AzSKPreview.ADO

1.20.0

Framework/Listeners/UserReports/WriteSummaryFile.ps1

                                Set-StrictMode -Version Latest 

class WriteSummaryFile: FileOutputBase

{   

    hidden static [WriteSummaryFile] $Instance = $null;

    static [WriteSummaryFile] GetInstance()

    {

        if ( $null -eq  [WriteSummaryFile]::Instance)

        {

            [WriteSummaryFile]::Instance = [WriteSummaryFile]::new();

        }

        return [WriteSummaryFile]::Instance

    }

    [void] RegisterEvents()

    {

        $this.UnregisterEvents();       

        $this.RegisterEvent([AzSKRootEvent]::GenerateRunIdentifier, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $currentInstance.SetRunIdentifier([AzSKRootEventArgument] ($Event.SourceArgs | Select-Object -First 1));            

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

        $this.RegisterEvent([SVTEvent]::CommandStarted, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $currentInstance.SetFilePath($Event.SourceArgs.OrganizationContext, ("SecurityReport-" + $currentInstance.RunIdentifier + ".csv"));

                [FileOutputBase]::CSVFilePath = $currentInstance.FilePath

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

        $this.RegisterEvent([SVTEvent]::CommandCompleted, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            if(($Event.SourceArgs.ControlResults|Where-Object{$_.VerificationResult -ne[VerificationResult]::NotScanned}|Measure-Object).Count -gt 0)

            {

                $currentInstance.SetFilePath($Event.SourceArgs[0].OrganizationContext, ("SecurityReport-" + $currentInstance.RunIdentifier + ".csv"));

                #in case check owner access has been used with normal GADS and not control fix, generate a list of non scanned resources

                if($currentInstance.InvocationContext.BoundParameters["CheckOwnerAccess"] -and $null -ne $env:nonScannedResources){

                    $currentInstance.WriteNonScannedResourcesInfo();

                }

            }

            #in case of control fix, csv will have been already generated due to upc, need to generate list of non scanned resources

            elseif($currentInstance.InvocationContext.BoundParameters["CheckOwnerAccess"] -and $currentInstance.InvocationContext.BoundParameters["PrepareForControlFix"] -and $null -ne $env:nonScannedResources){

                $currentInstance.WriteNonScannedResourcesInfo();

            }

            else

            {

                # While running GAI -InfoType AttestationInfo, no controls are evaluated. So the value of VerificationResult is by default NotScanned for all controls.

                # In that case the csv file should be renamed to AttestationReport.

                $currentInstance.SetFilePath($Event.SourceArgs[0].OrganizationContext, ("AttestationReport-" + $currentInstance.RunIdentifier + ".csv"));

            }

            # Export CSV Report

            if(-not [PartialScanManager]::IsCsvUpdatedAtCheckpoint)

            {

                try 

                {

                    $currentInstance.WriteToCSV($Event.SourceArgs);

                    if($currentInstance.InvocationContext.MyCommand.Name -eq "Set-AzSKADOBaselineConfigurations"){

                        $currentInstance.WriteBaselineConfigurationsToFile($Event.SourceArgs)

                    }

                    $currentInstance.FilePath = "";

                }

                catch 

                {

                    $currentInstance.PublishException($_);

                }

            }

        });

        $this.RegisterEvent([AzSKRootEvent]::UnsupportedResources, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $message = $Event.SourceArgs.Messages | Select-Object -First 1

                if($message -and $message.DataObject)

                {

                    $filePath = $currentInstance.CalculateFilePath($Event.SourceArgs.OrganizationContext, [FileOutputBase]::ETCFolderPath, ("UnsupportedResources-" + $currentInstance.RunIdentifier + ".csv.LOG"));

                    $message.DataObject | Export-Csv $filePath -NoTypeInformation

                }

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

        $this.RegisterEvent([AzSKRootEvent]::WriteCSV, {

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $fileName = 'Control Details';

                $folderPath = '';

                $fileExtension = 'csv';

                $message = $Event.SourceArgs.Messages | Select-Object -First 1

                if($message -and $message.DataObject)

                {

                    if(-not [string]::IsNullOrEmpty($message.DataObject.FileName))

                    {

                        $fileName = $message.DataObject.FileName

                    }

                    if(-not [string]::IsNullOrEmpty($message.DataObject.FolderPath))

                    {

                        $folderPath = $message.DataObject.FolderPath

                    }

                    if(-not [string]::IsNullOrEmpty($message.DataObject.FileExtension))

                    {

                        $fileExtension = $message.DataObject.FileExtension

                    }

                    $filePath = $currentInstance.CalculateFilePath($Event.SourceArgs.OrganizationContext, $folderPath, ($fileName + "." + $fileExtension));

                    $message.DataObject.MessageData | Export-Csv $filePath -NoTypeInformation

                }

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

        # Event for Writing File Detailed Log

        $this.RegisterEvent([AzSKRootEvent]::WriteExcludedResources,{

            $currentInstance = [WriteSummaryFile]::GetInstance();

            try 

            {

                $message = $Event.SourceArgs.Messages | Select-Object -First 1

                $printMessage="";

                if($message -and $message.DataObject)

                {

                    $filePath = $currentInstance.CalculateFilePath($Event.SourceArgs.OrganizationContext, [FileOutputBase]::ETCFolderPath, ("ExcludedResources-" + $currentInstance.RunIdentifier + ".txt.LOG"));

                    $ExcludedType = $message.DataObject.ExcludedResourceType

                    if($ExcludedType -eq 'All')

                    {

                        $ExcludedType = 'None'

                    }

                    $ExcludeResourceName = $message.DataObject.ExcludeResourceNames

                    $ExcludedResources = $message.DataObject.ExcludedResources  

                    $ExcludedTypeResources = $ExcludedResources | Select-Object -ExpandProperty ResourceTypeMapping |Where-Object {$_.ResourceTypeName -in $ExcludedType}

                    $ExplicitlyExcludedResource =$ExcludedResources| Where-Object {$_.ResourceName -in $ExcludeResourceName}

                    $printMessage += "`r`nNumber of resources excluded: $(($ExcludedResources | Measure-Object).Count | Out-String)"

                    $printMessage += "`r`n`nDistribution of resources being excluded is as follows:"+"`r`n"+[Constants]::SingleDashLine

                    $printMessage += "`r`nNumber of resources excluded due to excluding resource type '$ExcludedType': $(($ExcludedTypeResources | Measure-Object).Count | Out-String)"

                    $printMessage += "`r`nNumber of resources excluded explicitly: $(($ExplicitlyExcludedResource| Measure-Object).Count|Out-String)"

                    $printMessage += "`r`n"+[Constants]::SingleDashLine +"`r`n"+[Constants]::DoubleDashLine+"`r`nFollowing are the list of resource groups and resources being excluded" 

                    $printMessage += "`r`n"+[Constants]::SingleDashLine+"`r`nResource groups excluded:"

                    $detailedList += "`r`n-------------------------"

                    $detailedList += "`r`nResources excluded:"

                    $detailedList += "`r`n-------------------------"

                    if(($ExcludedResources | Measure-Object).Count -gt 0)

                    {

                        $detailedList += "`r`n$($ExcludedResources| Sort-Object -Property "ResourceGroupName"|Select-Object -Property ResourceName,ResourceGroupName -ExpandProperty ResourceTypeMapping| Select-Object  -Property ResourceName,ResourceGroupName,ResourceTypeName,ResourceType|Format-Table | Out-String)"

                    }

                    else 

                    {

                        $detailedList += "`r`n N/A"                        

                    }

                    $printMessage += $detailedList

                    Add-Content -Value $printMessage -Path $filePath 

                }

            }

            catch 

            {

                $currentInstance.PublishException($_);

            }

        });

    }

    [void] WriteBaselineConfigurationsToFile([SVTEventContext[]] $arguments){

        if ([string]::IsNullOrEmpty($this.FolderPath)) {

            return;

        }

        $passedControls = @{Passed = @()}

        $fixedControls = @{Fixed = @()}

        $erroredControls = @{Error = @()}

        $failedControls = @{Failed =@()}

        $arguments | foreach{

            $item = $_;

            if ($item -and $item.ControlResults){

                $control = [PSCustomObject]@{

                    'Control' = $item.ControlItem.ControlID

                    'ResourceName' = $item.ResourceContext.ResourceName

                }

                if($item.ControlResults[0].VerificationResult -eq "Fixed"){                    

                    $fixedControls.Fixed+=$control

                }

                elseif($item.ControlResults[0].VerificationResult -eq "Passed"){                    

                    $passedControls.Passed+=$control

                }

                elseif($item.ControlResults[0].VerificationResult -eq "Failed"){

                    $failedControls.Failed+=$control

                }

                else{

                    $erroredControls.Error+=$control

                }

            }

        }

        $filePath = $this.FolderPath+"\BaselineConfigurationReport.json"

        $combinedJSON = $null

        if($passedControls.Passed){

            $combinedJSON = $passedControls

        }

        if($fixedControls.Fixed){

            $combinedJSON+=$fixedControls

        }

        if($erroredControls.Error){

            $combinedJSON+=$erroredControls

        }

        if($failedControls.Failed){

            $combinedJSON+=$failedControls

        }

        if($combinedJSON){

            Add-Content $filePath -Value ($combinedJSON | ConvertTo-JSON)

        }

    }

   [void] WriteToCSV([SVTEventContext[]] $arguments)

    {

        if ([string]::IsNullOrEmpty($this.FilePath)) {

            return;

        }

        [CsvOutputItem[]] $csvItems = @();

        $anyAttestedControls = $null -ne ($arguments | 

            Where-Object { 

                $null -ne ($_.ControlResults | Where-Object { $_.AttestationStatus -ne [AttestationStatus]::None } | Select-Object -First 1) 

            } | Select-Object -First 1);

        #$anyFixableControls = $null -ne ($arguments | Where-Object { $_.ControlItem.FixControl } | Select-Object -First 1);

        #Validate if preview baseline control flag is passed to mark csv

        #Commented below code as don't have any preview naseline controls

        #$UsePreviewBaselineControls = $false

        #if($this.InvocationContext.BoundParameters['UsePreviewBaselineControls'] -eq $True)

        #{

        #    [PartialScanManager] $partialScanMngr = [PartialScanManager]::GetInstance();

        #    $previewBaselineControlsDetails = $partialScanMngr.GetPreviewBaselineControlDetails()

        #    if($previewBaselineControlsDetails)

        #    {

        #        $UsePreviewBaselineControls =$True

        #    }

        #}

        $arguments | ForEach-Object {

            $item = $_

            if ($item -and $item.ControlResults) {

                $item.ControlResults | ForEach-Object{

                    $csvItem = [CsvOutputItem]@{

                        ControlID = $item.ControlItem.ControlID;

                        ControlSeverity = $item.ControlItem.ControlSeverity;

                        Description = $item.ControlItem.Description;

                        FeatureName = $item.FeatureName;

                        ChildResourceName = $_.ChildResourceName;

                        Recommendation = $item.ControlItem.Recommendation;    

                        Rationale = $item.ControlItem.Rationale;

                        AdditionalInfo = $_.AdditionalInfoInCSV;

                    };

                    if($_.VerificationResult -ne [VerificationResult]::NotScanned)

                    {

                        $csvItem.Status = $_.VerificationResult.ToString();

                    }

                    if($this.InvocationContext.BoundParameters['IncludeUserComments'] -eq $True)

                    {

                      $csvItem.UserComments=$_.UserComments;    

                    }

                    <#if($anyFixableControls)

                    {

                    if($item.ControlItem.FixControl)

                    {

                        $csvItem.SupportsAutoFix = "Yes";

                    }

                    else

                    {

                        $csvItem.SupportsAutoFix = "No";

                    }

                    }#>

                    if($item.ControlItem.IsBaselineControl)

                    {

                        $csvItem.IsBaselineControl = "Yes";

                    }

                    else

                    {

                        $csvItem.IsBaselineControl = "No";

                    }

                    #Commented below code as don't have any preview baseline controls

                    #if($item.ControlItem.IsPreviewBaselineControl)

                    #{

                    #    $csvItem.IsPreviewBaselineControl = "Yes";

                    #}

                    #else

                    #{

                    #    $csvItem.IsPreviewBaselineControl = "No";

                    #}

                    if($anyAttestedControls)

                    {

                        $csvItem.ActualStatus = $_.ActualVerificationResult.ToString();

                    }

                    if($item.IsResource())

                    {

                        $csvItem.ResourceName = $item.ResourceContext.ResourceName;

                        $csvItem.ResourceGroupName = $item.ResourceContext.ResourceGroupName;

                        try {

                            if($item.ResourceContext.ResourceDetails -ne $null -and ([Helpers]::CheckMember($item.ResourceContext.ResourceDetails,"ResourceLink")))

                            {

                                $csvItem.ResourceLink = $item.ResourceContext.ResourceDetails.ResourceLink;                            

                            }

                        }

                        catch {

                            $_

                        }

                        $csvItem.ResourceId = $item.ResourceContext.ResourceId;

                        $csvItem.DetailedLogFile = "/$([Helpers]::SanitizeFolderName($item.ResourceContext.ResourceGroupName))/$($item.FeatureName).LOG";

                    }

                    else

                    {

                        $csvItem.ResourceId = $item.OrganizationContext.scope;

                        $csvItem.DetailedLogFile = "/$([Helpers]::SanitizeFolderName($item.OrganizationContext.OrganizationName))/$($item.FeatureName).LOG"

                    }

                    if($_.AttestationStatus -ne [AttestationStatus]::None)

                    {

                        $csvItem.AttestedSubStatus = $_.AttestationStatus.ToString();

                        if($null -ne $_.StateManagement -and $null -ne $_.StateManagement.AttestedStateData)

                        {

                            $csvItem.AttesterJustification = $_.StateManagement.AttestedStateData.Justification

                            $csvItem.AttestedBy =  $_.StateManagement.AttestedStateData.AttestedBy

                            if(![string]::IsNullOrWhiteSpace($_.StateManagement.AttestedStateData.ExpiryDate))

                            {

                                $csvItem.AttestationExpiryDate =  $_.StateManagement.AttestedStateData.ExpiryDate

                            }

                            if(![string]::IsNullOrWhiteSpace($_.StateManagement.AttestedStateData.AttestedDate))

                            {

                                $csvItem.AttestedOn=  $_.StateManagement.AttestedStateData.AttestedDate

                            }

                        }

                    }

                    <#if($_.IsControlInGrace -eq $true)

                    {

                        $csvItem.IsControlInGrace = "Yes"

                    }

                    else 

                    {

                        $csvItem.IsControlInGrace = "No"

                    }#>                    

                    $csvItems += $csvItem;

                }                                

            }

        } 

        if ($csvItems.Count -gt 0) {

            # Remove Null properties

            $nonNullProps = @();

            [CsvOutputItem].GetMembers() | Where-Object { $_.MemberType -eq [System.Reflection.MemberTypes]::Property } | ForEach-Object {

                $propName = $_.Name;

                if(($csvItems | Where-object { -not [string]::IsNullOrWhiteSpace($_.$propName) } | Measure-object).Count -ne 0)

                {

                    $nonNullProps += $propName;

                }

            };

            if($this.InvocationContext.BoundParameters['IncludeUserComments'] -eq $true -and -not ([Helpers]::CheckMember($nonNullProps, "UserComments")))

            {

              $nonNullProps += "UserComments";

            }

            #larg file was stucking becaes all are dumping in one slot

            #$csvItems | Select-Object -Property $nonNullProps | Export-Csv $this.FilePath -NoTypeInformation

            ($csvItems | Select-Object -Property $nonNullProps) | Group-Object -Property FeatureName | Foreach-Object {$_.Group | Export-Csv -Path $this.FilePath -append -NoTypeInformation}

        }

    }    

    [void] WriteNonScannedResourcesInfo(){

        $resources = @();

        $env:nonScannedResources -split '\s+' | foreach{

            $nonScannedResource = [PSCustomObject]@{

                "Resource Link" = $_

            }

            $resources+=$nonScannedResource

        }

        $filePath = $this.FolderPath+"\ResourcesNotScanned.json"

        Add-Content $filePath -Value ($resources | ConvertTo-JSON | % { [System.Text.RegularExpressions.Regex]::Unescape($_) })

        #clear up this variable for later scans, as we do not need it from here

        $env:nonScannedResources=@()

    }

}

# SIG # Begin signature block

# MIInogYJKoZIhvcNAQcCoIInkzCCJ48CAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDIJz8SDnuE3Bck

# p1U4X/xBCypwkazT7+LY/okXbi29lqCCDYUwggYDMIID66ADAgECAhMzAAADTU6R

# phoosHiPAAAAAANNMA0GCSqGSIb3DQEBCwUAMH4xCzAJBgNVBAYTAlVTMRMwEQYD

# VQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25p

# bmcgUENBIDIwMTEwHhcNMjMwMzE2MTg0MzI4WhcNMjQwMzE0MTg0MzI4WjB0MQsw

# CQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9u

# ZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYDVQQDExVNaWNy

# b3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB

# AQDUKPcKGVa6cboGQU03ONbUKyl4WpH6Q2Xo9cP3RhXTOa6C6THltd2RfnjlUQG+

# Mwoy93iGmGKEMF/jyO2XdiwMP427j90C/PMY/d5vY31sx+udtbif7GCJ7jJ1vLzd

# j28zV4r0FGG6yEv+tUNelTIsFmmSb0FUiJtU4r5sfCThvg8dI/F9Hh6xMZoVti+k

# bVla+hlG8bf4s00VTw4uAZhjGTFCYFRytKJ3/mteg2qnwvHDOgV7QSdV5dWdd0+x

# zcuG0qgd3oCCAjH8ZmjmowkHUe4dUmbcZfXsgWlOfc6DG7JS+DeJak1DvabamYqH

# g1AUeZ0+skpkwrKwXTFwBRltAgMBAAGjggGCMIIBfjAfBgNVHSUEGDAWBgorBgEE

# AYI3TAgBBggrBgEFBQcDAzAdBgNVHQ4EFgQUId2Img2Sp05U6XI04jli2KohL+8w

# VAYDVR0RBE0wS6RJMEcxLTArBgNVBAsTJE1pY3Jvc29mdCBJcmVsYW5kIE9wZXJh

# dGlvbnMgTGltaXRlZDEWMBQGA1UEBRMNMjMwMDEyKzUwMDUxNzAfBgNVHSMEGDAW

# gBRIbmTlUAXTgqoXNzcitW2oynUClTBUBgNVHR8ETTBLMEmgR6BFhkNodHRwOi8v

# d3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2NybC9NaWNDb2RTaWdQQ0EyMDExXzIw

# MTEtMDctMDguY3JsMGEGCCsGAQUFBwEBBFUwUzBRBggrBgEFBQcwAoZFaHR0cDov

# L3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9NaWNDb2RTaWdQQ0EyMDEx

# XzIwMTEtMDctMDguY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQADggIB

# ACMET8WuzLrDwexuTUZe9v2xrW8WGUPRQVmyJ1b/BzKYBZ5aU4Qvh5LzZe9jOExD

# YUlKb/Y73lqIIfUcEO/6W3b+7t1P9m9M1xPrZv5cfnSCguooPDq4rQe/iCdNDwHT

# 6XYW6yetxTJMOo4tUDbSS0YiZr7Mab2wkjgNFa0jRFheS9daTS1oJ/z5bNlGinxq

# 2v8azSP/GcH/t8eTrHQfcax3WbPELoGHIbryrSUaOCphsnCNUqUN5FbEMlat5MuY

# 94rGMJnq1IEd6S8ngK6C8E9SWpGEO3NDa0NlAViorpGfI0NYIbdynyOB846aWAjN

# fgThIcdzdWFvAl/6ktWXLETn8u/lYQyWGmul3yz+w06puIPD9p4KPiWBkCesKDHv

# XLrT3BbLZ8dKqSOV8DtzLFAfc9qAsNiG8EoathluJBsbyFbpebadKlErFidAX8KE

# usk8htHqiSkNxydamL/tKfx3V/vDAoQE59ysv4r3pE+zdyfMairvkFNNw7cPn1kH

# Gcww9dFSY2QwAxhMzmoM0G+M+YvBnBu5wjfxNrMRilRbxM6Cj9hKFh0YTwba6M7z

# ntHHpX3d+nabjFm/TnMRROOgIXJzYbzKKaO2g1kWeyG2QtvIR147zlrbQD4X10Ab

# rRg9CpwW7xYxywezj+iNAc+QmFzR94dzJkEPUSCJPsTFMIIHejCCBWKgAwIBAgIK

# YQ6Q0gAAAAAAAzANBgkqhkiG9w0BAQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNV

# BAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jv

# c29mdCBDb3Jwb3JhdGlvbjEyMDAGA1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlm

# aWNhdGUgQXV0aG9yaXR5IDIwMTEwHhcNMTEwNzA4MjA1OTA5WhcNMjYwNzA4MjEw

# OTA5WjB+MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE

# BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSgwJgYD

# VQQDEx9NaWNyb3NvZnQgQ29kZSBTaWduaW5nIFBDQSAyMDExMIICIjANBgkqhkiG

# 9w0BAQEFAAOCAg8AMIICCgKCAgEAq/D6chAcLq3YbqqCEE00uvK2WCGfQhsqa+la

# UKq4BjgaBEm6f8MMHt03a8YS2AvwOMKZBrDIOdUBFDFC04kNeWSHfpRgJGyvnkmc

# 6Whe0t+bU7IKLMOv2akrrnoJr9eWWcpgGgXpZnboMlImEi/nqwhQz7NEt13YxC4D

# dato88tt8zpcoRb0RrrgOGSsbmQ1eKagYw8t00CT+OPeBw3VXHmlSSnnDb6gE3e+

# lD3v++MrWhAfTVYoonpy4BI6t0le2O3tQ5GD2Xuye4Yb2T6xjF3oiU+EGvKhL1nk

# kDstrjNYxbc+/jLTswM9sbKvkjh+0p2ALPVOVpEhNSXDOW5kf1O6nA+tGSOEy/S6

# A4aN91/w0FK/jJSHvMAhdCVfGCi2zCcoOCWYOUo2z3yxkq4cI6epZuxhH2rhKEmd

# X4jiJV3TIUs+UsS1Vz8kA/DRelsv1SPjcF0PUUZ3s/gA4bysAoJf28AVs70b1FVL

# 5zmhD+kjSbwYuER8ReTBw3J64HLnJN+/RpnF78IcV9uDjexNSTCnq47f7Fufr/zd

# sGbiwZeBe+3W7UvnSSmnEyimp31ngOaKYnhfsi+E11ecXL93KCjx7W3DKI8sj0A3

# T8HhhUSJxAlMxdSlQy90lfdu+HggWCwTXWCVmj5PM4TasIgX3p5O9JawvEagbJjS

# 4NaIjAsCAwEAAaOCAe0wggHpMBAGCSsGAQQBgjcVAQQDAgEAMB0GA1UdDgQWBBRI

# bmTlUAXTgqoXNzcitW2oynUClTAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTAL

# BgNVHQ8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRyLToCMZBD

# uRQFTuHqp8cx0SOJNDBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8vY3JsLm1pY3Jv

# c29mdC5jb20vcGtpL2NybC9wcm9kdWN0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3JsMF4GCCsGAQUFBwEBBFIwUDBOBggrBgEFBQcwAoZCaHR0cDovL3d3

# dy5taWNyb3NvZnQuY29tL3BraS9jZXJ0cy9NaWNSb29DZXJBdXQyMDExXzIwMTFf

# MDNfMjIuY3J0MIGfBgNVHSAEgZcwgZQwgZEGCSsGAQQBgjcuAzCBgzA/BggrBgEF

# BQcCARYzaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9kb2NzL3ByaW1h

# cnljcHMuaHRtMEAGCCsGAQUFBwICMDQeMiAdAEwAZQBnAGEAbABfAHAAbwBsAGkA

# YwB5AF8AcwB0AGEAdABlAG0AZQBuAHQALiAdMA0GCSqGSIb3DQEBCwUAA4ICAQBn

# 8oalmOBUeRou09h0ZyKbC5YR4WOSmUKWfdJ5DJDBZV8uLD74w3LRbYP+vj/oCso7

# v0epo/Np22O/IjWll11lhJB9i0ZQVdgMknzSGksc8zxCi1LQsP1r4z4HLimb5j0b

# pdS1HXeUOeLpZMlEPXh6I/MTfaaQdION9MsmAkYqwooQu6SpBQyb7Wj6aC6VoCo/

# KmtYSWMfCWluWpiW5IP0wI/zRive/DvQvTXvbiWu5a8n7dDd8w6vmSiXmE0OPQvy

# CInWH8MyGOLwxS3OW560STkKxgrCxq2u5bLZ2xWIUUVYODJxJxp/sfQn+N4sOiBp

# mLJZiWhub6e3dMNABQamASooPoI/E01mC8CzTfXhj38cbxV9Rad25UAqZaPDXVJi

# hsMdYzaXht/a8/jyFqGaJ+HNpZfQ7l1jQeNbB5yHPgZ3BtEGsXUfFL5hYbXw3MYb

# BL7fQccOKO7eZS/sl/ahXJbYANahRr1Z85elCUtIEJmAH9AAKcWxm6U/RXceNcbS

# oqKfenoi+kiVH6v7RyOA9Z74v2u3S5fi63V4GuzqN5l5GEv/1rMjaHXmr/r8i+sL

# gOppO6/8MO0ETI7f33VtY5E90Z1WTk+/gFcioXgRMiF670EKsT/7qMykXcGhiJtX

# cVZOSEXAQsmbdlsKgEhr/Xmfwb1tbWrJUnMTDXpQzTGCGXMwghlvAgEBMIGVMH4x

# CzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRt

# b25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01p

# Y3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMTECEzMAAANNTpGmGiiweI8AAAAA

# A00wDQYJYIZIAWUDBAIBBQCgga4wGQYJKoZIhvcNAQkDMQwGCisGAQQBgjcCAQQw

# HAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcNAQkEMSIEICiH

# vsn0x91gWe1J1qS9HMT8r8dKMKKwdo85tnc6cd63MEIGCisGAQQBgjcCAQwxNDAy

# oBSAEgBNAGkAYwByAG8AcwBvAGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20wDQYJKoZIhvcNAQEBBQAEggEAlVomq0COjGJcJkBY54mzZIRkOgzayr54yYzm

# fRiJl5SWGR3pjdYq549QkFL6soDeUffHIzenqKr7ougGX/NRBBSp5u9ny9GYsaAe

# JWVo+XAljaj07d/yQwdWRzSZkAPV5nIgegjsiZsNPLDAxlC/O7BL3maLLMIsXydc

# Axbmxi4VUUc+4dg8ihdwMxb7EiJFt5+UsiVApm0x426e0IU5RVAhYzsSMqFOIckm

# VdBx1+TyR/YgshyTVHOs4fV+VAilaPOLf153hbTo4IwmXaOQEzBGl87OuRuG50rF

# L9sWDeYPvydBTwGbGVUue3F6zKoit43Ktn/gtFeVviiGaU2eW6GCFv0wghb5Bgor

# BgEEAYI3AwMBMYIW6TCCFuUGCSqGSIb3DQEHAqCCFtYwghbSAgEDMQ8wDQYJYIZI

# AWUDBAIBBQAwggFRBgsqhkiG9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGE

# WQoDATAxMA0GCWCGSAFlAwQCAQUABCCoiSKvhRM4DkvaO1cwwRjdiPf0Ma+Q/rMp

# tcOH7TzUKgIGZIr6mZlHGBMyMDIzMDcwNjA3MTA1OC41MzlaMASAAgH0oIHQpIHN

# MIHKMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMH

# UmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMSUwIwYDVQQL

# ExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMSYwJAYDVQQLEx1UaGFsZXMg

# VFNTIEVTTjpERDhDLUUzMzctMkZBRTElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUt

# U3RhbXAgU2VydmljZaCCEVQwggcMMIIE9KADAgECAhMzAAABxQPNzSGh9O85AAEA

# AAHFMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNo

# aW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29y

# cG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEw

# MB4XDTIyMTEwNDE5MDEzMloXDTI0MDIwMjE5MDEzMlowgcoxCzAJBgNVBAYTAlVT

# MRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQK

# ExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVy

# aWNhIE9wZXJhdGlvbnMxJjAkBgNVBAsTHVRoYWxlcyBUU1MgRVNOOkREOEMtRTMz

# Ny0yRkFFMSUwIwYDVQQDExxNaWNyb3NvZnQgVGltZS1TdGFtcCBTZXJ2aWNlMIIC

# IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAq0hds70eX23J7pappaKXRhz+

# TT7JJ3OvVf3+N8fNpxRs5jY4hEv3BV/w5EWXbZdO4m3xj01lTI/xDkq+ytjuiPe8

# xGXsZxDntv7L1EzMd5jISqJ+eYu8kgV056mqs8dBo55xZPPPcxf5u19zn04aMQF5

# PXV/C4ZLSjFa9IFNcribdOm3lGW1rQRFa2jUsup6gv634q5UwH09WGGu0z89Rbtb

# yM55vmBgWV8ed6bZCZrcoYIjML8FRTvGlznqm6HtwZdXMwKHT3a/kLUSPiGAsrIg

# Ezz7NpBpeOsgs9TrwyWTZBNbBwyIACmQ34j+uR4et2hZk+NH49KhEJyYD2+dOIaD

# GB2EUNFSYcy1MkgtZt1eRqBB0m+YPYz7HjocPykKYNQZ7Tv+zglOffCiax1jOb0u

# 6IYC5X1Jr8AwTcsaDyu3qAhx8cFQN9DDgiVZw+URFZ8oyoDk6sIV1nx5zZLy+hNt

# akePX9S7Y8n1qWfAjoXPE6K0/dbTw87EOJL/BlJGcKoFTytr0zPg/MNJSb6f2a/w

# DkXoGCGWJiQrGTxjOP+R96/nIIG05eE1Lpky2FOdYMPB4DhW7tBdZautepTTuShm

# gn+GKER8AoA1gSSk1EC5ZX4cppVngJpblMBu8r/tChfHVdXviY6hDShHwQCmZqZe

# bgSYHnHl4urE+4K6ZC8CAwEAAaOCATYwggEyMB0GA1UdDgQWBBRU6rs4v1mxNYG/

# rtpLwrVwek0FazAfBgNVHSMEGDAWgBSfpxVdAF5iXYP05dJlpxtTNRnpcjBfBgNV

# HR8EWDBWMFSgUqBQhk5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpb3BzL2Ny

# bC9NaWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcmwwbAYI

# KwYBBQUHAQEEYDBeMFwGCCsGAQUFBzAChlBodHRwOi8vd3d3Lm1pY3Jvc29mdC5j

# b20vcGtpb3BzL2NlcnRzL01pY3Jvc29mdCUyMFRpbWUtU3RhbXAlMjBQQ0ElMjAy

# MDEwKDEpLmNydDAMBgNVHRMBAf8EAjAAMBMGA1UdJQQMMAoGCCsGAQUFBwMIMA0G

# CSqGSIb3DQEBCwUAA4ICAQCMqN58frMHOScciK+Cdnr6dK8fTsgQDeZ9bvQjCuxN

# IJZJ92+xpeKRCf3Xq47qdRykkKUnZC6dHhLwt1fhwyiy/LfdVQ9yf1hYZ/RpTS+z

# 0hnaoK+P/IDAiUNm32NXLhDBu0P4Sb/uCV4jOuNUcmJhppBQgQVhFx/57JYk1LCd

# jIee//GrcfbkQtiYob9Oa93DSjbsD1jqaicEnkclUN/mEm9ZsnCnA1+/OQDp/8Q4

# cPfH94LM4J6X0NtNBeVywvWH0wuMaOJzHgDLCeJUkFE9HE8sBDVedmj6zPJAI+7o

# zLjYqw7i4RFbiStfWZSGjwt+lLJQZRWUCcT3aHYvTo1YWDZskohWg77w9fF2QbiO

# 9DfnqoZ7QozHi7RiPpbjgkJMAhrhpeTf/at2e9+HYkKObUmgPArH1Wjivwm1d7PY

# WsarL7u5qZuk36Gb1mETS1oA2XX3+C3rgtzRohP89qZVf79lVvjmg34NtICK/pMk

# 99SButghtipFSMQdbXUnS2oeLt9cKuv1MJu+gJ83qXTNkQ2QqhxtNRvbE9QqmqJQ

# w5VW/4SZze1pPXxyOTO5yDq+iRIUubqeQzmUcCkiyNuCLHWh8OLCI5mIOC1iLtVD

# f2lw9eWropwu5SDJtT/ZwqIU1qb2U+NjkNcj1hbODBRELaTTWd91RJiUI9ncJkGg

# /jCCB3EwggVZoAMCAQICEzMAAAAVxedrngKbSZkAAAAAABUwDQYJKoZIhvcNAQEL

# BQAwgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNV

# BAMTKU1pY3Jvc29mdCBSb290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDEwMB4X

# DTIxMDkzMDE4MjIyNVoXDTMwMDkzMDE4MzIyNVowfDELMAkGA1UEBhMCVVMxEzAR

# BgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1p

# Y3Jvc29mdCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3Rh

# bXAgUENBIDIwMTAwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDk4aZM

# 57RyIQt5osvXJHm9DtWC0/3unAcH0qlsTnXIyjVX9gF/bErg4r25PhdgM/9cT8dm

# 95VTcVrifkpa/rg2Z4VGIwy1jRPPdzLAEBjoYH1qUoNEt6aORmsHFPPFdvWGUNzB

# RMhxXFExN6AKOG6N7dcP2CZTfDlhAnrEqv1yaa8dq6z2Nr41JmTamDu6GnszrYBb

# fowQHJ1S/rboYiXcag/PXfT+jlPP1uyFVk3v3byNpOORj7I5LFGc6XBpDco2LXCO

# Mcg1KL3jtIckw+DJj361VI/c+gVVmG1oO5pGve2krnopN6zL64NF50ZuyjLVwIYw

# XE8s4mKyzbnijYjklqwBSru+cakXW2dg3viSkR4dPf0gz3N9QZpGdc3EXzTdEonW

# /aUgfX782Z5F37ZyL9t9X4C626p+Nuw2TPYrbqgSUei/BQOj0XOmTTd0lBw0gg/w

# EPK3Rxjtp+iZfD9M269ewvPV2HM9Q07BMzlMjgK8QmguEOqEUUbi0b1qGFphAXPK

# Z6Je1yh2AuIzGHLXpyDwwvoSCtdjbwzJNmSLW6CmgyFdXzB0kZSU2LlQ+QuJYfM2

# BjUYhEfb3BvR/bLUHMVr9lxSUV0S2yW6r1AFemzFER1y7435UsSFF5PAPBXbGjfH

# CBUYP3irRbb1Hode2o+eFnJpxq57t7c+auIurQIDAQABo4IB3TCCAdkwEgYJKwYB

# BAGCNxUBBAUCAwEAATAjBgkrBgEEAYI3FQIEFgQUKqdS/mTEmr6CkTxGNSnPEP8v

# BO4wHQYDVR0OBBYEFJ+nFV0AXmJdg/Tl0mWnG1M1GelyMFwGA1UdIARVMFMwUQYM

# KwYBBAGCN0yDfQEBMEEwPwYIKwYBBQUHAgEWM2h0dHA6Ly93d3cubWljcm9zb2Z0

# LmNvbS9wa2lvcHMvRG9jcy9SZXBvc2l0b3J5Lmh0bTATBgNVHSUEDDAKBggrBgEF

# BQcDCDAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYD

# VR0TAQH/BAUwAwEB/zAfBgNVHSMEGDAWgBTV9lbLj+iiXGJo0T2UkFvXzpoYxDBW

# BgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLm1pY3Jvc29mdC5jb20vcGtpL2Ny

# bC9wcm9kdWN0cy9NaWNSb29DZXJBdXRfMjAxMC0wNi0yMy5jcmwwWgYIKwYBBQUH

# AQEETjBMMEoGCCsGAQUFBzAChj5odHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtp

# L2NlcnRzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNydDANBgkqhkiG9w0BAQsF

# AAOCAgEAnVV9/Cqt4SwfZwExJFvhnnJL/Klv6lwUtj5OR2R4sQaTlz0xM7U518Jx

# Nj/aZGx80HU5bbsPMeTCj/ts0aGUGCLu6WZnOlNN3Zi6th542DYunKmCVgADsAW+

# iehp4LoJ7nvfam++Kctu2D9IdQHZGN5tggz1bSNU5HhTdSRXud2f8449xvNo32X2

# pFaq95W2KFUn0CS9QKC/GbYSEhFdPSfgQJY4rPf5KYnDvBewVIVCs/wMnosZiefw

# C2qBwoEZQhlSdYo2wh3DYXMuLGt7bj8sCXgU6ZGyqVvfSaN0DLzskYDSPeZKPmY7

# T7uG+jIa2Zb0j/aRAfbOxnT99kxybxCrdTDFNLB62FD+CljdQDzHVG2dY3RILLFO

# Ry3BFARxv2T5JL5zbcqOCb2zAVdJVGTZc9d/HltEAY5aGZFrDZ+kKNxnGSgkujhL

# mm77IVRrakURR6nxt67I6IleT53S0Ex2tVdUCbFpAUR+fKFhbHP+CrvsQWY9af3L

# wUFJfn6Tvsv4O+S3Fb+0zj6lMVGEvL8CwYKiexcdFYmNcP7ntdAoGokLjzbaukz5

# m/8K6TT4JDVnK+ANuOaMmdbhIurwJ0I9JZTmdHRbatGePu1+oDEzfbzL6Xu/OHBE

# 0ZDxyKs6ijoIYn/ZcGNTTY3ugm2lBRDBcQZqELQdVTNYs6FwZvKhggLLMIICNAIB

# ATCB+KGB0KSBzTCByjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24x

# EDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlv

# bjElMCMGA1UECxMcTWljcm9zb2Z0IEFtZXJpY2EgT3BlcmF0aW9uczEmMCQGA1UE

# CxMdVGhhbGVzIFRTUyBFU046REQ4Qy1FMzM3LTJGQUUxJTAjBgNVBAMTHE1pY3Jv

# c29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVACEAGvYXZJK7

# cUo62+LvEYQEx7/noIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldh

# c2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBD

# b3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENBIDIw

# MTAwDQYJKoZIhvcNAQEFBQACBQDoUHz6MCIYDzIwMjMwNzA2MDczNjI2WhgPMjAy

# MzA3MDcwNzM2MjZaMHQwOgYKKwYBBAGEWQoEATEsMCowCgIFAOhQfPoCAQAwBwIB

# AAICHsYwBwIBAAICEXMwCgIFAOhRznoCAQAwNgYKKwYBBAGEWQoEAjEoMCYwDAYK

# KwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG9w0BAQUF

# AAOBgQDucGDYRG5zd4ePAYpt8bepeyV14x54E7eNFJbgdKTpnHSr+dPlMHeGcN1r

# SZQQG+gBgj1znaNYOSWIBM48VEIcD2aL3+l+IerJVNjg4118FwnlwYrDcg+73bGO

# xp+2QDAddSXPRNigDaVuL/LbAEN6vVKWymciG+FfJJ5UDOygKDGCBA0wggQJAgEB

# MIGTMHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQH

# EwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNV

# BAMTHU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAABxQPNzSGh9O85

# AAEAAAHFMA0GCWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcN

# AQkQAQQwLwYJKoZIhvcNAQkEMSIEIKkEcNrPN1CznegNMgYkcpU7FSCSdRr3Jp5l

# TLqBFPb7MIH6BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQgGQGxkfYkd0wK+V09

# wO0sO+sm8gAMyj5EuKPqvNQ/fLEwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEG

# A1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWlj

# cm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFt

# cCBQQ0EgMjAxMAITMwAAAcUDzc0hofTvOQABAAABxTAiBCBeNXIQR/3DFtL6RO49

# igjvyicr3iLxFMaPvb1T73y10TANBgkqhkiG9w0BAQsFAASCAgCZtayfUUlochGK

# eLdU6TMbioTefABa48kIZKEZd5lhKcEJa4BzZ6EDGZGbAyh0sW3RzsaZUvExueln

# FuZDwdbNCDwagXKzhYkLjFjZWSOvv01RhbnlgYk/bvytnfRKSgXiSO0sy2TylKkM

# xvnliu5wOi8ail/TtDbbFN+JKNY2k5XG1Tt3qZwPXmTCexB27+Lm1OXTq0hMZK0P

# k9t/OxWrkDdX6BFFTaco0uVsG5eecfnoX2UTQq0OzTmbj6LCB3DOEVP8Cq2wkbue

# wMEHtGhUvAmLpz6sUM7bb/ZkPYXsvGwTdRtcBqCfkyiNsLQvP2uaAMuqSq5fRHmN

# TNV7jA7RZ/KMyIey2eF16fyyGOc86k2oaZsSEdIeqTl5bdwIyOBbnfuL3G7P67XV

# 4NPSJlcQIL5tsKG4JFUeCRbTm1KwBzVN85RJOKpFl533UI+AACMG5CeQcJt3Qnzx

# 7hFcID16Mo4Z5LpjT/73gKAj4xksYh257xEdUZgfQh5CFr+zEMRDf13xvi49meK1

# opNh3u3mwkEoq83e8JHc+zZ2d/9KFYJYjx9qaY/1gSMEUlOrYd+YFea5kXpOVSgn

# 51cp6F6G/KES6t36SRuHzzMONCtN1j95dEPrMVWzlKRXw5ZBFJxP4nMkVT9r2112

# 0gEJ8xE/ScYuJurwqjxsOuY0Fa4b5A==

# SIG # End signature block