AzSKPreview.ADO

1.21.0

Framework/Listeners/UserReports/WriteSummaryFile.ps1

                                Set-StrictMode -Version Latest 

class WriteSummaryFile: FileOutputBase

{   

    hidden static [WriteSummaryFile] $Instance = $null;

    static [WriteSummaryFile] GetInstance()

    {

        if ( $null -eq  [WriteSummaryFile]::Instance)

        {

            [WriteSummaryFile]::Instance = [WriteSummaryFile]::new();

        }

        return [WriteSummaryFile]::Instance

    }

    [void] RegisterEvents()

    {

        $this.UnregisterEvents();       

        $this.RegisterEvent([AzSKRootEvent]::GenerateRunIdentifier, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $currentInstance.SetRunIdentifier([AzSKRootEventArgument] ($Event.SourceArgs | Select-Object -First 1));            

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

        $this.RegisterEvent([SVTEvent]::CommandStarted, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $currentInstance.SetFilePath($Event.SourceArgs.OrganizationContext, ("SecurityReport-" + $currentInstance.RunIdentifier + ".csv"));

                [FileOutputBase]::CSVFilePath = $currentInstance.FilePath

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

        $this.RegisterEvent([SVTEvent]::CommandCompleted, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            if(($Event.SourceArgs.ControlResults|Where-Object{$_.VerificationResult -ne[VerificationResult]::NotScanned}|Measure-Object).Count -gt 0)

            {

                $currentInstance.SetFilePath($Event.SourceArgs[0].OrganizationContext, ("SecurityReport-" + $currentInstance.RunIdentifier + ".csv"));

                #in case check owner access has been used with normal GADS and not control fix, generate a list of non scanned resources

                if($currentInstance.InvocationContext.BoundParameters["CheckOwnerAccess"] -and $null -ne $env:nonScannedResources){

                    $currentInstance.WriteNonScannedResourcesInfo();

                }

            }

            #in case of control fix, csv will have been already generated due to upc, need to generate list of non scanned resources

            elseif($currentInstance.InvocationContext.BoundParameters["CheckOwnerAccess"] -and $currentInstance.InvocationContext.BoundParameters["PrepareForControlFix"] -and $null -ne $env:nonScannedResources){

                $currentInstance.WriteNonScannedResourcesInfo();

            }

            else

            {

                # While running GAI -InfoType AttestationInfo, no controls are evaluated. So the value of VerificationResult is by default NotScanned for all controls.

                # In that case the csv file should be renamed to AttestationReport.

                $currentInstance.SetFilePath($Event.SourceArgs[0].OrganizationContext, ("AttestationReport-" + $currentInstance.RunIdentifier + ".csv"));

            }

            # Export CSV Report

            if(-not [PartialScanManager]::IsCsvUpdatedAtCheckpoint)

            {

                try 

                {

                    $currentInstance.WriteToCSV($Event.SourceArgs);

                    if($currentInstance.InvocationContext.MyCommand.Name -eq "Set-AzSKADOBaselineConfigurations"){

                        $currentInstance.WriteBaselineConfigurationsToFile($Event.SourceArgs)

                    }

                    $currentInstance.FilePath = "";

                }

                catch 

                {

                    $currentInstance.PublishException($_);

                }

            }

        });

        $this.RegisterEvent([AzSKRootEvent]::UnsupportedResources, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $message = $Event.SourceArgs.Messages | Select-Object -First 1

                if($message -and $message.DataObject)

                {

                    $filePath = $currentInstance.CalculateFilePath($Event.SourceArgs.OrganizationContext, [FileOutputBase]::ETCFolderPath, ("UnsupportedResources-" + $currentInstance.RunIdentifier + ".csv.LOG"));

                    $message.DataObject | Export-Csv $filePath -NoTypeInformation

                }

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

        $this.RegisterEvent([AzSKRootEvent]::WriteCSV, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $fileName = 'Control Details';

                $folderPath = '';

                $fileExtension = 'csv';

                $message = $Event.SourceArgs.Messages | Select-Object -First 1

                if($message -and $message.DataObject)

                {

                    if(-not [string]::IsNullOrEmpty($message.DataObject.FileName))

                    {

                        $fileName = $message.DataObject.FileName

                    }

                    if(-not [string]::IsNullOrEmpty($message.DataObject.FolderPath))

                    {

                        $folderPath = $message.DataObject.FolderPath

                    }

                    if(-not [string]::IsNullOrEmpty($message.DataObject.FileExtension))

                    {

                        $fileExtension = $message.DataObject.FileExtension

                    }

                    $filePath = $currentInstance.CalculateFilePath($Event.SourceArgs.OrganizationContext, $folderPath, ($fileName + "." + $fileExtension));

                    $message.DataObject.MessageData | Export-Csv $filePath -NoTypeInformation

                }

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

        # Event for Writing File Detailed Log

        $this.RegisterEvent([AzSKRootEvent]::WriteExcludedResources,{

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $message = $Event.SourceArgs.Messages | Select-Object -First 1

                $printMessage="";

                if($message -and $message.DataObject)

                {

                    $filePath = $currentInstance.CalculateFilePath($Event.SourceArgs.OrganizationContext, [FileOutputBase]::ETCFolderPath, ("ExcludedResources-" + $currentInstance.RunIdentifier + ".txt.LOG"));

                    $ExcludedType = $message.DataObject.ExcludedResourceType

                    if($ExcludedType -eq 'All')

                    {

                        $ExcludedType = 'None'

                    }

                    $ExcludeResourceName = $message.DataObject.ExcludeResourceNames

                    $ExcludedResources = $message.DataObject.ExcludedResources  

                    $ExcludedTypeResources = $ExcludedResources | Select-Object -ExpandProperty ResourceTypeMapping |Where-Object {$_.ResourceTypeName -in $ExcludedType}

                    $ExplicitlyExcludedResource =$ExcludedResources| Where-Object {$_.ResourceName -in $ExcludeResourceName}

                    $printMessage += "`r`nNumber of resources excluded: $(($ExcludedResources | Measure-Object).Count | Out-String)"

                    $printMessage += "`r`n`nDistribution of resources being excluded is as follows:"+"`r`n"+[Constants]::SingleDashLine

                    $printMessage += "`r`nNumber of resources excluded due to excluding resource type '$ExcludedType': $(($ExcludedTypeResources | Measure-Object).Count | Out-String)"

                    $printMessage += "`r`nNumber of resources excluded explicitly: $(($ExplicitlyExcludedResource| Measure-Object).Count|Out-String)"

                    $printMessage += "`r`n"+[Constants]::SingleDashLine +"`r`n"+[Constants]::DoubleDashLine+"`r`nFollowing are the list of resource groups and resources being excluded" 

                    $printMessage += "`r`n"+[Constants]::SingleDashLine+"`r`nResource groups excluded:"

                    $detailedList += "`r`n-------------------------"

                    $detailedList += "`r`nResources excluded:"

                    $detailedList += "`r`n-------------------------"

                    if(($ExcludedResources | Measure-Object).Count -gt 0)

                    {

                        $detailedList += "`r`n$($ExcludedResources| Sort-Object -Property "ResourceGroupName"|Select-Object -Property ResourceName,ResourceGroupName -ExpandProperty ResourceTypeMapping| Select-Object  -Property ResourceName,ResourceGroupName,ResourceTypeName,ResourceType|Format-Table | Out-String)"

                    }

                    else 

                    {

                        $detailedList += "`r`n N/A"                        

                    }

                    $printMessage += $detailedList

                    Add-Content -Value $printMessage -Path $filePath 

                }

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

    }

    [void] WriteBaselineConfigurationsToFile([SVTEventContext[]] $arguments){

        if ([string]::IsNullOrEmpty($this.FolderPath)) {

            return;

        }

        $passedControls = @{Passed = @()}

        $fixedControls = @{Fixed = @()}

        $erroredControls = @{Error = @()}

        $failedControls = @{Failed =@()}

        $arguments | foreach{

            $item = $_;

            if ($item -and $item.ControlResults){

                $control = [PSCustomObject]@{

                    'Control' = $item.ControlItem.ControlID

                    'ResourceName' = $item.ResourceContext.ResourceName

                }

                if($item.ControlResults[0].VerificationResult -eq "Fixed"){                    

                    $fixedControls.Fixed+=$control

                }

                elseif($item.ControlResults[0].VerificationResult -eq "Passed"){                    

                    $passedControls.Passed+=$control

                }

                elseif($item.ControlResults[0].VerificationResult -eq "Failed"){

                    $failedControls.Failed+=$control

                }

                else{

                    $erroredControls.Error+=$control

                }

            }

        }

        $filePath = $this.FolderPath+"\BaselineConfigurationReport.json"

        $combinedJSON = $null

        if($passedControls.Passed){

            $combinedJSON = $passedControls

        }

        if($fixedControls.Fixed){

            $combinedJSON+=$fixedControls

        }

        if($erroredControls.Error){

            $combinedJSON+=$erroredControls

        }

        if($failedControls.Failed){

            $combinedJSON+=$failedControls

        }

        if($combinedJSON){

            Add-Content $filePath -Value ($combinedJSON | ConvertTo-JSON)

        }

    }

   [void] WriteToCSV([SVTEventContext[]] $arguments)

    {

        if ([string]::IsNullOrEmpty($this.FilePath)) {

            return;

        }

        [CsvOutputItem[]] $csvItems = @();

        $anyAttestedControls = $null -ne ($arguments | 

            Where-Object { 

                $null -ne ($_.ControlResults | Where-Object { $_.AttestationStatus -ne [AttestationStatus]::None } | Select-Object -First 1) 

            } | Select-Object -First 1);

        #$anyFixableControls = $null -ne ($arguments | Where-Object { $_.ControlItem.FixControl } | Select-Object -First 1);

        #Validate if preview baseline control flag is passed to mark csv

        #Commented below code as don't have any preview naseline controls

        #$UsePreviewBaselineControls = $false

        #if($this.InvocationContext.BoundParameters['UsePreviewBaselineControls'] -eq $True)

        #{

        #    [PartialScanManager] $partialScanMngr = [PartialScanManager]::GetInstance();

        #    $previewBaselineControlsDetails = $partialScanMngr.GetPreviewBaselineControlDetails()

        #    if($previewBaselineControlsDetails)

        #    {

        #        $UsePreviewBaselineControls =$True

        #    }

        #}

        $arguments | ForEach-Object {

            $item = $_

            if ($item -and $item.ControlResults) {

                $item.ControlResults | ForEach-Object{

                    $csvItem = [CsvOutputItem]@{

                        ControlID = $item.ControlItem.ControlID;

                        ControlSeverity = $item.ControlItem.ControlSeverity;

                        Description = $item.ControlItem.Description;

                        FeatureName = $item.FeatureName;

                        ChildResourceName = $_.ChildResourceName;

                        Recommendation = $item.ControlItem.Recommendation;    

                        Rationale = $item.ControlItem.Rationale;

                        AdditionalInfo = $_.AdditionalInfoInCSV;

                    };

                    if($_.VerificationResult -ne [VerificationResult]::NotScanned)

                    {

                        $csvItem.Status = $_.VerificationResult.ToString();

                    }

                    if($this.InvocationContext.BoundParameters['IncludeUserComments'] -eq $True)

                    {

                      $csvItem.UserComments=$_.UserComments;    

                    }

                    <#if($anyFixableControls)

                    {

                    if($item.ControlItem.FixControl)

                    {

                        $csvItem.SupportsAutoFix = "Yes";

                    }

                    else

                    {

                        $csvItem.SupportsAutoFix = "No";

                    }

                    }#>

                    if($item.ControlItem.IsBaselineControl)

                    {

                        $csvItem.IsBaselineControl = "Yes";

                    }

                    else

                    {

                        $csvItem.IsBaselineControl = "No";

                    }

                    #Commented below code as don't have any preview baseline controls

                    #if($item.ControlItem.IsPreviewBaselineControl)

                    #{

                    #    $csvItem.IsPreviewBaselineControl = "Yes";

                    #}

                    #else

                    #{

                    #    $csvItem.IsPreviewBaselineControl = "No";

                    #}

                    if($anyAttestedControls)

                    {

                        $csvItem.ActualStatus = $_.ActualVerificationResult.ToString();

                    }

                    if($item.IsResource())

                    {

                        $csvItem.ResourceName = $item.ResourceContext.ResourceName;

                        $csvItem.ResourceGroupName = $item.ResourceContext.ResourceGroupName;

                        try {

                            if($item.ResourceContext.ResourceDetails -ne $null -and ([Helpers]::CheckMember($item.ResourceContext.ResourceDetails,"ResourceLink")))

                            {

                                $csvItem.ResourceLink = $item.ResourceContext.ResourceDetails.ResourceLink;                            

                            }

                        }

                        catch {

                            $_

                        }

                        $csvItem.ResourceId = $item.ResourceContext.ResourceId;

                        $csvItem.DetailedLogFile = "/$([Helpers]::SanitizeFolderName($item.ResourceContext.ResourceGroupName))/$($item.FeatureName).LOG";

                    }

                    else

                    {

                        $csvItem.ResourceId = $item.OrganizationContext.scope;

                        $csvItem.DetailedLogFile = "/$([Helpers]::SanitizeFolderName($item.OrganizationContext.OrganizationName))/$($item.FeatureName).LOG"

                    }

                    if($_.AttestationStatus -ne [AttestationStatus]::None)

                    {

                        $csvItem.AttestedSubStatus = $_.AttestationStatus.ToString();

                        if($null -ne $_.StateManagement -and $null -ne $_.StateManagement.AttestedStateData)

                        {

                            $csvItem.AttesterJustification = $_.StateManagement.AttestedStateData.Justification

                            $csvItem.AttestedBy =  $_.StateManagement.AttestedStateData.AttestedBy

                            if(![string]::IsNullOrWhiteSpace($_.StateManagement.AttestedStateData.ExpiryDate))

                            {

                                $csvItem.AttestationExpiryDate =  $_.StateManagement.AttestedStateData.ExpiryDate

                            }

                            if(![string]::IsNullOrWhiteSpace($_.StateManagement.AttestedStateData.AttestedDate))

                            {

                                $csvItem.AttestedOn=  $_.StateManagement.AttestedStateData.AttestedDate

                            }

                        }

                    }

                    <#if($_.IsControlInGrace -eq $true)

                    {

                        $csvItem.IsControlInGrace = "Yes"

                    }

                    else 

                    {

                        $csvItem.IsControlInGrace = "No"

                    }#>                    

                    $csvItems += $csvItem;

                }                                

            }

        } 

        if ($csvItems.Count -gt 0) {

            # Remove Null properties

            $nonNullProps = @();

            [CsvOutputItem].GetMembers() | Where-Object { $_.MemberType -eq [System.Reflection.MemberTypes]::Property } | ForEach-Object {

                $propName = $_.Name;

                if(($csvItems | Where-object { -not [string]::IsNullOrWhiteSpace($_.$propName) } | Measure-object).Count -ne 0)

                {

                    $nonNullProps += $propName;

                }

            };

            if($this.InvocationContext.BoundParameters['IncludeUserComments'] -eq $true -and -not ([Helpers]::CheckMember($nonNullProps, "UserComments")))

            {

              $nonNullProps += "UserComments";

            }

            #larg file was stucking becaes all are dumping in one slot

            #$csvItems | Select-Object -Property $nonNullProps | Export-Csv $this.FilePath -NoTypeInformation

            ($csvItems | Select-Object -Property $nonNullProps) | Group-Object -Property FeatureName | Foreach-Object {$_.Group | Export-Csv -Path $this.FilePath -append -NoTypeInformation}

        }

    }    

    [void] WriteNonScannedResourcesInfo(){

        $resources = @();

        $env:nonScannedResources -split '\s+' | foreach{

            $nonScannedResource = [PSCustomObject]@{

                "Resource Link" = $_

            }

            $resources+=$nonScannedResource

        }

        $filePath = $this.FolderPath+"\ResourcesNotScanned.json"

        Add-Content $filePath -Value ($resources | ConvertTo-JSON | % { [System.Text.RegularExpressions.Regex]::Unescape($_) })

        #clear up this variable for later scans, as we do not need it from here

        $env:nonScannedResources=@()

    }

}

# SIG # Begin signature block

# MIInpQYJKoZIhvcNAQcCoIInljCCJ5ICAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDIJz8SDnuE3Bck

# p1U4X/xBCypwkazT7+LY/okXbi29lqCCDYUwggYDMIID66ADAgECAhMzAAADTU6R

# phoosHiPAAAAAANNMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjMwMzE2MTg0MzI4WhcNMjQwMzE0MTg0MzI4WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDUKPcKGVa6cboGQU03ONbUKyl4WpH6Q2Xo9cP3RhXTOa6C6THltd2RfnjlUQG+

# Mwoy93iGmGKEMF/jyO2XdiwMP427j90C/PMY/d5vY31sx+udtbif7GCJ7jJ1vLzd

# j28zV4r0FGG6yEv+tUNelTIsFmmSb0FUiJtU4r5sfCThvg8dI/F9Hh6xMZoVti+k

# bVla+hlG8bf4s00VTw4uAZhjGTFCYFRytKJ3/mteg2qnwvHDOgV7QSdV5dWdd0+x

# zcuG0qgd3oCCAjH8ZmjmowkHUe4dUmbcZfXsgWlOfc6DG7JS+DeJak1DvabamYqH

# g1AUeZ0+skpkwrKwXTFwBRltAgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUId2Img2Sp05U6XI04jli2KohL+8w

# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwMDUxNzAfBgNVHSMEGDAW

# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw

# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx

# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB

# ACMET8WuzLrDwexuTUZe9v2xrW8WGUPRQVmyJ1b/BzKYBZ5aU4Qvh5LzZe9jOExD

# YUlKb/Y73lqIIfUcEO/6W3b+7t1P9m9M1xPrZv5cfnSCguooPDq4rQe/iCdNDwHT

# 6XYW6yetxTJMOo4tUDbSS0YiZr7Mab2wkjgNFa0jRFheS9daTS1oJ/z5bNlGinxq

# 2v8azSP/GcH/t8eTrHQfcax3WbPELoGHIbryrSUaOCphsnCNUqUN5FbEMlat5MuY

# 94rGMJnq1IEd6S8ngK6C8E9SWpGEO3NDa0NlAViorpGfI0NYIbdynyOB846aWAjN

# fgThIcdzdWFvAl/6ktWXLETn8u/lYQyWGmul3yz+w06puIPD9p4KPiWBkCesKDHv

# XLrT3BbLZ8dKqSOV8DtzLFAfc9qAsNiG8EoathluJBsbyFbpebadKlErFidAX8KE

# usk8htHqiSkNxydamL/tKfx3V/vDAoQE59ysv4r3pE+zdyfMairvkFNNw7cPn1kH

# Gcww9dFSY2QwAxhMzmoM0G+M+YvBnBu5wjfxNrMRilRbxM6Cj9hKFh0YTwba6M7z

# ntHHpX3d+nabjFm/TnMRROOgIXJzYbzKKaO2g1kWeyG2QtvIR147zlrbQD4X10Ab

# rRg9CpwW7xYxywezj+iNAc+QmFzR94dzJkEPUSCJPsTFMIIHejCCBWKgAwIBAgIK

# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm

# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw

# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD

# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG

# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la

# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc

# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D

# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+

# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk

# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6

# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd

# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL

# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd

# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3

# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS

# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI

# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL

# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD

# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv

# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h

# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA

# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn

# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7

# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b

# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/

# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy

# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp

# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi

# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb

# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS

# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL

# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX

# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGXYwghlyAgEBMIGVMH4x

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p

# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAANNTpGmGiiweI8AAAAA

# A00wDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw

# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEICiH

# vsn0x91gWe1J1qS9HMT8r8dKMKKwdo85tnc6cd63MEIGCisGAQQBgjcCAQwxNDAy

# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20wDQYJKoZIhvcNAQEBBQAEggEAlVomq0COjGJcJkBY54mzZIRkOgzayr54yYzm

# fRiJl5SWGR3pjdYq549QkFL6soDeUffHIzenqKr7ougGX/NRBBSp5u9ny9GYsaAe

# JWVo+XAljaj07d/yQwdWRzSZkAPV5nIgegjsiZsNPLDAxlC/O7BL3maLLMIsXydc

# Axbmxi4VUUc+4dg8ihdwMxb7EiJFt5+UsiVApm0x426e0IU5RVAhYzsSMqFOIckm

# VdBx1+TyR/YgshyTVHOs4fV+VAilaPOLf153hbTo4IwmXaOQEzBGl87OuRuG50rF

# L9sWDeYPvydBTwGbGVUue3F6zKoit43Ktn/gtFeVviiGaU2eW6GCFwAwghb8Bgor

# BgEEAYI3AwMBMYIW7DCCFugGCSqGSIb3DQEHAqCCFtkwghbVAgEDMQ8wDQYJYIZI

# AWUDBAIBBQAwggFRBgsqhkiG9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGE

# WQoDATAxMA0GCWCGSAFlAwQCAQUABCCoiSKvhRM4DkvaO1cwwRjdiPf0Ma+Q/rMp

# tcOH7TzUKgIGZK/5JsHBGBMyMDIzMDcxODEyMDUzMS4yNDNaMASAAgH0oIHQpIHN

# MIHKMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL

# ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMSYwJAYDVQQLEx1UaGFsZXMg

# VFNTIEVTTjpENkJELUUzRTctMTY4NTElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUt

# U3RhbXAgU2VydmljZaCCEVcwggcMMIIE9KADAgECAhMzAAABx/sAoEpb8ifcAAEA

# AAHHMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo

# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y

# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw

# MB4XDTIyMTEwNDE5MDEzNVoXDTI0MDIwMjE5MDEzNVowgcoxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVy

# aWNhIE9wZXJhdGlvbnMxJjAkBgNVBAsTHVRoYWxlcyBUU1MgRVNOOkQ2QkQtRTNF

# Ny0xNjg1MSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC

# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr0LcVtnatNFMBrQTtG9P8ISA

# PyyGmxNfhEzaOVlt088pBUFAIasmN/eOijE6Ucaf3c2bVnN/02ih0smSqYkm5P3Z

# wU7ZW202b6cPDJjXcrjJj0qfnuccBtE3WU0vZ8CiQD7qrKxeF8YBNcS+PVtvsqhd

# 5YW6AwhWqhjw1mYuLetF5b6aPif/3RzlyqG3SV7QPiSJends7gG435Rsy1HJ4Xnq

# ztOJR41I0j3EQ05JMF5QNRi7kT6vXTT+MHVj27FVQ7bef/U+2EAbFj2X2AOWbvgl

# YaYnM3m/I/OWDHUgGw8KIdsDh3W1eusnF2D7oenGgtahs+S1G5Uolf5ESg/9Z+38

# rhQwLgokY5k6p8k5arYWtszdJK6JiIRl843H74k7+QqlT2LbAQPq8ivQv0gdclW2

# aJun1KrW+v52R3vAHCOtbUmxvD1eNGHqGqLagtlq9UFXKXuXnqXJqruCYmfwdFMD

# 0UP6ii1lFdeKL87PdjdAwyCiVcCEoLnvDzyvjNjxtkTdz6R4yF1N/X4PSQH4Flgs

# lyBIXggaSlPtvPuxAtuac/ITj4k0IRShGiYLBM2Dw6oesLOoxe07OUPO+qXXOcJM

# VHhE0MlhhnxfN2B1JWFPWwQ6ooWiqAOQDqzcDx+79shxA1Cx0K70eOBplMog27gY

# oLpBv7nRz4tHqoTyvA0CAwEAAaOCATYwggEyMB0GA1UdDgQWBBQFUNLdHD7BAF/V

# U/X/eEHLiUSSIDAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV

# HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny

# bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI

# KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy

# MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMIMA0G

# CSqGSIb3DQEBCwUAA4ICAQDQy5c8ogP0y8xAsLVca07wWy1mT+nqYgAFnz2972kN

# O+KJ7AE4f+SVbvOnkeeuOPq3xc+6TS8g3FuKKYEwYqvnRHxX58tjlscZsZeKnu7f

# GNUlpNT9bOQFHWALURuoXp8TLHhxj3PEq9jzFYBP2YNMLol70ojY1qpze3nMMJfp

# durdBBpaOLlJmRNTLhxd+RJGJQbY1XAcx6p/FigwqBasSDUxp+0yFPEBB9uBE3KI

# LAtq6fczGp4EMeon6YmkyCGAtXMKDFQQgdP/ITe7VghAVbPTVlP3hY1dFgc+t8YK

# 2obFSFVKslkASATDHulCMht+WrIsukclEUP9DaMmpq7S0RLODMicI6PtqqGOhdna

# RltA0d+Wf+0tPt9SUVtrPJyO7WMPKbykCRXzmHK06zr0kn1YiUYNXCsOgaHF5ImO

# 2ZwQ54UE1I55jjUdldyjy/UPJgxRm9NyXeO7adYr8K8f6Q2nPF0vWqFG7ewwaAl5

# ClKerzshfhB8zujVR0d1Ra7Z01lnXYhWuPqVZayFl7JHr6i6huhpU6BQ6/VgY0cB

# iksX4mNM+ISY81T1RYt7fWATNu/zkjINczipzbfg5S+3fCAo8gVB6+6A5L0vBg39

# dsFITv6MWJuQ8ZZy7fwlFBZE4d5IFbRudakNwKGdyLGM2otaNq7wm3ku7x41UGAm

# kDCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQEL

# BQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNV

# BAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4X

# DTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzAR

# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p

# Y3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3Rh

# bXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM

# 57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm

# 95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzB

# RMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBb

# fowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCO

# Mcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYw

# XE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW

# /aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/w

# EPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPK

# Z6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2

# BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfH

# CBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYB

# BAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8v

# BO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYM

# KwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0

# LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEF

# BQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD

# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBW

# BgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny

# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUH

# AQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp

# L2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsF

# AAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518Jx

# Nj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+

# iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2

# pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefw

# C2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7

# T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFO

# Ry3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhL

# mm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3L

# wUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5

# m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE

# 0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggLOMIICNwIB

# ATCB+KGB0KSBzTCByjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEmMCQGA1UE

# CxMdVGhhbGVzIFRTUyBFU046RDZCRC1FM0U3LTE2ODUxJTAjBgNVBAMTHE1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVAOIASP0JSbv5

# R23wxciQivHyckYooIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh

# c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD

# b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw

# MTAwDQYJKoZIhvcNAQEFBQACBQDoYGWzMCIYDzIwMjMwNzE4MDkxMzIzWhgPMjAy

# MzA3MTkwOTEzMjNaMHcwPQYKKwYBBAGEWQoEATEvMC0wCgIFAOhgZbMCAQAwCgIB

# AAICIGQCAf8wBwIBAAICEk4wCgIFAOhhtzMCAQAwNgYKKwYBBAGEWQoEAjEoMCYw

# DAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0B

# AQUFAAOBgQABOBP+iyjiMrlRKZFYCg5Tv9ngQSFVWuO4+w6ftTb/SG333l0PDC18

# +aYUBSQTSpx0+HfSxC174jqhj1rbSqmT+za9z1CGre2MUb5zSBNP/ZX87uybDaMh

# ZPuy968GHoGoUS+CG4L3mh0Ua6XhU6MOjgHAqHUur8bc+wDBRUj99zGCBA0wggQJ

# AgEBMIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYD

# VQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAk

# BgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAABx/sAoEpb

# 8ifcAAEAAAHHMA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZI

# hvcNAQkQAQQwLwYJKoZIhvcNAQkEMSIEIKxR3wP5EVKvOYO0nwipZR54GQTGzYCW

# V5aMsDGB9z8sMIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQgR+fl2+JSskUL

# OeVYLbeMgk7HdIbREmAsjwtcy6MJkskwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzET

# MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV

# TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T

# dGFtcCBQQ0EgMjAxMAITMwAAAcf7AKBKW/In3AABAAABxzAiBCB2aRqRlw/wXzew

# LppjRX0x9aWCCGCkI8sq51xNZFStpDANBgkqhkiG9w0BAQsFAASCAgBD2Y9ylbqy

# 3/OkTHd0J1jmZnwFS42xQr6Bkni1EJoY2x/VnYMTOTnV6bRHJI2VvczVg5if6/ke

# po5Djn/Qo+dVYwQWLxXP49tWZXZygILt8BGpCPuljfAtXRsMdJbFjiLLVAbRCClF

# 8zo0JZnW2zXQ4VKNwVev8Cljc5qlkpKocGLE4JT/Lel5vlAUsyfjvYXOfgjliG/t

# tXl7N9hGLvBne21t+D1GkFErkCTQBENTwMoEGnkC4AmiraR7Hrv8aJDS1rTumB2X

# q9LuCI7BLlhoxf8QzZXq8QZxueQmA7PbXRObJEn0azevQJkrtZw0CYlygeMerypS

# Tckd44u7E+3XR3WpWNjQDyB2PTClGc0KAcKT1DQZwTlttBGJ+5R86bvgKFU8DRxY

# pLzQMSZ7X/sRJeiuIKAKhN16RK0Fna5n8EOqr1ZNhEnumPRmDPHN+fBEs8o3z1nC

# qs3g2G22QgJIW0uwQ+zlbI9653euy2KMfmXAHB9H7kpT/ws636SQdWqR9RzEYPN4

# NAr3WduCWsCsElQwqHS0cDz3emoAa6ru1YZuHQ1s2Uew8+GvLVCd75QhRYQiiDDb

# tWn1zyy5sGHF4JKcbfQiua9ZW/LPeCcDk/o1XXircXOb0LahsIhGVSAfaeycrirq

# hlN4uBMBkkf6CcPQkrhdbJ1+ToluJGxrbw==

# SIG # End signature block