(sgkH^8d302x zgdi?LLzlzgA)zlyphe*X&wQs_q3#6k+MpfpMu$I^EG_QG1{F>Ww@y8H0uM(n>vI>p zK3Bf>Y=B;DdrHv&fr2IdHv}EI!``7bS5x^I&BcuvW~p(AmbI+eEeD4!5oJB5SwN(O zcvHauq(o$Nx^}URZa;Um>ggMj6n+WMf#898RHMu|X$?nfP?c?H+R~cQv@32OQ(+!xs+Y> z5!{QiSWzKcAQ|-LJ1Y(%^sLOxA^|#J*8Irr#_OROjI4^Y)_`y%Ac&R-3LgAj1?UB2 ziFZP5-VF+KG-q$2WsyNWPGxqW8_>tV;4oJdZRAliN;h0p8nbb@bO3jE{_2bXHcLir z@Jk2Va0^vrb%%IJZW;wJrY)*jgc{m7yOj~vgKrEB^f+X7u>;SeF)pb;V;9!E)}KD7 zBHTs~n_9i^Gtx&az8+d4ms`P$RE%XVs+KS%R5hOd9B3IYdBSoh2_r_P?lXFXx@e4I z3si@_#S*R{Ysu!s(rNo}_~>vNymguv7YM*fbAQ`8k;Uko;FvmjFfnx|zep32ilv9~ zkCfXU=BFeSt3pBqfMRn@p4a@KE-|vgbB7ytXAP;#i5(lRLzT=On+s z`L#(8b-4KnfTuuFzuCin39}s3k5nz7?~wJUSyPs^y{&8`uaPByD5P__ZEfjT1hjry zVS1puA#&7K0KKPVb!+8+=W~1Hd2wVuy>=`bS_~`fF)ML$3s?g}JkT$ z!MElP@RXY?z9@XM9oh5b(Y#etv9TWK9QaxTEBXN)^Z%Q$0eZ#zdfU34uuXpWkc-LWS0GLo6=LP%pWmN8$ljwQPoh z9zSEepsk2Ey&CK!3`_`F33M)*vyBJ$5h>luT|es7w~)!g@Fu$z-)&fdQuFZX@!Fv| zU#H2sTE$7H}N(O##BS69H-sFfh{6RQffx*?I zkD6PC@7j>@he%mTIbU&cG!3M4MohxE!iBFSTOKU5uihJ6z>rL#j6@UVDb(*-yM|n+hq(p?hv0m|%d%j>fAkpJkeL-#=7T-eir1x*WoZ$;4W!e+Ra*8Ts?G&?;r_YcV_zs%P zW!05Ir*Uv^p_NJ5n>tU@E5jK+8anY5)u`}q=e@DQG9a@MoM+ig+?T)eO%{1U!K9*a zP9cyyB_J;zfTg{SA44FExl>PfVx1zDdr<(Rb~uTMEmu+XWaPViFC zvD@<5HYtAm4|1*zrcH5n7um17Mc_X7IwW4!LS0H3A_nA*qvDo2z$RipH+GKPBa=N@ ziF;@!5??i`fls>M@r7)<1U?f5tj`h%JwCBC@SG&mp6k?OG`#)$8I#C>*uhr6JYScN zD7t2i!xv^-CH0(l8;;=b8ox*eqd^FO6kGR^HHg4>D{2OS| z572BtHg%H)E!GD6Y5rzjx$ArXv$LjObM8dmv-Q!0Xv;x~e~*uyDM>LYScdTN`v&*@ zvG@q4KFM=tyC*#pKB?bv0Q|LWKe_M$tWx?a`_%I-27}zDdUXj)2khd6+WejYlQn$!z3y3HNWEf)&NlKWN)~@=wG)rw=U8t zC9F$*o3q)EWEh1(kT4gomB*w>q!vRcbJ753{Uk1Uw zbuiz8ONtV`7bB#r|MMalk%TpJDS5Z^w}Ndv>sC=geIZ(hvPCKRE~1JnWMn>|mNb44 zD@K9)^i*%qv$4beMdXpaNWQ*)*zEA{H>J5v9iiqMvxLax#<0lbXA-Fwo*d7Y(fMl( z@E=NDZ&OXxdXqq_1?h?J&4b$>mSsD*csGCFVg&q_)+Y1M7!x{S2DI>hdA{5q`)=Dx z#68(FQC%-juuDrQ\n\n**Note:** Please refer to the following before installing the solution: \n\n• Review the solution [Release Notes](https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Network%20Session%20Essentials/ReleaseNotes.md)\n\n • There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing.\n\n[Network Session Essentials](https://aka.ms/NetworkSessionEssential) is a [domain solution](https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fsentinel%2Fsentinel-solutions-catalog%23domain-solutions&data=05%7C01%7Ckavishbakshi%40microsoft.com%7Cbe2a496082b24caa4b8c08da9cefacca%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637994850502413731%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=OJegu%2B2EqD7rmYmK9pm9QniD6YWp5ooloZ6tHzcwVi0%3D&reserved=0) and does not include any data connectors. The content in this solution requires one of the product solutions below , as well as any other connector or data source normalized to the [ASIM](https://aka.ms/AboutASIM).\n\n**Prerequisite :-**\n\n Install one or more of the listed solutions, or develop your custom ASIM parsers to unlock the value provided by this solution.\n 1. Amazon Web Services \n 2. Azure Firewall \n 3. Azure Network Security Groups \n 4. Check Point \n 5. Cisco ASA \n 6. Cisco Meraki Security Events \n 7. Corelight \n 8. Fortinet FortiGate \n 9. Microsoft Defender for IoT \n 10. Microsoft Defender for Cloud \n 11. Microsoft Sysmon For Linux \n 12. Windows Firewall \n 13. Palo Alto PANOS \n 14. Vectra AI Stream \n 15. WatchGuard Firebox \n 16. Zscaler Internet Access \n\n**Underlying Microsoft Technologies used:** \n\nThis solution takes a dependency on the following technologies, and some of these dependencies either may be in Preview state or might result in additional ingestion or operational costs: \n 1. Product solutions as described above \n 2. Logic app for data summarization\n\n**Recommendation :-**\n\nIt is highly recommended to use the **Summarize data** logic app playbook provided with this solution as it will significantly improve the performance of the Workbook, Analytic rules & Hunting queries.\n\n**Workbooks:** 1, **Analytic Rules:** 9, **Hunting Queries:** 7, **Watchlists:** 1, **Playbooks:** 1\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)", + "description": "\n\n**Note:** Please refer to the following before installing the solution: \n\n• Review the solution [Release Notes](https://github.com/Azure/Azure-Sentinel/tree/master/Solutions/Network%20Session%20Essentials/ReleaseNotes.md)\n\n • There may be [known issues](https://aka.ms/sentinelsolutionsknownissues) pertaining to this Solution, please refer to them before installing.\n\n[Network Session Essentials](https://aka.ms/NetworkSessionEssential) is a [domain solution](https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.microsoft.com%2Fazure%2Fsentinel%2Fsentinel-solutions-catalog%23domain-solutions&data=05%7C01%7Ckavishbakshi%40microsoft.com%7Cbe2a496082b24caa4b8c08da9cefacca%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637994850502413731%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=OJegu%2B2EqD7rmYmK9pm9QniD6YWp5ooloZ6tHzcwVi0%3D&reserved=0) and does not include any data connectors. The content in this solution requires one of the product solutions below , as well as any other connector or data source normalized to the [ASIM](https://aka.ms/AboutASIM).\n\n**Prerequisite :-**\n\n Install one or more of the listed solutions, or develop your custom ASIM parsers to unlock the value provided by this solution.\n 1. Amazon Web Services \n 2. Azure Firewall \n 3. Azure Network Security Groups \n 4. Check Point \n 5. Cisco ASA \n 6. Cisco Meraki Security Events \n 7. Corelight \n 8. Fortinet FortiGate \n 9. Microsoft Defender for IoT \n 10. Microsoft Defender for Cloud \n 11. Microsoft Sysmon For Linux \n 12. Windows Firewall \n 13. Palo Alto PANOS \n 14. Vectra AI Stream \n 15. WatchGuard Firebox \n 16. Zscaler Internet Access \n 17. IllumioSaaS \n\n**Underlying Microsoft Technologies used:** \n\nThis solution takes a dependency on the following technologies, and some of these dependencies either may be in Preview state or might result in additional ingestion or operational costs: \n 1. Product solutions as described above \n 2. Logic app for data summarization\n\n**Recommendation :-**\n\nIt is highly recommended to use the **Summarize data** logic app playbook provided with this solution as it will significantly improve the performance of the Workbook, Analytic rules & Hunting queries.\n\n**Workbooks:** 1, **Analytic Rules:** 9, **Hunting Queries:** 7, **Watchlists:** 1, **Playbooks:** 1\n\n[Learn more about Microsoft Sentinel](https://aka.ms/azuresentinel) | [Learn more about Solutions](https://aka.ms/azuresentinelsolutionsdoc)", "subscription": { "resourceProviders": [ "Microsoft.OperationsManagement/solutions", diff --git a/Solutions/Network Session Essentials/Package/mainTemplate.json b/Solutions/Network Session Essentials/Package/mainTemplate.json index df9133f422e..9a5cd1c3a52 100644 --- a/Solutions/Network Session Essentials/Package/mainTemplate.json +++ b/Solutions/Network Session Essentials/Package/mainTemplate.json @@ -49,7 +49,7 @@ "email": "support@microsoft.com", "_email": "[variables('email')]", "_solutionName": "Network Session Essentials", - "_solutionVersion": "3.0.4", + "_solutionVersion": "3.0.5", "solutionId": "azuresentinel.azure-sentinel-solution-networksession", "_solutionId": "[variables('solutionId')]", "workbookVersion1": "1.0.0", @@ -95,11 +95,11 @@ "_analyticRulecontentProductId5": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','156997bd-da0f-4729-b47a-0a3e02dd50c8','-', '1.0.1')))]" }, "analyticRuleObject6": { - "analyticRuleVersion6": "1.0.3", + "analyticRuleVersion6": "1.0.4", "_analyticRulecontentId6": "cd8faa84-4464-4b4e-96dc-b22f50c27541", "analyticRuleId6": "[resourceId('Microsoft.SecurityInsights/AlertRuleTemplates', 'cd8faa84-4464-4b4e-96dc-b22f50c27541')]", "analyticRuleTemplateSpecName6": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat(parameters('workspace'),'-ar-',uniquestring('cd8faa84-4464-4b4e-96dc-b22f50c27541')))]", - "_analyticRulecontentProductId6": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','cd8faa84-4464-4b4e-96dc-b22f50c27541','-', '1.0.3')))]" + "_analyticRulecontentProductId6": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','cd8faa84-4464-4b4e-96dc-b22f50c27541','-', '1.0.4')))]" }, "analyticRuleObject7": { "analyticRuleVersion7": "1.2.7", @@ -180,7 +180,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "NetworkSessionEssentials Workbook with template version 3.0.4", + "description": "NetworkSessionEssentials Workbook with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('workbookVersion1')]", @@ -324,10 +324,6 @@ "contentId": "MicrosoftSysmonForLinux", "kind": "DataConnector" }, - { - "contentId": "PaloAltoNetworks", - "kind": "DataConnector" - }, { "contentId": "AzureMonitor(VMInsights)", "kind": "DataConnector" @@ -357,11 +353,11 @@ "kind": "DataConnector" }, { - "contentId": "Fortinet", + "contentId": "CustomLogsAma", "kind": "DataConnector" }, { - "contentId": "CiscoMeraki", + "contentId": "CefAma", "kind": "DataConnector" } ] @@ -392,7 +388,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "AnomalyFoundInNetworkSessionTraffic_AnalyticalRules Analytics Rule with template version 3.0.4", + "description": "AnomalyFoundInNetworkSessionTraffic_AnalyticalRules Analytics Rule with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject1').analyticRuleVersion1]", @@ -546,13 +542,13 @@ "aggregationKind": "AlertPerResult" }, "customDetails": { - "Score": "score", + "AnomalyFieldValue": "anomalyFieldValue", "AnomalyFieldType": "anomalyFieldType", - "AnomalyFieldValue": "anomalyFieldValue" + "Score": "score" }, "alertDetailsOverride": { - "alertDisplayNameFormat": "Anomaly was observed with {{anomalyFieldValue}} Traffic", - "alertDescriptionFormat": "Based on past data, anomaly was observed in {{anomalyFieldValue}} Traffic with a score of {{score}}." + "alertDescriptionFormat": "Based on past data, anomaly was observed in {{anomalyFieldValue}} Traffic with a score of {{score}}.", + "alertDisplayNameFormat": "Anomaly was observed with {{anomalyFieldValue}} Traffic" } } }, @@ -607,7 +603,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "Anomaly in SMB Traffic(ASIM Network Session schema)_AnalyticalRules Analytics Rule with template version 3.0.4", + "description": "Anomaly in SMB Traffic(ASIM Network Session schema)_AnalyticalRules Analytics Rule with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject2').analyticRuleVersion2]", @@ -633,7 +629,6 @@ "triggerOperator": "GreaterThan", "triggerThreshold": 0, "status": "Available", - "requiredDataConnectors": [], "tactics": [ "LateralMovement" ], @@ -646,13 +641,13 @@ ], "entityMappings": [ { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "SrcIpAddr" + "columnName": "SrcIpAddr", + "identifier": "Address" } - ], - "entityType": "IP" + ] } ], "eventGroupingSettings": { @@ -711,7 +706,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "Remote Desktop Network Brute force (ASIM Network Session schema)_AnalyticalRules Analytics Rule with template version 3.0.4", + "description": "Remote Desktop Network Brute force (ASIM Network Session schema)_AnalyticalRules Analytics Rule with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject3').analyticRuleVersion3]", @@ -737,7 +732,6 @@ "triggerOperator": "GreaterThan", "triggerThreshold": 0, "status": "Available", - "requiredDataConnectors": [], "tactics": [ "CredentialAccess" ], @@ -746,13 +740,13 @@ ], "entityMappings": [ { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "SrcIpAddr" + "columnName": "SrcIpAddr", + "identifier": "Address" } - ], - "entityType": "IP" + ] } ], "eventGroupingSettings": { @@ -811,7 +805,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "DetectPortMisuseByAnomalyBasedDetection_AnalyticalRules Analytics Rule with template version 3.0.4", + "description": "DetectPortMisuseByAnomalyBasedDetection_AnalyticalRules Analytics Rule with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject4').analyticRuleVersion4]", @@ -964,16 +958,16 @@ "aggregationKind": "AlertPerResult" }, "customDetails": { - "DstPortNumber": "DstPortNumber", "AllNetworkDirections": "NetworkDirections", "AllNetworkProtocols": "NetworkProtocols", - "AllDvcAction": "DvcActions" + "AllDvcAction": "DvcActions", + "DstPortNumber": "DstPortNumber" }, "alertDetailsOverride": { - "alertSeverityColumnName": "Severity", - "alertDisplayNameFormat": "Detected {{Name}}", "alertTacticsColumnName": "Tactic", - "alertDescriptionFormat": "{{Description}}" + "alertDescriptionFormat": "{{Description}}", + "alertDisplayNameFormat": "Detected {{Name}}", + "alertSeverityColumnName": "Severity" } } }, @@ -1028,7 +1022,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "DetectPortMisuseByStaticThreshold_AnalyticalRules Analytics Rule with template version 3.0.4", + "description": "DetectPortMisuseByStaticThreshold_AnalyticalRules Analytics Rule with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject5').analyticRuleVersion5]", @@ -1180,16 +1174,16 @@ "aggregationKind": "AlertPerResult" }, "customDetails": { - "DstPortNumber": "DstPortNumber", "AllNetworkDirections": "NetworkDirections", "AllNetworkProtocols": "NetworkProtocols", - "AllDvcAction": "DvcActions" + "AllDvcAction": "DvcActions", + "DstPortNumber": "DstPortNumber" }, "alertDetailsOverride": { - "alertSeverityColumnName": "Severity", - "alertDisplayNameFormat": "Detected {{Name}}", "alertTacticsColumnName": "Tactic", - "alertDescriptionFormat": "{{Description}}" + "alertDescriptionFormat": "{{Description}}", + "alertDisplayNameFormat": "Detected {{Name}}", + "alertSeverityColumnName": "Severity" } } }, @@ -1244,7 +1238,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "NetworkPortSweepFromExternalNetwork_AnalyticalRules Analytics Rule with template version 3.0.4", + "description": "NetworkPortSweepFromExternalNetwork_AnalyticalRules Analytics Rule with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject6').analyticRuleVersion6]", @@ -1382,8 +1376,13 @@ } ], "tactics": [ + "Reconnaissance", "Discovery" ], + "techniques": [ + "T1590", + "T1046" + ], "eventGroupingSettings": { "aggregationKind": "SingleAlert" }, @@ -1391,8 +1390,8 @@ "AllDstIpAddr": "set_DstIpAddr" }, "alertDetailsOverride": { - "alertDisplayNameFormat": "Network Port Sweep detected on {{DstPortNumber}}", - "alertDescriptionFormat": "Network Port Sweep was detection by multiple IPs" + "alertDescriptionFormat": "Network Port Sweep was detection by multiple IPs", + "alertDisplayNameFormat": "Network Port Sweep detected on {{DstPortNumber}}" } } }, @@ -1447,7 +1446,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "ExcessiveHTTPFailuresFromSource_AnalyticalRules Analytics Rule with template version 3.0.4", + "description": "ExcessiveHTTPFailuresFromSource_AnalyticalRules Analytics Rule with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject7').analyticRuleVersion7]", @@ -1592,21 +1591,21 @@ ], "entityMappings": [ { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "SrcIpAddr" + "columnName": "SrcIpAddr", + "identifier": "Address" } - ], - "entityType": "IP" + ] } ], "customDetails": { "NumberOfDenies": "Count" }, "alertDetailsOverride": { - "alertDisplayNameFormat": "Excessive number of failed connections from {{SrcIpAddr}}", - "alertDescriptionFormat": "The client at address {{SrcIpAddr}} generated more than {{threshold}} failures over a 5 minutes time window, which may indicate malicious activity." + "alertDescriptionFormat": "The client at address {{SrcIpAddr}} generated more than {{threshold}} failures over a 5 minutes time window, which may indicate malicious activity.", + "alertDisplayNameFormat": "Excessive number of failed connections from {{SrcIpAddr}}" } } }, @@ -1661,7 +1660,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "PortScan_AnalyticalRules Analytics Rule with template version 3.0.4", + "description": "PortScan_AnalyticalRules Analytics Rule with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject8').analyticRuleVersion8]", @@ -1806,21 +1805,21 @@ ], "entityMappings": [ { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "SrcIpAddr" + "columnName": "SrcIpAddr", + "identifier": "Address" } - ], - "entityType": "IP" + ] } ], "customDetails": { "AttemptedPortsCount": "AttemptedPortsCount" }, "alertDetailsOverride": { - "alertDisplayNameFormat": "Potential port scan from {{SrcIpAddr}}", - "alertDescriptionFormat": "A port scan has been performed from address {{SrcIpAddr}} over {{AttemptedPortsCount}} ports within 5 minutes. This may indicate that a [port scanner](https://en.wikipedia.org/wiki/Port_scanner) is trying to identify open ports in order to penetrate a system." + "alertDescriptionFormat": "A port scan has been performed from address {{SrcIpAddr}} over {{AttemptedPortsCount}} ports within 5 minutes. This may indicate that a [port scanner](https://en.wikipedia.org/wiki/Port_scanner) is trying to identify open ports in order to penetrate a system.", + "alertDisplayNameFormat": "Potential port scan from {{SrcIpAddr}}" } } }, @@ -1875,7 +1874,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "PossibleBeaconingActivity_AnalyticalRules Analytics Rule with template version 3.0.4", + "description": "PossibleBeaconingActivity_AnalyticalRules Analytics Rule with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('analyticRuleObject9').analyticRuleVersion9]", @@ -2021,33 +2020,33 @@ ], "entityMappings": [ { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "SrcIpAddr" + "columnName": "SrcIpAddr", + "identifier": "Address" } - ], - "entityType": "IP" + ] }, { + "entityType": "IP", "fieldMappings": [ { - "identifier": "Address", - "columnName": "DstIpAddr" + "columnName": "DstIpAddr", + "identifier": "Address" } - ], - "entityType": "IP" + ] } ], "customDetails": { + "FrequencyCount": "TotalSrcBytes", "TotalDstBytes": "TotalDstBytes", - "FrequencyTime": "MostFrequentTimeDeltaCount", "DstPortNumber": "DstPortNumber", - "FrequencyCount": "TotalSrcBytes" + "FrequencyTime": "MostFrequentTimeDeltaCount" }, "alertDetailsOverride": { - "alertDisplayNameFormat": "Potential beaconing from {{SrcIpAddr}} to {{DstIpAddr}}", - "alertDescriptionFormat": "Potential beaconing pattern from a client at address {{SrcIpAddr}} to a server at address {{DstIpAddr}} over port {{DstPortNumber}} identified. Such potential outbound beaconing pattern to untrusted public networks should be investigated for any malware callbacks or data exfiltration attempts as discussed in this [Blog](http://www.austintaylor.io/detect/beaconing/intrusion/detection/system/command/control/flare/elastic/stack/2017/06/10/detect-beaconing-with-flare-elasticsearch-and-intrusion-detection-systems/). The recurring frequency, reported as FrequencyTime in the custom details, and the total transferred volume reported as TotalDstBytes in the custom details, can help to determine the significance of this incident." + "alertDescriptionFormat": "Potential beaconing pattern from a client at address {{SrcIpAddr}} to a server at address {{DstIpAddr}} over port {{DstPortNumber}} identified. Such potential outbound beaconing pattern to untrusted public networks should be investigated for any malware callbacks or data exfiltration attempts as discussed in this [Blog](http://www.austintaylor.io/detect/beaconing/intrusion/detection/system/command/control/flare/elastic/stack/2017/06/10/detect-beaconing-with-flare-elasticsearch-and-intrusion-detection-systems/). The recurring frequency, reported as FrequencyTime in the custom details, and the total transferred volume reported as TotalDstBytes in the custom details, can help to determine the significance of this incident.", + "alertDisplayNameFormat": "Potential beaconing from {{SrcIpAddr}} to {{DstIpAddr}}" } } }, @@ -2102,7 +2101,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "SummarizeData_NSE Playbook with template version 3.0.4", + "description": "SummarizeData_NSE Playbook with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('playbookVersion1')]", @@ -3559,7 +3558,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "Detect Outbound LDAP Traffic(ASIM Network Session schema)_HuntingQueries Hunting Query with template version 3.0.4", + "description": "Detect Outbound LDAP Traffic(ASIM Network Session schema)_HuntingQueries Hunting Query with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject1').huntingQueryVersion1]", @@ -3644,7 +3643,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "DetectPortMisuseByAnomalyHunting_HuntingQueries Hunting Query with template version 3.0.4", + "description": "DetectPortMisuseByAnomalyHunting_HuntingQueries Hunting Query with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject2').huntingQueryVersion2]", @@ -3729,7 +3728,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "DetectPortMisuseByStaticThresholdHunting_HuntingQueries Hunting Query with template version 3.0.4", + "description": "DetectPortMisuseByStaticThresholdHunting_HuntingQueries Hunting Query with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject3').huntingQueryVersion3]", @@ -3814,7 +3813,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "DetectsSeveralUsersWithTheSameMACAddress_HuntingQueries Hunting Query with template version 3.0.4", + "description": "DetectsSeveralUsersWithTheSameMACAddress_HuntingQueries Hunting Query with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject4').huntingQueryVersion4]", @@ -3895,7 +3894,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "MismatchBetweenDestinationAppNameAndDestinationPort_HuntingQueries Hunting Query with template version 3.0.4", + "description": "MismatchBetweenDestinationAppNameAndDestinationPort_HuntingQueries Hunting Query with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject5').huntingQueryVersion5]", @@ -3976,7 +3975,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "Protocols passing authentication in cleartext (ASIM Network Session schema)_HuntingQueries Hunting Query with template version 3.0.4", + "description": "Protocols passing authentication in cleartext (ASIM Network Session schema)_HuntingQueries Hunting Query with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject6').huntingQueryVersion6]", @@ -4061,7 +4060,7 @@ "[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]" ], "properties": { - "description": "Remote Desktop Network Traffic(ASIM Network Session schema)_HuntingQueries Hunting Query with template version 3.0.4", + "description": "Remote Desktop Network Traffic(ASIM Network Session schema)_HuntingQueries Hunting Query with template version 3.0.5", "mainTemplate": { "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#", "contentVersion": "[variables('huntingQueryObject7').huntingQueryVersion7]", @@ -4159,7 +4158,7 @@ "apiVersion": "2023-04-01-preview", "location": "[parameters('workspace-location')]", "properties": { - "version": "3.0.4", + "version": "3.0.5", "kind": "Solution", "contentSchemaVersion": "3.0.0", "displayName": "Network Session Essentials", @@ -4281,7 +4280,7 @@ { "kind": "Watchlist", "contentId": "[variables('_NetworkSession Monitor Configuration')]", - "version": "3.0.4" + "version": "3.0.5" }, { "kind": "Solution", @@ -4346,6 +4345,10 @@ { "kind": "Solution", "contentId": "zscaler1579058425289.zscaler_internet_access_mss" + }, + { + "kind": "Solution", + "contentId": "illumioinc1629822633689.illumio_sentinel" } ] }, diff --git a/Solutions/Network Session Essentials/ReleaseNotes.md b/Solutions/Network Session Essentials/ReleaseNotes.md index 64f1424dc36..9ff59ff1c50 100644 --- a/Solutions/Network Session Essentials/ReleaseNotes.md +++ b/Solutions/Network Session Essentials/ReleaseNotes.md @@ -1,5 +1,6 @@ | **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** | |-------------|--------------------------------|-----------------------------------------------------------------------| +| 3.0.5 | 12-12-2024 | Added IllumioSaaS solution in a domain solution list | | 3.0.4 | 03-06-2024 | Added missing AMA **Data Connector** reference in **Analytical rule** and **Hunting Query** | | 3.0.3 | 12-03-2024 | Added 3 new **Hunting Queries** and 2 new **Analytic Rules** | | 3.0.2 | 07-02-2024 | Updated **Analytic Rule** (DetectPortMisuseByAnomalyBasedDetection)
Updated solution description |