packages/AzStackHci.DiagnosticSettings.0.7.1/Private/AzStackHci.Defender.Helpers.ps1
|
function New-OsConfigAsrObservation { # ASR action meanings (read-only interpretation): https://learn.microsoft.com/en-us/defender-endpoint/attack-surface-reduction-rules-configure [CmdletBinding()] param($Value, [bool]$Collected = $false, $Present = $null, [string]$Message = '') $observation = [pscustomobject]@{ Collected = $Collected; Present = $Present; Value = $Value; Action = $null; Message = $Message } if (-not $Collected) { return $observation } if ($Present -eq $false) { $observation.Action = 'Not configured'; return $observation } $numericValue = 0 if ($null -eq $Value -or $Value -is [bool] -or -not [int]::TryParse([string]$Value, [ref]$numericValue) -or $numericValue -notin @(0, 1, 2, 5, 6)) { $observation.Collected = $false $observation.Action = 'Unknown' $observation.Message = 'ASR action is missing or unsupported; no Disabled value inferred.' return $observation } $observation.Value = $numericValue $observation.Action = @{ 0 = 'Disabled'; 1 = 'Block'; 2 = 'Audit'; 5 = 'Not configured'; 6 = 'Warn' }[$numericValue] return $observation } function Invoke-OsConfigDefenderQuery { [CmdletBinding()] param([ValidateSet('Preferences', 'RuntimeStatus', 'OSConfig', 'RSoPSettings', 'RSoPGpos')][string]$Kind) switch ($Kind) { 'Preferences' { Get-MpPreference -ErrorAction Stop } 'RuntimeStatus' { Get-MpComputerStatus -ErrorAction Stop | Select-Object AMRunningMode, AMServiceEnabled, AntivirusEnabled, RealTimeProtectionEnabled, IsTamperProtected, AMProductVersion, AMEngineVersion, AntivirusSignatureVersion, AntivirusSignatureLastUpdated } 'OSConfig' { if (-not (Get-Command Get-OSConfigDesiredConfiguration -ErrorAction SilentlyContinue)) { if (-not (Get-Command Import-ASOSConfigModule -ErrorAction SilentlyContinue)) { throw 'Existing Azure Local OSConfig commands unavailable; no module installed.' } Import-ASOSConfigModule -ErrorAction Stop | Out-Null } Get-OSConfigDesiredConfiguration -Scenario Defender/Antivirus -ErrorAction Stop | Where-Object { $_.Name -like 'ASR*' } | Select-Object Name, Value, Default } 'RSoPSettings' { Get-CimInstance -Namespace 'root\RSOP\Computer' -ClassName RSOP_RegistryPolicySetting -OperationTimeoutSec 30 -ErrorAction Stop | Select-Object @{Name='KeyName';Expression={$_.registryKey}}, ValueName, ValueType, Value, Deleted, GPOID, Precedence, SOMID } 'RSoPGpos' { Get-CimInstance -Namespace 'root\RSOP\Computer' -ClassName RSOP_GPO -OperationTimeoutSec 30 -ErrorAction Stop | Select-Object Id, GuidName, Name } } } function Get-OsConfigDefenderEvidence { [CmdletBinding()] param() $evidence = @{} foreach ($kind in @('Preferences', 'RuntimeStatus', 'OSConfig', 'RSoPSettings', 'RSoPGpos')) { $source = [pscustomobject]@{ Collected = $false; Rows = @(); Message = '' } try { $source.Rows = @(Invoke-OsConfigDefenderQuery -Kind $kind -ErrorAction Stop) if ($kind -in @('Preferences', 'RuntimeStatus') -and ($source.Rows.Count -ne 1 -or $null -eq $source.Rows[0])) { throw "$kind returned no unique observation." } $source.Collected = $true } catch { $source.Rows = @(); $source.Message = $_.Exception.Message } $evidence[$kind] = $source } return $evidence } function Get-OsConfigAsrGpoEvidence { [CmdletBinding()] param([string]$RuleId, [System.Collections.IDictionary]$Evidence) $result = Get-OsConfigRegistryPolicyEvidence -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules' -Name $RuleId -Evidence $Evidence foreach ($assignment in $result.Assignments) { Add-Member -InputObject $assignment -NotePropertyName RuleId -NotePropertyValue $RuleId } return $result } function Invoke-OsConfigDefenderAssessment { [CmdletBinding()] param([string]$Node, [string]$OutputPath, $BaselineAssessment) $path = Join-Path (Join-Path $OutputPath $Node) "$Node-Defender.json" Remove-Item -LiteralPath $path -Force -ErrorAction SilentlyContinue $evidence = Get-OsConfigDefenderEvidence $errors = New-Object 'System.Collections.Generic.List[object]' foreach ($source in @('Preferences', 'RuntimeStatus', 'OSConfig', 'RSoPSettings', 'RSoPGpos')) { if (-not $evidence[$source].Collected) { $errors.Add([pscustomobject]@{ Source = $source; Message = $evidence[$source].Message }) } } $preferences = @{} if ($evidence.Preferences.Collected) { try { $preference = [pscustomobject]$evidence.Preferences.Rows[0] if (-not $preference.PSObject.Properties['AttackSurfaceReductionRules_Ids'] -or -not $preference.PSObject.Properties['AttackSurfaceReductionRules_Actions']) { throw 'Defender ASR preference arrays unavailable.' } $identifiers = @() $actions = @() if ($null -ne $preference.AttackSurfaceReductionRules_Ids) { $identifiers = @($preference.AttackSurfaceReductionRules_Ids) } if ($null -ne $preference.AttackSurfaceReductionRules_Actions) { $actions = @($preference.AttackSurfaceReductionRules_Actions) } if ($identifiers.Count -ne $actions.Count) { throw 'Defender ASR identifier/action array lengths disagree.' } for ($index = 0; $index -lt $identifiers.Count; $index++) { $identifier = [string]$identifiers[$index] if ($identifier -notmatch '^[0-9a-fA-F]{8}(-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$' -or $preferences.ContainsKey($identifier)) { throw 'Invalid or duplicate Defender ASR identifier.' } $preferences[$identifier] = $actions[$index] } } catch { $preferences = @{} $evidence.Preferences.Collected = $false $evidence.Preferences.Message = $_.Exception.Message $errors.Add([pscustomobject]@{ Source = 'Preferences'; Message = $_.Exception.Message }) } } $catalog = @{} if ($null -ne $BaselineAssessment) { foreach ($setting in $BaselineAssessment.Settings) { if ($setting.Name -like 'ASR*' -and $setting.RegistryValue -match '^[0-9a-fA-F]{8}(-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$') { if ($catalog.ContainsKey([string]$setting.RegistryValue)) { throw 'Duplicate baseline ASR identifier.' } $catalog[[string]$setting.RegistryValue] = $setting } } } $expectedAvailable = $catalog.Count -gt 0 if (-not $expectedAvailable) { $errors.Add([pscustomobject]@{ Source = 'Baseline'; Message = 'Applicable baseline ASR expectations unavailable; reported values are evidence only.' }) } foreach ($identifier in $preferences.Keys) { if (-not $catalog.ContainsKey($identifier)) { $catalog[$identifier] = [pscustomobject]@{ Name = "UnmappedASR:$identifier"; RegistryValue = $identifier; Expected = $null; Severity = $null } } } $rows = New-Object 'System.Collections.Generic.List[object]' $counts = [ordered]@{ Total = 0; Pass = 0; Warning = 0; Skipped = 0 } foreach ($identifier in @($catalog.Keys | Sort-Object)) { $setting = $catalog[$identifier] $sources = [ordered]@{} $sources.DefenderReported = New-OsConfigAsrObservation -Collected $evidence.Preferences.Collected -Present ($evidence.Preferences.Collected -and $preferences.ContainsKey($identifier)) -Value $preferences[$identifier] -Message $evidence.Preferences.Message $osSettings = @($evidence.OSConfig.Rows | Where-Object { $_.Name -eq $setting.Name }) $osValue = $null $osDefault = $null if ($osSettings.Count -eq 1) { $osValue = $osSettings[0].Value; $osDefault = $osSettings[0].Default } $sources.OSConfig = New-OsConfigAsrObservation -Collected ($evidence.OSConfig.Collected -and $osSettings.Count -le 1) -Present ($osSettings.Count -eq 1 -and $null -ne $osValue) -Value $osValue -Message $evidence.OSConfig.Message foreach ($registrySource in @('PolicyRegistry', 'LocalRegistry')) { $registryPath = if ($registrySource -eq 'PolicyRegistry') { 'HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules' } else { 'HKLM:\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules' } $registry = Get-OsConfigBaselineRegistryValue -Path $registryPath -Name $identifier $sources[$registrySource] = New-OsConfigAsrObservation -Collected $registry.Collected -Present $registry.Present -Value $registry.Value -Message $registry.Error Add-Member -InputObject $sources[$registrySource] -NotePropertyName ValueType -NotePropertyValue $registry.Type } foreach ($source in @($sources.Keys)) { $observation = $sources[$source] $outcome = 'SKIPPED' if ([string]::IsNullOrWhiteSpace([string]$setting.Expected)) { $observation.Message = 'No validated baseline expectation for this ASR identifier.' } elseif (-not $observation.Collected) { if (-not $observation.Message) { $observation.Message = 'Source observation unavailable or ambiguous.' } } elseif (-not $observation.Present) { $observation.Message = 'ASR setting not reported by this source; no Disabled value or deviation inferred.' } elseif ($observation.Value -eq 5) { $observation.Message = 'Source explicitly reports NotConfigured (5); no Disabled value or deviation inferred.' } else { $evaluation = Test-OsConfigBaselineRule -Rule $setting.Expected -Observed $observation.Value -Present $observation.Present if (-not $evaluation.Supported) { $observation.Message = $evaluation.Reason } elseif ($source -in @('PolicyRegistry', 'LocalRegistry') -and $observation.Present -and $observation.ValueType -ne 'DWord') { $outcome = 'WARNING'; $observation.Message = 'ASR registry value type differs from expected REG_DWORD.' } else { $outcome = if ($evaluation.Matches) { 'PASS' } else { 'WARNING' } $observation.Message = if ($evaluation.Matches) { 'Matches baseline expected value.' } else { 'Differs from baseline expected value; not an automatic deployment blocker.' } } } Add-Member -InputObject $observation -NotePropertyName Result -NotePropertyValue $outcome if (-not $observation.Collected) { $observation.Present = $null } } $outcomes = @($sources.Values | ForEach-Object { $_.Result }) $complete = $outcomes -notcontains 'SKIPPED' $result = if ($outcomes -contains 'WARNING') { 'WARNING' } elseif ($outcomes -contains 'PASS') { 'PASS' } else { 'SKIPPED' } $values = @($sources.Values | Where-Object { $_.Collected -and $_.Present -and $_.Value -ne 5 } | Select-Object -ExpandProperty Value -Unique) $severity = switch ([string]$setting.Severity) { 'Critical' { 'High' }; 'Important' { 'High' }; 'Informational' { 'Low' }; default { 'Medium' } } $rows.Add([pscustomobject]@{ CheckId = [string]$setting.Name; RuleId = $identifier; Severity = $severity; BaselineSeverity = $setting.Severity Expected = $setting.Expected; OSConfigDefault = $osDefault; Result = $result; EvidenceComplete = $complete Sources = [pscustomobject]$sources; SourceDisagreement = $values.Count -gt 1 GpoEvidence = Get-OsConfigAsrGpoEvidence -RuleId $identifier -Evidence $evidence }) switch ($result) { 'PASS' { $counts.Pass++ } 'WARNING' { $counts.Warning++ } 'SKIPPED' { $counts.Skipped++ } } } $counts.Total = $rows.Count $complete = $expectedAvailable -and $rows.Count -gt 0 -and @($rows.ToArray() | Where-Object { -not $_.EvidenceComplete }).Count -eq 0 $report = [ordered]@{ SchemaVersion = '1.0'; Node = $Node; CapturedAtUtc = [datetime]::UtcNow.ToString('o') CheckId = 'DefenderAsr'; Severity = 'High' Result = $(if ($counts.Warning) { 'WARNING' } elseif ($counts.Total -gt 0 -and $counts.Skipped -eq 0) { 'PASS' } else { 'SKIPPED' }) EvidenceComplete = $complete; Counts = $counts; Profile = $null; Source = $null; Snapshot = $null; Sha256 = $null Message = 'ASR configured-source comparison only; Defender-reported preferences and RSoP assignments do not prove runtime enforcement or policy authorship.' RuntimeStatus = $(if ($evidence.RuntimeStatus.Collected) { $evidence.RuntimeStatus.Rows[0] } else { $null }) CollectionErrors = $errors.ToArray(); Settings = $rows.ToArray() } if ($null -ne $BaselineAssessment) { foreach ($field in @('Profile', 'Source', 'Snapshot', 'Sha256')) { $report[$field] = $BaselineAssessment.$field } } $report | ConvertTo-Json -Depth 14 | Out-File -LiteralPath $path -Encoding utf8 -Force -ErrorAction Stop return [pscustomobject]$report } function Get-OsConfigDefenderHealthSummary { [CmdletBinding()] param([string]$ExportPath, [string[]]$Nodes) $details = New-Object 'System.Collections.Generic.List[object]' $evaluated = New-Object 'System.Collections.Generic.List[string]' $missing = New-Object 'System.Collections.Generic.List[string]' $counts = [ordered]@{ Total = 0; Pass = 0; Warning = 0; Skipped = 0 } foreach ($node in $Nodes) { try { $detail = Get-Content -LiteralPath (Join-Path (Join-Path $ExportPath $node) "$node-Defender.json") -Raw -ErrorAction Stop | ConvertFrom-Json -ErrorAction Stop if ($detail.SchemaVersion -ne '1.0' -or $detail.Node -ne $node -or $detail.CheckId -ne 'DefenderAsr' -or $detail.Settings -isnot [array] -or $detail.CollectionErrors -isnot [array] -or $detail.EvidenceComplete -isnot [bool]) { throw 'Invalid Defender assessment identity or shape.' } $rowCounts = @{ Total = $detail.Settings.Count; Pass = 0; Warning = 0; Skipped = 0 } $identifiers = @{} foreach ($setting in $detail.Settings) { if ($setting.Result -notin @('PASS', 'WARNING', 'SKIPPED') -or [string]::IsNullOrWhiteSpace([string]$setting.CheckId) -or $setting.RuleId -notmatch '^[0-9a-fA-F]{8}(-[0-9a-fA-F]{4}){3}-[0-9a-fA-F]{12}$' -or $identifiers.ContainsKey([string]$setting.RuleId)) { throw 'Invalid or duplicate Defender rule.' } $identifiers[[string]$setting.RuleId] = $true $outcomes = @() foreach ($source in @('OSConfig', 'DefenderReported', 'PolicyRegistry', 'LocalRegistry')) { if (-not $setting.Sources.PSObject.Properties[$source] -or $setting.Sources.$source.Result -notin @('PASS', 'WARNING', 'SKIPPED')) { throw 'Invalid Defender source comparison.' } $observation = $setting.Sources.$source if ($observation.Collected -isnot [bool] -or ($null -ne $observation.Present -and $observation.Present -isnot [bool]) -or -not $observation.PSObject.Properties['Value']) { throw 'Invalid Defender source observation.' } if ($observation.Result -ne 'SKIPPED' -and (-not $observation.Collected -or $null -eq $observation.Present -or [string]::IsNullOrWhiteSpace([string]$setting.Expected))) { throw 'Defender comparison lacks collected evidence or an expectation.' } $outcomes += $setting.Sources.$source.Result } if ($setting.GpoEvidence.Collected -isnot [bool] -or $setting.GpoEvidence.Assignments -isnot [array]) { throw 'Invalid Defender RSoP evidence shape.' } $expectedResult = if ($outcomes -contains 'WARNING') { 'WARNING' } elseif ($outcomes -contains 'PASS') { 'PASS' } else { 'SKIPPED' } if ($setting.Result -ne $expectedResult -or $setting.EvidenceComplete -isnot [bool] -or $setting.EvidenceComplete -ne ($outcomes -notcontains 'SKIPPED')) { throw 'Defender rule result disagrees with source comparisons.' } $rowCounts[[string]$setting.Result]++ } foreach ($field in @('Total', 'Pass', 'Warning', 'Skipped')) { if (-not $detail.Counts.PSObject.Properties[$field] -or $null -eq $detail.Counts.$field -or [string]$detail.Counts.$field -cne [string]$rowCounts[$field]) { throw 'Invalid Defender assessment counts.' } } $complete = $detail.Settings.Count -gt 0 -and @($detail.Settings | Where-Object { -not $_.EvidenceComplete }).Count -eq 0 $expectedResult = if ($rowCounts.Warning) { 'WARNING' } elseif ($rowCounts.Total -gt 0 -and $rowCounts.Skipped -eq 0) { 'PASS' } else { 'SKIPPED' } if ($detail.Result -ne $expectedResult -or $detail.EvidenceComplete -ne $complete) { throw 'Defender assessment outcome disagrees with evidence.' } } catch { $detail = [pscustomobject]@{ Node = $node; CheckId = 'DefenderAsr'; Severity = 'High'; Result = 'SKIPPED'; EvidenceComplete = $false Message = 'Defender evidence unavailable or invalid.'; CapturedAtUtc = $null Profile = $null; Source = $null; Snapshot = $null; Sha256 = $null Counts = [pscustomobject]@{ Total = 0; Pass = 0; Warning = 0; Skipped = 0 } RuntimeStatus = $null; Settings = @(); CollectionErrors = @([pscustomobject]@{ Source = 'Assessment'; Message = $_.Exception.Message }) } } foreach ($field in @($counts.Keys)) { $counts[$field] += $detail.Counts.$field } if (($detail.Counts.Pass + $detail.Counts.Warning) -gt 0) { $evaluated.Add($node) } if (-not $detail.EvidenceComplete) { $missing.Add($node) } $details.Add($detail) } $complete = $Nodes.Count -gt 0 -and $missing.Count -eq 0 return [ordered]@{ CheckId = 'DefenderAsr'; Severity = 'High'; Result = $(if ($counts.Warning) { 'WARNING' } elseif ($Nodes.Count -gt 0 -and @($details.ToArray() | Where-Object { $_.Result -ne 'PASS' }).Count -eq 0) { 'PASS' } else { 'SKIPPED' }) EvidenceComplete = $complete; Counts = $counts; EvaluatedNodes = $evaluated.ToArray(); MissingNodes = $missing.ToArray() Message = "$($counts.Warning) ASR rule(s) with configured deviations; $($missing.Count) node(s) with incomplete comparisons. Configuration is not proof of runtime enforcement." Details = $details.ToArray() } } function ConvertTo-OsConfigDefenderHtml { [CmdletBinding()] param($Detail, [string]$RelativePrefix = '') $html = New-Object Text.StringBuilder $badge = switch ($Detail.Result) { 'WARNING' { 'badge-warn' }; 'PASS' { 'badge-ok' }; default { 'badge-na' } } [void]$html.Append("<h3>Defender / ASR</h3><p><span class=`"badge $badge`">$([Net.WebUtility]::HtmlEncode([string]$Detail.Result))</span> $([Net.WebUtility]::HtmlEncode([string]$Detail.Message))</p>") [void]$html.Append("<p>Profile: $([Net.WebUtility]::HtmlEncode([string]$Detail.Profile)) | Captured UTC: $([Net.WebUtility]::HtmlEncode([string]$Detail.CapturedAtUtc)) | Rules: $($Detail.Counts.Total) | Passed: $($Detail.Counts.Pass) | Warnings: $($Detail.Counts.Warning) | Skipped: $($Detail.Counts.Skipped)</p>") $notConfiguredCount = 0 $unavailableCount = 0 $otherSkippedCount = 0 foreach ($setting in $Detail.Settings) { foreach ($source in @('OSConfig', 'DefenderReported', 'PolicyRegistry', 'LocalRegistry')) { $observation = $setting.Sources.$source if ($observation.Result -ne 'SKIPPED') { continue } if (-not $observation.Collected) { $unavailableCount++ } elseif ($observation.Present -eq $false -or $observation.Value -eq 5) { $notConfiguredCount++ } else { $otherSkippedCount++ } } } $coverageText = if ($Detail.EvidenceComplete) { 'Complete' } else { "Not all sources compared. Not configured: $notConfiguredCount; unavailable: $unavailableCount; other skipped comparisons: $otherSkippedCount." } [void]$html.Append("<p>Source coverage: $coverageText</p>") [void]$html.Append('<p>Coverage counts are per-setting source comparisons, not failed rules. An unconfigured source is not a failed read or evidence of missing Local Group Policy settings. Assessment results remain separate from source coverage.</p>') [void]$html.Append("<p style=`"overflow-wrap:anywhere`">Baseline source: $([Net.WebUtility]::HtmlEncode([string]$Detail.Source))<br>Snapshot: $([Net.WebUtility]::HtmlEncode([string]$Detail.Snapshot))<br>SHA-256: $([Net.WebUtility]::HtmlEncode([string]$Detail.Sha256))</p>") if ($null -ne $Detail.CapturedAtUtc) { $artifactLink = $RelativePrefix + [uri]::EscapeDataString([string]$Detail.Node) + '/' + [uri]::EscapeDataString("$($Detail.Node)-Defender.json") [void]$html.Append("<p><a href=`"$([Net.WebUtility]::HtmlEncode($artifactLink))`">Defender JSON evidence</a></p>") } [void]$html.Append('<h4>ASR Source Comparison</h4><p style="overflow-wrap:anywhere">Policy registry: HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules<br>Non-policy registry: HKLM:\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\ASR\Rules<br>These locations do not establish whether local Group Policy, domain Group Policy or another management mechanism supplied a setting.</p><div class="table-wrapper"><table><tr><th>Setting / Rule ID</th><th>Result</th><th>Baseline Expected</th><th>OSConfig Reported</th><th>Defender Reported</th><th>Policy Registry</th><th>Non-policy Registry</th></tr>') foreach ($setting in $Detail.Settings) { $rowClass = if ($setting.Result -eq 'WARNING') { 'asr-warning' } else { 'asr-policy' } $resultBadge = switch ($setting.Result) { 'WARNING' { 'badge-warn' }; 'PASS' { 'badge-ok' }; default { 'badge-na' } } [void]$html.Append("<tr class=`"$rowClass`"><td style=`"overflow-wrap:anywhere`">$([Net.WebUtility]::HtmlEncode([string]$setting.CheckId))<br>$([Net.WebUtility]::HtmlEncode([string]$setting.RuleId))</td><td><span class=`"badge $resultBadge`">$([Net.WebUtility]::HtmlEncode([string]$setting.Result))</span></td><td>$([Net.WebUtility]::HtmlEncode([string]$setting.Expected))</td>") foreach ($source in @('OSConfig', 'DefenderReported', 'PolicyRegistry', 'LocalRegistry')) { $observation = $setting.Sources.$source $label = if (-not $observation.Collected) { 'Unavailable' } elseif ($null -ne $observation.Value) { "$($observation.Action) ($($observation.Value))" } else { $observation.Action } $cellClass = switch ($observation.Result) { 'WARNING' { 'cell-warn' }; default { '' } } [void]$html.Append("<td class=`"$cellClass`">$([Net.WebUtility]::HtmlEncode([string]$label))<br><small>$([Net.WebUtility]::HtmlEncode([string]$observation.Message))</small></td>") } [void]$html.Append('</tr>') } [void]$html.Append('</table></div><h4>Defender Operating Status</h4>') if ($null -ne $Detail.RuntimeStatus) { [void]$html.Append('<div class="table-wrapper"><table><tr><th>Property</th><th>Reported Value</th></tr>') foreach ($property in $Detail.RuntimeStatus.PSObject.Properties) { $reportedValue = if ($null -eq $property.Value) { 'Not reported' } else { [string]$property.Value } [void]$html.Append("<tr><td>$([Net.WebUtility]::HtmlEncode($property.Name))</td><td>$([Net.WebUtility]::HtmlEncode($reportedValue))</td></tr>") } [void]$html.Append('</table></div>') } else { [void]$html.Append('<p>Defender operating status unavailable.</p>') } [void]$html.Append('<h4>RSoP Assignment Evidence</h4><p>Assignments do not prove which management channel supplied Defender-reported values.</p><div class="table-wrapper"><table><tr><th>Setting</th><th>GPO / ID</th><th>Assigned Value</th><th>Precedence</th><th>Scope / Evidence</th></tr>') foreach ($setting in ($Detail.Settings | Sort-Object @{ Expression = { $_.GpoEvidence.Assignments.Count -eq 0 } }, CheckId)) { if ($setting.GpoEvidence.Assignments.Count -eq 0) { $label = if ($setting.GpoEvidence.Collected) { 'No validated assignment' } else { 'Unavailable' } [void]$html.Append("<tr><td>$([Net.WebUtility]::HtmlEncode([string]$setting.CheckId))</td><td>$label</td><td></td><td></td><td>$([Net.WebUtility]::HtmlEncode([string]$setting.GpoEvidence.Message))</td></tr>") } else { foreach ($assignment in $setting.GpoEvidence.Assignments) { $assignedValue = if ($assignment.PSObject.Properties['Value'] -and $null -ne $assignment.Value) { $assignment.Value -join ', ' } else { 'Unavailable or deleted' } [void]$html.Append("<tr><td>$([Net.WebUtility]::HtmlEncode([string]$setting.CheckId))</td><td class=`"cell-warn`">$([Net.WebUtility]::HtmlEncode("$($assignment.GPOName) [$($assignment.GPOId)]"))</td><td>$([Net.WebUtility]::HtmlEncode($assignedValue))</td><td>$([Net.WebUtility]::HtmlEncode([string]$assignment.Precedence))</td><td>$([Net.WebUtility]::HtmlEncode([string]$assignment.Scope))</td></tr>") } } } [void]$html.Append('</table></div><h4>Collection Errors</h4>') foreach ($errorItem in $Detail.CollectionErrors) { [void]$html.Append("<p>$([Net.WebUtility]::HtmlEncode([string]$errorItem.Source)): $([Net.WebUtility]::HtmlEncode([string]$errorItem.Message))</p>") } if (-not $Detail.CollectionErrors.Count) { [void]$html.Append('<p>No source-query errors recorded. Skipped setting comparisons remain visible above.</p>') } return $html.ToString().Replace('<table>', '<table class="policy-sortable">') } # SIG # Begin signature block # MIInOQYJKoZIhvcNAQcCoIInKjCCJyYCAQExDzANBglghkgBZQMEAgEFADB5Bgor # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG # KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCC+1BJrDrv6M2qK # k/J71ls+9iTg0MTteSmRK1oWXFEipaCCDMkwggYEMIID7KADAgECAhMzAAACHPrN # xZvoL37EAAAAAAIcMA0GCSqGSIb3DQEBCwUAMFcxCzAJBgNVBAYTAlVTMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xKDAmBgNVBAMTH01pY3Jvc29mdCBD # b2RlIFNpZ25pbmcgUENBIDIwMjQwHhcNMjYwNDE2MTg1OTQxWhcNMjcwNDE1MTg1 # OTQxWjB0MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UE # BxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9uMR4wHAYD # VQQDExVNaWNyb3NvZnQgQ29ycG9yYXRpb24wggEiMA0GCSqGSIb3DQEBAQUAA4IB # DwAwggEKAoIBAQDVsZfgOKmM31HPfoWOoNEiw0SlCiIxUMC0I9NMWbucKOw/e9lP # oAoehQVu6SG65V4EPzrYsnBnFPNoi4/HoOdjhz1qkrEt4I6tEcxXU6oOeY9zGveC # /3iBeuhLYxM3M/PkcUoebF+Nednm8OkdSPoDu8imViHPQq/8CQUu0WRR4rE+dMRf # rpVqfmNi2qWCX94T4MsepijGVkwE//tJg0ryAiYdHT34LSnlG/RSBZmQRGWZ5g8j # qnKjRParSqMft1gvjuUTVgtWNZfgcLFSK5Wa0myrq8OPcgTGGsRgun+tnSS+IxDT # xVsAPH1OzvPjwomguByhUe/OcvUN0D5Wmp7xAgMBAAGjggGqMIIBpjAOBgNVHQ8B # Af8EBAMCB4AwHwYDVR0lBBgwFgYKKwYBBAGCN0wIAQYIKwYBBQUHAwMwHQYDVR0O # BBYEFNoH7a2YDjOSwpkp6DHcmUS7J+0yMFQGA1UdEQRNMEukSTBHMS0wKwYDVQQL # EyRNaWNyb3NvZnQgSXJlbGFuZCBPcGVyYXRpb25zIExpbWl0ZWQxFjAUBgNVBAUT # DTIzMDAxMis1MDc1NjkwHwYDVR0jBBgwFoAUf1k/VCHarU/vBeXmo9ctBpQSCDEw # YAYDVR0fBFkwVzBVoFOgUYZPaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9w # cy9jcmwvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmclMjBQQ0ElMjAyMDI0LmNy # bDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUWh0dHA6Ly93d3cubWljcm9z # b2Z0LmNvbS9wa2lvcHMvY2VydHMvTWljcm9zb2Z0JTIwQ29kZSUyMFNpZ25pbmcl # MjBQQ0ElMjAyMDI0LmNydDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBCwUAA4IC # AQAUnEqhaRXe0T3hIJjvdQErEkrA/7bByjn6t5IArODkkRjzkYwtKMc2yYj2quaN # rLutWw2YZcngKPy1b71YyDJQTy4NDRwaSh9Tw5thrk3NmcPrAHia5vtcBJ1CgtKK # 7mQbIcQ22d/N3813ayCDDFewu1+jsZmX+r/aTEqaOM4TVxVtRSkuCy8nAXKuChOK # Li/zA4XuH8iEYqIsj2YoNaeSxVmeGiERXpKdo3dDmYi0kO5w2D8VS4c3+9h6gElY # BaAAg/dYErBg27qT3vv0zRDJhJufvCNylA8S7/+8H5E/PV5cng6na9VV/w9OV3qu # uND6zdGa2EX38Glp50F9AIQk3p2xXmcvorDeM4XJ7UlWYBi6g80J1SSOQnInCYFE # msfUNn3+1AaTJKSJL83quKArTac2pKhu0Yzzzrzo6HrsRiQKzpnRBb1/dMa6P3hz # 75XbMRBctNsFhZC07WCmjExdLg2eHW5uV0TY8D5+6wozJf7vF3+WHkYPO85Z+BC6 # U4FkNbYNycZ9cE4j1tXRdyDCfml6c0HWPHjNVDObrv9lKt3qUqFpX38VCqVCyNOO # 1UcXfQiVjJw32U2WUKZjt/neJKHEBsm9kFsLuWzkQ53+qcaSaytmsCnk2gOglrlD # 5d3kKyvvAw+rzm0lT8K38P6PLxfZQHhu4W8dV7Av8N2ZmDCCBr0wggSloAMCAQIC # EzMAAAA5O7Y3Gb8GHWcAAAAAADkwDQYJKoZIhvcNAQEMBQAwgYgxCzAJBgNVBAYT # AlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYD # VQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xMjAwBgNVBAMTKU1pY3Jvc29mdCBS # b290IENlcnRpZmljYXRlIEF1dGhvcml0eSAyMDExMB4XDTI0MDgwODIwNTQxOFoX # DTM2MDMyMjIyMTMwNFowVzELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEoMCYGA1UEAxMfTWljcm9zb2Z0IENvZGUgU2lnbmluZyBQ # Q0EgMjAyNDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANgBnB7jOMeq # lRYHNa265v4IY9fH8TKhemHfPINe1gpLaV3dhg324WwH06LcHbpnsBukCDNitryo # 0dtS/EW6I/yEL/bLSY8hKpbfQuWusBPr9qazYcDxCW/qnjb5JsI1s8bNOg3bVATv # QVL4tcf03aTycsz8QeCdM0l/yHRObJ9QqazM1r6VPEOJ7LL+uEEb73w6QCuhs89a # 1uv1zerOYMnsneRRwCbpyW11IcggU0cRKDDq1pjVJzIbIF6+oiXXbReOsgeI8zu1 # FyQfK0fVkaya8SmVHQ/tOf23mZ4W9k0Ri22QW9p3UgSC5OUDktKxxcCmGL6tXLfO # GSWHIIV4YrTJTT6PNty5REojHJuZHArkF9VnHTERWoTjAzfI3kP+5b4alUdhgAZ7 # ttOu1bVnXfHaqPYl2rPs20ji03LOVWsh/radgE17es5hL+t6lV0eVHrVhsssROWJ # uz2MXMCt7iw7lFPG9LXKGjsmonn2gotGdHIuEg5JnJMJVmixd5LRlkmgYRZKzhxS # CwyoGIq0PhaA7Y+VPct5pCHkijcIIDm0nlkK+0KyepolcqGm0T/GYQRMhHJlGOOm # VQop36wUVUYklUy++vDWeEgEo4s7hxN6mIbf2MSIQ/iIfMZgJxC69oukMUXCrOC3 # SkE/xIkgpfl22MM1itkZ35nNXkMolU1lAgMBAAGjggFOMIIBSjAOBgNVHQ8BAf8E # BAMCAYYwEAYJKwYBBAGCNxUBBAMCAQAwHQYDVR0OBBYEFH9ZP1Qh2q1P7wXl5qPX # LQaUEggxMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA8GA1UdEwEB/wQFMAMB # Af8wHwYDVR0jBBgwFoAUci06AjGQQ7kUBU7h6qfHMdEjiTQwWgYDVR0fBFMwUTBP # oE2gS4ZJaHR0cDovL2NybC5taWNyb3NvZnQuY29tL3BraS9jcmwvcHJvZHVjdHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNybDBeBggrBgEFBQcBAQRSMFAw # TgYIKwYBBQUHMAKGQmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9wa2kvY2VydHMv # TWljUm9vQ2VyQXV0MjAxMV8yMDExXzAzXzIyLmNydDANBgkqhkiG9w0BAQwFAAOC # AgEAFJQfOChP7onn6fLIMKrSlN1WYKwDFgAddymOUO3FrM8d7B/W/iQ6DxXsDn7D # 5W4wMwYeLystcEqfkjz4NURRgazyMu5yRzQh4LqjA4tStTcJh1opExo7nn5PuPBY # nbu0+THSuVHTe0VTTPVhily/piFrDo3axQ9P4C+Ol5yet+2gTfekICS5xS+cYfSI # vgn0JksVBVMYVI5QFu/qhnLhsEFEUzG8fvv0hjgkO+lkpV9ty6GkN4vdnd7ya6Q6 # aR9y34aiM1qmxaxBi6OUnyNl6fkuun/diTFnYDLTppOkr/mg5WSfCiDVMNCxtj4w # PKC5OmHm1DQIt/MNokbbH3UGsFP1QbzsLocuSqLCvH09Io3fDPTmscR9Y75G4qX7 # RTX8AdBPo0I6OEojf39zuFZt0qOHm65YWQE69cZM2ueE1MB05dNNgHK9gTE7zKvK # /fg8B2qjW88MT/WF5V5uvZGtqa9FSL2RazArA+rDPuf6JGYz4HpgMZHB4S6szWSK # YBv0VisCzfxgeU+dquXW9bd0auYlOB58DPcOYKdc3Se94g+xL4pcEhbB54JOgAkw # YTu/9dLeH2pDqeJZAABVDWRQCaXfO5LgyKwKCLYXpigrZYCjUSBcr+Ve8PFWMhVT # Ql0v4q8J/AUmQN5W4n101cY2L4A7GTQG1h32HHAvfQESWP0xghnGMIIZwgIBATBu # MFcxCzAJBgNVBAYTAlVTMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24x # KDAmBgNVBAMTH01pY3Jvc29mdCBDb2RlIFNpZ25pbmcgUENBIDIwMjQCEzMAAAIc # +s3Fm+gvfsQAAAAAAhwwDQYJYIZIAWUDBAIBBQCggZAwGQYJKoZIhvcNAQkDMQwG # CisGAQQBgjcCAQQwLwYJKoZIhvcNAQkEMSIEIFdeEK5WhhQmM86x3U2EUdfyjmLo # Z7V4RODlsCSprj1wMEIGCisGAQQBgjcCAQwxNDAyoBSAEgBNAGkAYwByAG8AcwBv # AGYAdKEagBhodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20wDQYJKoZIhvcNAQEBBQAE # ggEAjo+MTUwzWeOhE4WHqmfgKGif02Bm25S0kDNT2qzw8ox0O69PqNnGKKeHLrGr # N1iPgaHFLOVk1vJIAzwjQQ7UysuE6dtuNbTxe05DJWvV6e5JYzSbRiS5JiS6CN4p # K+jdL75AHoY3iHJZ/HIAhBcDULPXCuRFqjC95pz10ne/Yrtz7YecFyp3XP8PQiCQ # H7kt/yWMdY8R+ltpAOcNpuFZGRnivkq2S4wB0N9MLyjnKUBd95aLau8P07qAlYls # vpqc/bvFlIKa8kHoccWo9AqRiHjNBE/ojw2VWR3evTbS6qGvurcviHDfGhjeyRGX # DQxe7qHxkYbFLsjaTfIJX2fPPKGCF5YwgheSBgorBgEEAYI3AwMBMYIXgjCCF34G # CSqGSIb3DQEHAqCCF28wghdrAgEDMQ8wDQYJYIZIAWUDBAIBBQAwggFRBgsqhkiG # 9w0BCRABBKCCAUAEggE8MIIBOAIBAQYKKwYBBAGEWQoDATAxMA0GCWCGSAFlAwQC # AQUABCAiq4u0qf5VPWmdIwLSwBt9Ix1qkJTZ0Rp10CxDg3KfRgIGatn5vfaRGBIy # MDI2MTEwMjE0NTAyNC44MlowBIACAfSggdGkgc4wgcsxCzAJBgNVBAYTAlVTMRMw # EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVN # aWNyb3NvZnQgQ29ycG9yYXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNh # IE9wZXJhdGlvbnMxJzAlBgNVBAsTHm5TaGllbGQgVFNTIEVTTjpBOTM1LTAzRTAt # RDk0NzElMCMGA1UEAxMcTWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZaCCEe0w # ggcgMIIFCKADAgECAhMzAAACJ9XAg8OxLlctAAEAAAInMA0GCSqGSIb3DQEBCwUA # MHwxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdS # ZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMT # HU1pY3Jvc29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwMB4XDTI2MDIxOTE5NDAwNFoX # DTI3MDUxNzE5NDAwNFowgcsxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5n # dG9uMRAwDgYDVQQHEwdSZWRtb25kMR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9y # YXRpb24xJTAjBgNVBAsTHE1pY3Jvc29mdCBBbWVyaWNhIE9wZXJhdGlvbnMxJzAl # BgNVBAsTHm5TaGllbGQgVFNTIEVTTjpBOTM1LTAzRTAtRDk0NzElMCMGA1UEAxMc # TWljcm9zb2Z0IFRpbWUtU3RhbXAgU2VydmljZTCCAiIwDQYJKoZIhvcNAQEBBQAD # ggIPADCCAgoCggIBAOLFbLV8M5IviqPcDWlp3L56UgMvCcXdS4vMkg5bAYdwSCvH # HC2fK+JQgOabHKVNSXW77asE+nbNPgHDBCG8ZomkTGq88uUMWVt+ZJ+Uojzp4Wqh # +JnuPw1NE7iXvAaD02Ob6a41q5NwVbap18iMoT3nQ6Sub0ycw4ZjL5+Js1h3FM9E # +rVPgwtkreze90zIwQ6V1w5CRIqnEPr/UaTqA6YK7YqAjx/R7Hq9jGcoOX1bQ4tI # Rr/rLzaghuyb7VAGJ85DjvFYpMbUKa+0avzkvMDvn8wBxSZHDn+h/+oRPRQVXVa6 # UxwmsjoMBICw0I0H7pYuui24FkCP5UyWpuflExnpDghjsnBoCIheHtWPGufBQ5hk # bxYQaF+sD3x2L7ssSf0Cq+8Q7Ib5RByNWEIJswZeKAldICl7J5a6kKwPSOBAw0LF # 8HkEsENbGB1jd0kEQ+DF+SBMNAsGCC1W/Z3kJjEcqAgi0Hhsjl5JvmOQgbZai2cV # 61PSV6CnD8SjPB/f1qjq0Q1jbV5VYjNHD8aya/CNhAXq9WvE4PSkZWx+oYXyzdU9 # 5juEjZPEcUyo0DQgH9rY0tjslPFgAoA//XUQlm3vFuoMsyAPVgN0YTMalCKObecA # 8IvYJ5s/+Oa73RpsnZbjbnKCUYdMj+cIGvBKl9EKDDOt8V6UloIozr7floV/AgMB # AAGjggFJMIIBRTAdBgNVHQ4EFgQU0tbnw3gwZIbq53uNaqBP3ait9F4wHwYDVR0j # BBgwFoAUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXwYDVR0fBFgwVjBUoFKgUIZOaHR0 # cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jcmwvTWljcm9zb2Z0JTIwVGlt # ZS1TdGFtcCUyMFBDQSUyMDIwMTAoMSkuY3JsMGwGCCsGAQUFBwEBBGAwXjBcBggr # BgEFBQcwAoZQaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3BraW9wcy9jZXJ0cy9N # aWNyb3NvZnQlMjBUaW1lLVN0YW1wJTIwUENBJTIwMjAxMCgxKS5jcnQwDAYDVR0T # AQH/BAIwADAWBgNVHSUBAf8EDDAKBggrBgEFBQcDCDAOBgNVHQ8BAf8EBAMCB4Aw # DQYJKoZIhvcNAQELBQADggIBACqdy53g9ILW15vYfqdG7LuwOIorXcVcmKtUHhN/ # CN2jYxv5AviPvBn+Tgb0/QIA0dkWsNBwrRUUNPKyti7xnQCFrXhpwNk+zIig+8AZ # FGFocS5/s1yRGOR9r/KWjUrIgjyNsv032wkCoE8vxXgU0GOWO/7UYcM7DXbutnPl # lJM+gA9vZIDS/nIOBylQx/GCU/Knpyc8+hClO0P04bHwPCbY/6jVM/EEjLojRP1F # q66WiBUK8rB+V94tNwoC+dIbWsKN6tJeZTUM1c6wAP9uytKOBtfmYBsPtdNEwX+9 # rABYRIVyf8GOOLPF5ZlvTRphKWQkDatW0WUwzjzVpVZd0Btc8/lHNSJZOWDId/8b # uULEdhYYhm4HXdPdojpjyYSCf+i7jRqIUmjyvT6LQ/kZ02d5a3GJHQIwpR+Sj7mz # /vdzB7VZ+nwEpdrbvRyJxVBqwV/mxFXukWb5Xt81FfAK7tqdM6aBrvrM7v/a37M6 # WJu+mFP5Dpl34HapixKfjEFpj5jMemfJwtbly8nKE/EEJxvWhFh+FHMIANva60jY # S0YKNzY/aKLgvJHhAxv+fxw7B4v0ipVMorPNWT7NknFXe+ungvK5BfDQ7fSVroFw # d00AAAH1QLzfOzcb134CUh9ksz3u0xQ0paNsGkiKsXHotMMVdW1lB3uGrMtgHKNu # MfS6MIIHcTCCBVmgAwIBAgITMwAAABXF52ueAptJmQAAAAAAFTANBgkqhkiG9w0B # AQsFADCBiDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNV # BAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEyMDAG # A1UEAxMpTWljcm9zb2Z0IFJvb3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IDIwMTAw # HhcNMjEwOTMwMTgyMjI1WhcNMzAwOTMwMTgzMjI1WjB8MQswCQYDVQQGEwJVUzET # MBEGA1UECBMKV2FzaGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMV # TWljcm9zb2Z0IENvcnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1T # dGFtcCBQQ0EgMjAxMDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAOTh # pkzntHIhC3miy9ckeb0O1YLT/e6cBwfSqWxOdcjKNVf2AX9sSuDivbk+F2Az/1xP # x2b3lVNxWuJ+Slr+uDZnhUYjDLWNE893MsAQGOhgfWpSg0S3po5GawcU88V29YZQ # 3MFEyHFcUTE3oAo4bo3t1w/YJlN8OWECesSq/XJprx2rrPY2vjUmZNqYO7oaezOt # gFt+jBAcnVL+tuhiJdxqD89d9P6OU8/W7IVWTe/dvI2k45GPsjksUZzpcGkNyjYt # cI4xyDUoveO0hyTD4MmPfrVUj9z6BVWYbWg7mka97aSueik3rMvrg0XnRm7KMtXA # hjBcTyziYrLNueKNiOSWrAFKu75xqRdbZ2De+JKRHh09/SDPc31BmkZ1zcRfNN0S # idb9pSB9fvzZnkXftnIv231fgLrbqn427DZM9ituqBJR6L8FA6PRc6ZNN3SUHDSC # D/AQ8rdHGO2n6Jl8P0zbr17C89XYcz1DTsEzOUyOArxCaC4Q6oRRRuLRvWoYWmEB # c8pnol7XKHYC4jMYctenIPDC+hIK12NvDMk2ZItboKaDIV1fMHSRlJTYuVD5C4lh # 8zYGNRiER9vcG9H9stQcxWv2XFJRXRLbJbqvUAV6bMURHXLvjflSxIUXk8A8Fdsa # N8cIFRg/eKtFtvUeh17aj54WcmnGrnu3tz5q4i6tAgMBAAGjggHdMIIB2TASBgkr # BgEEAYI3FQEEBQIDAQABMCMGCSsGAQQBgjcVAgQWBBQqp1L+ZMSavoKRPEY1Kc8Q # /y8E7jAdBgNVHQ4EFgQUn6cVXQBeYl2D9OXSZacbUzUZ6XIwXAYDVR0gBFUwUzBR # BgwrBgEEAYI3TIN9AQEwQTA/BggrBgEFBQcCARYzaHR0cDovL3d3dy5taWNyb3Nv # ZnQuY29tL3BraW9wcy9Eb2NzL1JlcG9zaXRvcnkuaHRtMBMGA1UdJQQMMAoGCCsG # AQUFBwMIMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMAsGA1UdDwQEAwIBhjAP # BgNVHRMBAf8EBTADAQH/MB8GA1UdIwQYMBaAFNX2VsuP6KJcYmjRPZSQW9fOmhjE # MFYGA1UdHwRPME0wS6BJoEeGRWh0dHA6Ly9jcmwubWljcm9zb2Z0LmNvbS9wa2kv # Y3JsL3Byb2R1Y3RzL01pY1Jvb0NlckF1dF8yMDEwLTA2LTIzLmNybDBaBggrBgEF # BQcBAQROMEwwSgYIKwYBBQUHMAKGPmh0dHA6Ly93d3cubWljcm9zb2Z0LmNvbS9w # a2kvY2VydHMvTWljUm9vQ2VyQXV0XzIwMTAtMDYtMjMuY3J0MA0GCSqGSIb3DQEB # CwUAA4ICAQCdVX38Kq3hLB9nATEkW+Geckv8qW/qXBS2Pk5HZHixBpOXPTEztTnX # wnE2P9pkbHzQdTltuw8x5MKP+2zRoZQYIu7pZmc6U03dmLq2HnjYNi6cqYJWAAOw # Bb6J6Gngugnue99qb74py27YP0h1AdkY3m2CDPVtI1TkeFN1JFe53Z/zjj3G82jf # ZfakVqr3lbYoVSfQJL1AoL8ZthISEV09J+BAljis9/kpicO8F7BUhUKz/AyeixmJ # 5/ALaoHCgRlCGVJ1ijbCHcNhcy4sa3tuPywJeBTpkbKpW99Jo3QMvOyRgNI95ko+ # ZjtPu4b6MhrZlvSP9pEB9s7GdP32THJvEKt1MMU0sHrYUP4KWN1APMdUbZ1jdEgs # sU5HLcEUBHG/ZPkkvnNtyo4JvbMBV0lUZNlz138eW0QBjloZkWsNn6Qo3GcZKCS6 # OEuabvshVGtqRRFHqfG3rsjoiV5PndLQTHa1V1QJsWkBRH58oWFsc/4Ku+xBZj1p # /cvBQUl+fpO+y/g75LcVv7TOPqUxUYS8vwLBgqJ7Fx0ViY1w/ue10CgaiQuPNtq6 # TPmb/wrpNPgkNWcr4A245oyZ1uEi6vAnQj0llOZ0dFtq0Z4+7X6gMTN9vMvpe784 # cETRkPHIqzqKOghif9lwY1NNje6CbaUFEMFxBmoQtB1VM1izoXBm8qGCA1AwggI4 # AgEBMIH5oYHRpIHOMIHLMQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2FzaGluZ3Rv # bjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0 # aW9uMSUwIwYDVQQLExxNaWNyb3NvZnQgQW1lcmljYSBPcGVyYXRpb25zMScwJQYD # VQQLEx5uU2hpZWxkIFRTUyBFU046QTkzNS0wM0UwLUQ5NDcxJTAjBgNVBAMTHE1p # Y3Jvc29mdCBUaW1lLVN0YW1wIFNlcnZpY2WiIwoBATAHBgUrDgMCGgMVACMfOq2E # /A7QYNyQMwDrHniUiIwqoIGDMIGApH4wfDELMAkGA1UEBhMCVVMxEzARBgNVBAgT # Cldhc2hpbmd0b24xEDAOBgNVBAcTB1JlZG1vbmQxHjAcBgNVBAoTFU1pY3Jvc29m # dCBDb3Jwb3JhdGlvbjEmMCQGA1UEAxMdTWljcm9zb2Z0IFRpbWUtU3RhbXAgUENB # IDIwMTAwDQYJKoZIhvcNAQELBQACBQDukveEMCIYDzIwMjYxMTAyMTE1MDI4WhgP # MjAyNjExMDMxMTUwMjhaMHcwPQYKKwYBBAGEWQoEATEvMC0wCgIFAO6S94QCAQAw # CgIBAAICFZUCAf8wBwIBAAICEoYwCgIFAO6USQQCAQAwNgYKKwYBBAGEWQoEAjEo # MCYwDAYKKwYBBAGEWQoDAqAKMAgCAQACAwehIKEKMAgCAQACAwGGoDANBgkqhkiG # 9w0BAQsFAAOCAQEApqYXG8c3ifQBPFApJuNMXqpN9mZoTs+CoGRtLDBSsftkniIr # 0uSNO/tdyxEskG44JVaa6G3e7+VS/YhoHXUQfqwsi6Eb9sbwwBrWeTBPnVyLGIpQ # 6DXbjDEHjNZWEjc7r9FX39pTQjckETE9DE9jSgiNbQv0jykih4s1PjAyTWHeOVkE # SkC/KaiYPEYYog8KpMj1abaocxT0pzm2/x/gnpH1Jr610pmLF/Y+UZoP5a4rdNDc # dHdInGEmbIWn/Hru4DTvGqLGVYrUmNGK5UIuiTW2/Cvdqb6cl7sBFQeO1VhPRdpC # bdOqUX1g+aHFQk8iH26rAHAemLxEQT0p5DwXETGCBA0wggQJAgEBMIGTMHwxCzAJ # BgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdSZWRtb25k # MR4wHAYDVQQKExVNaWNyb3NvZnQgQ29ycG9yYXRpb24xJjAkBgNVBAMTHU1pY3Jv # c29mdCBUaW1lLVN0YW1wIFBDQSAyMDEwAhMzAAACJ9XAg8OxLlctAAEAAAInMA0G # CWCGSAFlAwQCAQUAoIIBSjAaBgkqhkiG9w0BCQMxDQYLKoZIhvcNAQkQAQQwLwYJ # KoZIhvcNAQkEMSIEICYluxQVgNtYuPZxSMEmdI/V0LlWKHMXKkhz20QT3tkfMIH6 # BgsqhkiG9w0BCRACLzGB6jCB5zCB5DCBvQQg5ecBGjWhUhw4skoOqUTRp2r+Nn1N # d2WddZFxcZOEEXIwgZgwgYCkfjB8MQswCQYDVQQGEwJVUzETMBEGA1UECBMKV2Fz # aGluZ3RvbjEQMA4GA1UEBxMHUmVkbW9uZDEeMBwGA1UEChMVTWljcm9zb2Z0IENv # cnBvcmF0aW9uMSYwJAYDVQQDEx1NaWNyb3NvZnQgVGltZS1TdGFtcCBQQ0EgMjAx # MAITMwAAAifVwIPDsS5XLQABAAACJzAiBCBwYOTrX+QrGxqLzJM9KNJ2lESTcr3r # pRKRrAKxtk3ptDANBgkqhkiG9w0BAQsFAASCAgBIh+n+j6fZVRLKULL+tXCYTT1/ # ebf4pbV+Cc3SKwZS2McpPzRRjPup0bDpJ/kM4gBLUSA4yVyssB6WDe1x0wXcWeep # wd09TbWfupkBpGN7YluJIOnWeVMk3garXVDoGLqFidPdof6n5/Ra65hPTrzjpPwK # eOXuNTmbgwbtcBDLAQVKtEdkOpoGIcnVtmSdp5EWO3SUibNGfAG87PnfHU0xUDHP # 8ir0WoTPfxo9gg5csw0eWus6KyUPtrnBX0NMXEVB+0Yi8fPIwWmLAofwtOzNKP1g # UV10ZPEZ5PsWq5T+ZeR6glWSng7iDl0GdpgpFCdSwbhN/hRYGcohG/Y/BqTu2A8Z # ueEPM08S3UQ12r6CmF6rKLR5LoKZXwBZWcsr7c+cLhKfDVnodwJ6zskh4zDmSo9A # 4lZkukgWirHmHrMGimonNCp+f1GeJNxwJnAEIkukobnPuqJVv9m7gxKsJeG1Ekk7 # mEJ/7sUCpofytxtjWf/Ki3mg19ZYWELLErixbdm30L7sBTyIfcaJy8uY+gJfTsvG # 5hGPUh431sYsncvpCL82RS4pFYRHwAJCIfSksBfaUcNAzam4fEs/LF94w1Ps8M01 # GB4z9ZsZW6boRuQdfdwWwPUoNI4GwdfbGz6IVFlFjYX1jdwpRcP/nkqlT+XbSGZt # 1Hb2xO9zVf5kGrOoAg== # SIG # End signature block |