From d97a9d7651f9e12b072ed06537541562900800f8 Mon Sep 17 00:00:00 2001 From: Joey Verlinden Date: Wed, 10 Apr 2024 12:30:46 +0200 Subject: [PATCH] update --- Images/image1.png | Bin 0 -> 28877 bytes README.md | 71 ++++++++++++++++++++++++++++++++++++++++++++-- 2 files changed, 69 insertions(+), 2 deletions(-) create mode 100644 Images/image1.png diff --git a/Images/image1.png b/Images/image1.png new file mode 100644 index 0000000000000000000000000000000000000000..643f96ef6314e7a18f8364c12a9c8db9e47a5564 GIT binary patch literal 28877 zcmeAS@N?(olHy`uVBq!ia0y~yU~yw$U^v3T#=yWZsbA$P1A_vCr;B4q1>@Vjl^1eD zXFkjPA9(SuXlQ+ji@R&7duT~YxcjV|S0kr}X3n~qo0hd~<;u)i=Yq4en7X{I{5zCZ z6s%XUFgl^rq;YC5k5Y4!MPo;d-YJzBJ%#T^{?kwE9Dem9x2Es?_j_B<-F#ki+4BDP zHy!Vzf3NwwuDs&f=5KMYZL8mZ-ty=yhXkW?0!vSWpaGNH0VK|9k;dg~FYS=shAsh9 z)g`Q~)`(qlLzZAcQp(k`z0BsQhQjpDkuYS(v=SuS7~0(+th{>LYuO#x&35%6Djr``So!Y$pVFH(cT1J$W+r}oGTDEc z{Qn=vpQ`@<@#s@~{f93_w=$RaT}f>;WBPul*uV1Z>iF1eb8CvCGiLT}vDk3qUC!-o zYxn%k-92@$-M5XOJ{;!P-?me9{d~jfFM;l*$=}+f^CCWe+{QFVfBy7Y)2+;9N**+> zo$xGl|CNttPT!R4J^nKOoVNU*1HVrvCEh-K*Dq!1S4PLmz6;yG&!1HN=;QIz&+V!M zZk9fudrI^5^{LhG_olP6MsK?lvajgO#nk6>??rrz-@VM{!-2onCw3fyq|j+>jg_iy zGb%PT^wrn@6hE(3U0<`l=<``~eP0&awHq=L4(=D}6!blFfVJ93tu43T?pMao7w+HR z6wE0RwDn6`(t0#?dTiLgH#6&_?Dk!cd;0tN-0-@8pS#<4+HO9+Zr7_*pVp-Rt-t%E z(op<))E}Q)%ey%Xx|zE(h3}T%FAc9e9bHzMl+xIscJj1kTk-8Izn(MG&wHQso+~Yu z{c+!wk2(T#XJ;LI86R8!yjeHi;DhU7<9|=~Pxsc}yXEC{zB^xD$4?jE_u&1r8q1BB zel9vgJKInV+A%KDGP)&gz@__x=0k z825#wK~wPzj>bxLw;4QhiqBa-J;bfAkv{L|+)d~0s>{2xUzz9MvzZvY`JRXPzyIHk z|KGaj*VXk}+wa%?zA(Y$W5?w;u)XSucz4`|$JAuIu}j-KqV4 z*ZJ?PRrj3U7TMRU zl@}Brt`U1*dUo~lZKi#tf9LXVGc?@vf4RNw7ro$hn(i`%72l7#-QR7NzIA$3G0Q%e zpEum?qjq?wU0L?;=1bpv9s3^#f8M<_@#o@yYBTG%>@YYr{iw~qyT#}9{%`ty`*dvi zy_>hsyxo2`tYS}_{<1xi;2=A2N!j525srQ?gOlC2w_cCCU0Zy}wZt@U*N4e6kIuEc zuStK`WSMlxe4o!Aj|B!RXO#%XdiPv;wdn1R^GBMjU3aib{ufUc*84nj!@2AFlR^^C zw)8~&zH`y|)G{&4o$sT*F8-qXdvr`QYMBdBYYC9j_!8 z@s+K6KIrP|eBQk5$NkUq%FFwC3d)^c&lXXO(XYCAfBIoQ+mc9O0R@ z{Lp{C)8LnJ_wTiZcUH-(yQ#YE`_Zaj;@O|bS+Y)9zy9XwUFDu@o*d~YSbJ7*j>OE< z>+-_#3FTJw*7o~D0gR>!fUtM~ctf7GSDD>|`qzuTS{_p9IUwf=EXCF9EJ=*KLN znz;2|$mu3I&fESY;<)PcKQ-+~I3_=P(SM7-o7Jbp#%}xReI+kZ#Xb%ijG8-y|Me5?HS8v+dyX8|CJAOM<`G zNqwz;U2D4dm+mi-?_c%AeT$|}S@qR7{>{YGg`B%Pj5qH6U;F-bL1TLM^);FwwDT7q z>)6p6dyKQ{!toiu9?#hoP`}+Q!PV;{M`QNvlcYmC= zSU5jlJ%9JxZJX-;{(2`J`{lLG#7fDxJfD4wYAZELnws7+Qijn?RaeeYJq5D;@Q%@bXSp98r zMaP^spH4iPW%|2R#^w8l-t5ES`-*ZZUwZ%Bc$oEG(LRRBH}W6pn|*Q0=v_VQpN4$D z@w3V!z3warXWM`KTxs)d_AU3hm4D<44*Yxi@3;GYmB7cUao@k)`~CQ?a!rB7<5v0O zvfrmNE`Mom7kvKM&MtS8?B_ancOLl3J4f<$q`g(vAG>cilDW!RHhg{h!l19T>(c)C zKaV!On=5-~t+;vYasL0GrYD!)+>#mm^YwF^<-2$5e`9s}pfvxs$+@KXXT>VdAJ|-b zCh_+z`_C5H4^R3g+*00H^YEaAJKN0@7hkwy{>fidC>LBiVutB|820|pWJSE@W)e`lVP8IV=fdPi+XD_HCeta z_uN0;-+SJxf7e_-Z__@_qStG;i~Wm|&gHjB_Fcix}>_f7iUBl10<5`L>m5(A+Lzt& zZ^Yy#9aW2%Tl#FK>aB#LS@YG~rZ3kG-QhL|*A~JOANdQU8v28YjQJ672u-nAn{p zohD&!Rf~f^7544nv-`X$a9-x~xo$dgFPP;fR(*^A`}D&1V?3XGe;j+baEFlh(c?*( z`~QA>J1N}CZ_exMYhR0Pv$0d(fB(a;>(j;mAMR$`{@UHLSM`|s?;iFz4$1SvZ;lts za@v0>tXnEuc3}3$lV&}eW!@ilezJl4z2}MCJ39(rSPEADnxMi_>vjLq@h_&eeutQH zO5(2GczEYbMIxhd&g7aSt%VHk7U`2i*x4U;*nYV1BY3}SoL74GpT4T^EdRK?KT64e zXst`x<5vA+_wjc7JF(CA)jjHzwd=|MpfvN)jB8Fd^)DNAlZ5|ge{`vTR5|UlZvWm( zYDM`H?(T(au7!V^8~-xEUb+0-&Gd55zPsi1?ho&p-&*nfmp4;L?ZSVuW__a7uVqf| zxUsKx_n8pyv$`9W*NQ!^Ozt}@(^MX+xH{XQ=#%m{!>^BAR`ZKw_x^rdu*+ZmtL$XK z_ZIF8@^{=TeET?N!S}O;eVMt3mYQwv%q^Mw|A_jxm+P`W%(kDaZ?eB<-_>VgU%X%2 zxZXDqGrfMLbV{*qo!_pH^91S^ZQuG)+vLyIZSgT>k>8cBT`PoTk4Fjy?~i!wk@)l} zRIlv(pUdeb;!?g=@ArH@mzQ{=#iO+4u%Pp$Ej)!*&uklt6o z{ci2{dqy*AT>tOLxDLt*kCyOQADRAo#rm!1?M|PM|NrayT^BvSl#kO}H76@xonLz` z@@|v9UfvStr8!SJ7yUT6h{5lOFXyTm5m{fObHZ<{GftJCoA`-${S235xiW9ED;9Zw zoq7I4_Y#i&fKK;A30EWp+jLgVNXT9+?`QGvN8ZIV=9_OFd+0FV?#*fTpEG~&3R_<& zBfjcW{A0Vmz+)Vb%}yKdi;#GhKX0jb>RI-_mHfXx1^i0Vyld*G>32?1%6!XHnZrBX z>b&)iv*)i+{#G$B!G7NB9mXw3qwLy`J(<5l@~aDv+ed-Oug*VaZsk|oPlUfbV|V@7`ad11-TpV&jVBpjl>1k- z?_9UnBuy1}lXVY0ZORjj_y1og)-QI-wC;3%VZMm_?*bpIP$Ba@w^E;*Pk(#+{p(dv z&C69LZ8>HqEiw7e#XAnQg1@(mDd&dH|1I}>YjH}t!Czs%8;8Z8sah^nvi2%i{a>WH z@3`H&%j{iSkJaWp*-^0f*vr6LlXo*hY_?i*)*USlXevJE{_>&CwEv6pVxJqw} z7cvjfn=6M-FmG~R~UY4%E`|x_kiBHAPnd~Re+MZwcdC5W6sq?o#o_2Ky z$0QqZ9kE9rAFV#gEq-CoQ|_&5(pR!Cx0>r2SRUK1P!oJ~duiq4rlYQ#(}Fkc@_4PZ zKL6As^PW|~Yr0f_9e0hhS~7c+sJCC!gXDGDThH6MS6AAfepT!f_r$DbTFksX2l^B3 zyE)YEY+W>8IrnSy*=4V0bQmj&-&>__cu=W%iRYbT2lri*e-Tvcqi~YV@c6!$)^06| z{i~klUo2f+^`tnS&*S|HyD9%ShTJ|8diCkPbytngJz8Y(D(%kZ8A^o*W+XQAZ|z+D zYe!r8mB`PHj~{zgPY0*ckT*StuT}b9x4Job|5j^9mDM+PSU0jH#Jt$}pv`#I>Z8uT#n!hZ z$M=1EIHTm)q_Q9Db~5aF(5Lz8C4WI`@P7@tudN0S%fyn`tnYRF8}fU@Yjdk3?l+Yi z-JF>0w+6Z&@;Ygn^4N0kv-tUT0c&QKKk|t8>wmSl@c5EP7c0Fi0))bC*pDVx##fa* z=Pd7g>0iF}(z4RI;YPaO)|X`2xX%7zmbJ#M@}}(3i8s{VzyJ5`?z7V4C(i5ti*#%^ zhjyl;Sf0(5xOjBJ$-k!8V=mu4_wU>Gw`LJX1o*_4&2i|QZ#wfrO3TU0+{cU5t7WFw zyk!D4G;;#h_m*wtUiQUJ{&U?Go@3Yw^ZSl3#`LuPFXq8_}}( zNr(RR!Zp|SJ=^@{!&&uys}FYEVk`FiX0&-S`^!}!&r6P)(v_c_&TM5}d`pP^{<=>U z0@17QtHf)Yc3$1SZqh~b$v@5B6>bRsv+@0f^;MJVE0x&{mZU7seHQU&O6?-lZ*IQPw!9M8CqFN(X*zf#}VTlZw5JKJ9|OGVjBl5d}Vl^8i1{n&yEiLWmIx6FT<;yvTFo{;S>59^X+9~YWE z{??du_D*;$C_N}2y;1I?HSgBXsW*=DCf?9$f7zKEbzLvzfXS`N=Q_5QJdA#A<7)p& z!@NB4;`BS6hZdI?#9dE&DY^X56ZLO;%jZ^kZ9cie+U?wrZ!c5t``0eIc@H{Rl~5=U zvEfL^oySUt&9y(;%EZj5=$jn<_3K#&ov(guu`3>%-@D{JQ@?G}`q%@XTB9a&z1q4} zZ_lObD}nA|e~*^iGAYJxyy9x*r|{^v%Zv>Lg4c>4Z<%`bh5Sc1*-aPCr-jvQ{boAf zv+U(v{yjH@>UVsdvV`ya&r{|vPYYZATpeWg=}GI1Xl{;MLhgP&M>tn}+3w|=^q9r| z{qy{?;|JqD9^ZF(df48iuF3khzDX+U@?4C391zcU;(B83jp_V9E`8b@#((XwSWbd* zcIU)1g$4`z@{gal|NrMzW$O|7_Y)oT>ZHA*bGO>D&EMhSFm2zikH@6h^`AeT{k9@5 zv_AdZx2K9`S!GYt^`4gBca1o`e@*!O&3o*=$GTjr(3F)_&M{i|=*Lv~jZ0#)9o6nW z>a_bD;kL)@*xw%=yyZa}7uUV^+#|hQ?7TtT$@lwYTYuo(e3J^Cg)~*(f;lACy%B})+{_IE`26*%R=M0=~;DO zUN%Rqxe-ts?{_&ZLSFOOzT}{fFLtfpq1kCWzxmO}9rix{Q?g@sPhdQr;cvC_eDrDa zz45I-wchW0%zDIT+qd5J^|eoKoHP6M{Ib9G)|!&@wnbkbd|q+ngq{5T)e8>KhIU4E znYiakBnnoYP-HI`X7PP8`{jwQ>aj&eap%|@Uq2b2JXJSk zt*=>>c-+2|kEY$6CBMmVO^8e-6CS_!Pe8ZTR(+d?ztZ`wGA1m!_A$!FD*yVinYX?^&5-Z& zOxHWu`kKqLY5Shk>j#s!f0`NpHnB!K(dlTBJ8S%A7UE#WxvEK7OzuAB5 z;oguJGE*g9US{7KA$r(ij@(uEM*;T@HDj`$hbQ%ye?56W%F@SwihSAJ<@t|I9juJS zFSO?ehM8G>e`>w!K+DgRJ!al@cRu}oKKHh&yNAcuyYF^9{_rC|v*I7Ql?3O~2ZP(#eAN$*C$6@3J;}sN4T`k1lx-&D%Ze{4Uqo zC*%J7^oX0~c1hz{yUvW`^N$^Qc96Y(+s*V<$Zp@#g?8U| z*R3=EACs+nEi7K6ts=V2S8VQ=?znH}eBTcBajLyNZ}GV2(E9CH3Z~`0IeIeuzM)cd zt@_``1qmVYT&L}7GQO6c{U7$Gr&^A&G5p50YqMT>l|NZ}>&T|3(ngOzfLfU~E57nS zp6{w@bNT#-BDpK;D__c5y?9_z)Kh*;@cF6oJ%4js=dXJr_Rr#*vE1wH>)+QoHk-Xj zzf;WD$(izVrseHd-M4mH-4rVZInehEC%)~0_=e@e~YY0aCn)9h&c z1tGbO_p_{0t^4Dz9uK;%eysA(%&Iq^jStN^ym+saU4qM`X=Xo!%_m9dT#)Ry%70m* zJ1^{h-RtQ4GJj(7!41%wlS^xu#n-X_SlS!$ko|ehyMW7Kue+~VO#9cd_REVJiR1l! zM>nZ1SE=)Pv{Kf}UDfT^7f0Q&n-cApYk#dcW_heC7hL{?UiTN;K4<+7wryrFSMIG5 z-KTBXajql%iu?UzKV!SOw`9&;KBb{AdGb!tk4LkMw^*OEvy=Vsa_iH*?<>Q1K5TpK zZuT@h=ic9QcTcN-`&Ut^bZ4RUriHAK>9K@^0uft|aOnSj{QT{g;w?4a-zLxhv!uW< z<-7XuJxG@&H3kcDz|w$&bf0n>EWT8Yctc!xHWY*RUF&h)~cp`GrfSl z{#T>@yE_RN`(vg(6_l=f^=_&D&*Oahf1ajGm|j#2i@VZc_b0JY{C(Tbce{L_GQY2n z-|oSbFP7^rUwY-ia@p2U-7wkHOW(OA9J0;1oO{V|*}fZ#zyEr@{{4>j`+tmtcU&!) z#($(iXX!S(WS75J$}idTv42Pok?%X)9u>d+&++r#dOs`872DGj4p-;SxN})8Z*Awg zlH+zgZy(j2HJ5#V+WF-1AiFES*e&1vO1S8dbL50Yg8gS1+dH8LBm~5C>K+<*w}MjS zo!H}+&K5>;o-S!J*>jE_x3h84yWMNCru1`yHfD^^3Z>1;7R~t<{ppC$ z8!Poj&g;`^_||`o_EtB`ejL8<$Rro$zsvqDvws;r_pq`5kFuZL@jnhdsA99rzgar{ z-CmOyU9-3ZGr<@>{o_`Z|#V~XsKmD&7PJRGZZCv>W? z+S+|9dLM_qd66HRzPVo4@?7wT?caWIK33Fw5?$BxsyS@UC&9h77I(Mz|LXHR8f?A) zkZc8Sykzp>b=xl;u3Y^Lz1M#K!fsYBH=oA*E&jHx z(bnb(+R#MmDKH~EDaF%<$1O|zaKVk;pxKB<(cXr-b>{oSGhNy5D(?vFJ}IZAlLV?` zBScu%?RnI-sce7kX}|m$=gQ-^??rvPS-pN!+1Y(h56k~?2tRI^0-Le<1e%!r^eF!| z*wA|%1>YI(uQ>i)|4ZJUCf2XK`{VBIYH}{ka67CbfaQxFgIx0iL$3V&&J8Vruebfa?^$^sGP4Nr(E*Mtf(1!S z`nt2hLk6dt7(Dso&Q)FsbT894deYjmXLq~!icLT6?4#~qTcx7OdzK5_)|Gy78skfzF99-^o{}v-BL$a&DL|JW1qX>)bsHCW(K(6v_!(3n21o zQ&618&eGS{LfhP|V}z9UyqGvW=`&Ma!RItkz#(Sn)f^L+2`Nuzd0_?$74YCP%rYn^ zL-D~84{k~5&>EVg0h6{IXwJGu+}Z)zp-{aBOl}KW8-$g0Q)2Q_?S+NTnhMZN`^VTf z4B+s=a73dRlV8u435C!}9rTIw4UYsPCLKBP?d|Q;s?%eFuC0%c=d*sZVN==LTbs_? z{hqS-`@P%s#}Xnf8TcP6?`fI;L1bSQq!LEB@BoKI@jW%5e9&?Jv6dXL| zawc%C7Rv*}nzrlrU}1(72nkOWH!SF!`1zdm`rp&$9v9l<%g$78|E0q6PkQvMK2 zwfVci_i6n5($LCVa^XMTZ%BU!Q!b(M%Z=ZO$9Q}8`W`ZyfgA#9(x8dx3PaWR2_GICUv_Na zpHn&ez0k}DdK0fbc6}geUcq<&uhX@TuJ4%XWpnp|J;KU=vfAUfSjn;!1f|rKcYg8h zJ5XNn9^2xSGzhk28P8mfzfYr}TR4 z#|vFI=1+^CADG1AHK*?Cx2#9WVZzEPg$E*~_q6}-VaDpW-5fr1Bpyz;ytX#l+;k%U z?(8SGve&6+dvZ(p>tcl-WrzN+zbAvYHr<=`uQg=)jwVd?Y8=W%io~~0; z%kh-HJwN8@ITpR0+du99@6EHHsko=v8VcPvJ@nWFpQA0`Y&g8^oqCmL(*%)+6Q$(V zCjNe^Umpo-(9imuH!=72wyDniwo7c@=g*J+_q+c0<4?cpt70vGzuC-wQsmac?p<^5 zeL42&jD4-!&(HSNX*WMBSNq&Ozh&REBf7;x{HF_-cjRapZo0gE+qCz&RSRtX9hv;J zrT6x;AJ@Hl{`_1x`*e9-Y5mUk6VeGQu+s*2BO)q?aH3f<{ zb_y$JUtg!oZ~NuK71wpU-6|ws|NVYH{@b0;%BkD8@7sE3dv5ge*K^D7Mc&)=TJLG; z`dVMh*Jq4RyNbtNQT6nwk*Pjoc-K0(qMqfqil5(~Ti2~5Q|^D?_uVZ1-L4o1o4*To zmZ#{rZ*nl3DxvuEg};6vi9yg_ijDleS82~LnD=q2RP2?F=^`=I)%SjCnz_$v%LFG-S4+|=PKP{owWV+ zy4~ycd|=go5x4B;gJ%9|{CocYy*pQR``xl^vAL_xdwKadOTL!~OnSWMzM5^{zn`{O zkDTc4|6RKC@4w@_tlcW+s2x9;Y-tnp`E<1Wy@wIgVppA4Y7ka-Iu&D&c(S%L7`eGQ$t)T<*w{hr|?_e?hD)7F?p^i0=;M@LSW?5i>T#>B}tNkPSV zi>BeHsq1BK?=^4v-u=X0Zt2BuCzSh3^b_u;KA*c=g^N?@o!ZQ0xl#8Gg(i!#|NXJ< z)9mB(b?ond3V6sTP`9&fxA%mZTaS3u9PfzVXXUGWa34}29Dp>6)SSVV{)@?PSujmP z@#Vp4m#qFvN48bY|K2sH`rXc_`u`q97T4WXJFR>CdFG!`sY$YihKF`Ld2~&XvHZ9x zw^&HIR(|Qtg3l#3Uc&WLkJ(?}Ez`5z7o+KM;E<9*VbYUH-g=s^udR)a$QKKU);0X} zVsZa8|2Lb@^XbQ*P4jH|VBvS?-M-)NKDAx{A8h$+#p0x|o8HU++x)UZQ?qlzpT3DR zWF8ty$t~ac`rz^1LFGLPpBGEZy{Wsk{p+Wz$LCdSlBs!Ea)k5Vtq1lv)1R=q+qV4s zao5&F8b1$@UdGuLmBjMD;^eE-alaUuv|IgZYfwQ>v_biYp{&Ml@f%7%XZ2o*W z{PbS+d)@z=ep~OF|K@3+bl>`$`S;&FT@xPvcXzz%%(ja6buT_zmZu*{ITG}q-@E4l zw|+wHpH6k_8%aqm^It!eRr+I+|8Hm9k^S3WHoghD zsV*j`KI7QhsS*dTuZ`Y5#lQB|H&ttr@?s(7KPme5cTbB6E2}8XD?Y;e^v_xT zDeU#1ubfw$tg^H8ckTaMW9H@8`soQns_9vwejmG)2yWF#~ zI$I;xF^A`VklA;*8f#7Zo8yeNArs3VBldnVn=cofH}{|DaewgSgedncnJ!PkAH3)P zdYc&AdA!+&QD7)2Y*6SF{4%%vUggsli~GxpR2p{2?6&!K(AqHVr(W;VZ?b(a4b z{}yxIZNfsqhzmzJ&V8K0_&(tSccl2P)oPc^zdQGrm)q@mc0~8-OZMDPb5*L()Lv<` zc0Rybv%{HX&m*?}hnwZ+cdn?o56S3Yhd>IQ4MhSGAC7Qb_>kmPx3xL{rg_edfO$2a zPEKu}p&a><<3M-?cm2bS@mqF1+I@#n3Z-4nsJx*|Fk;G)jt_UXWCm~F5VJYWH*$Mk z?DiW^HnQBi{vf3@plIhDNPFC~?LhDkFDDk<4RSR%mb>5H-rnslh}=(j_pxQ~_j|j4 zoR`p1XRq*KvpeMd z7#d~UrqyFMAwf=VWOY8!Igz#bQWsJbA^D;)5+on_+VFQaMhgy{FLflC{CadGri7(n zmp>!L!`D;~Y{-LJ@s4KbK8ibX(*_Mi8 z=|6#N*bI{2d@cFgb&RA4HX*`*<=J$J$~OmtahA@Jv$ruIGC}ZF->@`x(aK12P8aRAV3Wce~QX$Cy;y)%<%(%DXHyAMH-9 z***cA*$tK(WMqEi7NyK9@Aa7{Q8?{fq!l(pK{iF?@mUydl8My3U1D|x(_WC08C-l8 zhDl0(tb)_6oil!)3!07Trwvw?4~}#QEBp0e_!Q#()zg^$dS?7tJ?+mqw)N+7HvGQ( zHxDCJCNlf=SQtJ6t)9n_d)8pNAq!;5$^BU;<&9hJl^?r->E6bxCmGe<=13GK9l?|Y zc_w13OhM9-C-GaKl$%wQrZwMv|E?S(Y&t+{It4*X@iF8K*v~YEo@P{c^Z6I*{cnci zmwm>^utf11KR&Qegq5*K&R~9aVAazGVP&=dt5o-IKDgRg`b}N=evEK+c+vn0Qqa17 ztiie_3KTP+)<=Ch&a?3QTth6WC!w_H0LUkx-3(ZhR+ujP90|jp;krNP^2W`*necu0 z@4Fa5r^F5p(oR8a!NFLZa1~_9;BrGp3HwQ^V0g1OV(zeZ({_?8OCAtGJofzqvo<`1_sbj>MllQl9f{ zJ2rg`GBcik+tPX4pOG=&@|ml(ifhUB6L0TVJYJ=K!twX}aJwJ-%BQw(zq{{EL`==W zpHFwz|9!LR=c?Y*?@q6(RSfJm-2G1a`1I?0K8Ze^cRO#+iun(u=KMZvU-9coLH@1Z z(rXURF*JI+@0R`k3uk3AiVs}hX=YYid3aCj{(YaO&F&X(ux zx>dPh)uZ_q8$X5|p6T0TQ}J}=*(Dy+Wqw}xA0W5$;c@P&!qmk3Ry%zjw{XPIm5994 zy+my5oGs$7k1XbvKG_!7o&M7}vuN@AqwOr>j}?C@+eas-Z2S643lq}684V^rdp`mUVjyH zH~rq>pS_=}Y|ek(`_GqonW_AZL-?~n^J)S#v_fr2qT^4%Rb}oF% z{Por48}*MLxbC)loH>J^yD;a@#+5s!GkXe2klW?eXm2trv`S)lHHj&u~6=N-$m7w{%89 zcYI8Od+dS|!?+ViIBdGaLpQ97jmR#Y{Akwgg}<+^ull*^PNB=2{F|xEEAM(Pu6Qy3 zPWz(^MJjGtwc7P!k88pfk?!-kg~yle zIKF4%w(gtHui5si97|f$9-f@^WL~korAOBUmYrW$ua`Mc@ZC~=esRw4qwcyl8ZI0) z;WzTryIf&7cbc%2IcRx-`^b2>|z1__7;~D4VbK0M;&dvS$^Un7C-!EP%Z@%))?PtjA{=nR{ zpFg%dv_Bnjt>$~_y8ou@O8w^ZySLh3_xy6@SH~`m>CcPTnr#lazl-g=?fFbTL!RA* z1sPvIT3DrdhF$-Z`6%SR-P_X>pT6S%Bb`3C)y8Jtw;j{C&x_`kPY|4ulm1L@Y2}-9 z@l#)a`!oN!ihZ8lqsrzN?`_`RE$+Mf;beXMygmP~J!373DSC2nGeM@;(Gd*|j)$=~`<;%eHoet+qIn|o5v zmd8I|rfgXB$FSXef5*kIA=f?6F>c*A=jg6$raRtO`rRm)7t!%!`s-bL1@`$bV!pF1 z^_=ei-`_Ih`#jzUP5*JdJWl#~$m-r^@4NcJnfVaE3Mp@&`{9;lC;vN%o1c!R^DWx{ zcZvD?fZ1I(Dg-M;~#k}H-)^ditKD4Y%D^vdK^*q_L>X~zY z=-vNtIq%Yh_YWNGUL9$B6L{^>s#u53GU}T*`^THlSi#d>c;#e%2#-v^;RnlO2ll=3 z?&FpeURiPJ?QQ!m(_4~HA8X9ny#M2&ws$XdLO`FT4(&dST_ z;6D7uJ^sn=TaE5}&bdZ@otl!&vvo$sYO`1Evts7o$W-4w<&ygUA{kT3lb6i;nSTl- zJIO^BsvJ}L`9k>jE9pN^{c}~8KmN2d?3De@bz3FXn)lT7{mN9f*HC8r6mGP!RyXX) z;=FHH!^{@(oqROAFE~x|%dy9A=6_o&Y#pCm`z3Z)=&Ad&`X>p-f3W-|^3}_K%jtc; z7Pm&OjeR!tPsh?7P5xKDe>B{7{&$xAU->rAZ8N`awY&a?LwW1OGX{H9y(NFM{GWNd zDe;T_qosc(vfp^$dTO`gYw(qR`NuzWZ@zH8<{mTiv*EiP{9%)(u8*AmBzs%3{EELC z_aA+{VV5MBdL*=OvwZ)_@}Dm@)gRh>I18NkmI*2I$Ctn3^W+y&-v956JkO&2Uw2G@ zuTXqf?*FO}m-lhI>Uo^+Y+`hkWN+kNO5Y78XW3|O1`7QnPpJwY`i%^gK}5__0)uAq9M@~aU0o=Jzz%#_M5&VSKe z;uiVph4N9Ur>&t=@^4OlcSFC+_|=q{D=T-|ZA`NNztBEu`QsZW9?Rd%aNo4kWnEd{ zs;^TYtvM?9I>owA`lz1esW+cFkINZ8w{naTw6A&pTKsKCcmA#7Ge0-ibZ%&wW%588F5EIz?GKTmzOV0ucY;;kujV@`#Au{_OT zZqRw-qS|kZHT~H$9+qFxj6VG5;C`9yx4wQfJbpaArbEK3{)_JR?mMTCXU(5@{@+Qz zp7J>nMe-}`Hwu@Y^6Qy+BTHss?3(b~EBx);EU!M5*xX!sFRNmTxIJuAAq z)#_}vh;yI!^N5>Wb)L(2D9QfvkuDJbHl^yHMXv<$Px8)JTgnd5${zMi@g-DsK zk`Fz#{086uM-9i;+b~?b{YiEE`kxIv^;XmDSKHlQcXQ3vm3vREasR4&XTo*Q?1=vl zwm-RW^ONdr!FM+%>g&o!TWys6?O7FaD*vHO@+6-t6Z@~%EQ!759h>JZyDK&Nn-SlY z>#tPgy`Ma4+2OzYj@z%SeOGG)*(~{9uAG`M@ptRDo$J~pe`WoRy?pbN?&F}>>!a3W zwXc;3KRaKl?vwl5=(5G{Zq?~tn`Qg6yZ*&Q+nfEnig~hTr*4k9BKSSqZjtdP<5Smv z*~_KN&z(Fkz5Qt4+ls!RH;2}Wd4F5mR?od!CVSib(&Oh%t!2*Jb!VSA{%!5wS^itM z=~_=zUt4#|ENh=a@aEa2tL!)DeDRlXxqn6PTI&8!&)=lauRGc=c73y5?YXjzhpT6N z(NlXOGI@vOt*dvFzJcqhmVqN^KYWZxyC2eyb6`***4b{MGA!&RT7p zxnA?4n4#Dkuy z_Hl8aab=QNMe{?Y0!CJv(t;j4v|%tX|osn7;V=n`Qs3 z?qxo?dP?laslR6Vem%Is?(D|XZKr0%^|{7RT-nR`GUMU8$9nB54pG@Z9NiK&&7JAl zle7QDhO9%)M^2Ph|9kED#k}^Rq_1V&qw<9wY%`11N^US*NLVUs_hjqT`SZ6>S-}A^P4YI zSAX?io1guw!}53dVZPdp^FRMwmZtyvYFF{Tjo1FL-o7Kh)oSb7uPggj=6qZzW}UmJ z=9rV!W|{e$b@nydmL=`p5&wB%nDGYx=diT^;hWoIj%mHRw(m#qNK{gjPew$a)fA@Uz(t{p%8NAX$W^@(r7`=a-y{0Wt>J+tdeWQ2=-+s`>W)or(K zYUSQ^)4f(sl-uy?pJ15;t$3rjE8B0m*KMy^Si9}=q|n-T%vm^bbH2|nrn7w3JiR`X<&Y&=<(ret{NbnyE7zw2|=Y&`lhc7JTR zpMUD3@cutn-aAdu7K;CsRcf{D;KIp{-rLF!P2!t+NmM*z)#SRA$DFqv7cC(Q@ z`qyH{#p4^N^(OAS{;2og$@(WE>1)>LPww<{>thQV2Z#_BUaZUL4(;F=Z zHR?RsizYf(+CK_B%wucH_jI4rx~H>WWh&R+?Eev2WV$9J{_yH++f8>%Ilox>H&Hs? z?P1X7>3>%}RGWQsdtuVlzKCnTnB}vDeQxo7_N~gcI(qy@d|~|K&lp8dQ3 z{Kom8_x(9(l{{yY^y^J~QbM?%=lIW8HsADS#lDW(V|L|T5BT3MF;9;EJbhP<-|_lK zPy9Eo==r!>Z@T3F4D(;U*0o{s0n>l)>pwed|HZs-ffdIkRQ>;RIN!ROvUuN{^|2}=*vB#fcw|%V)(b4^%RU7qLw0i50Mfaktf6jaRS2}ixT{Leq{{O3nMwY`70x}E!-irsZK(I@L-SuU)f+~QZJ8_7GtreIP3 zN0+6)*3AEpPQziV8fOEvSX>=s*P(uh~(X@>v4U%nCDlh{8uI6+e+b|tsghUtXutZ{mHE# zoWkn2{uB6?pkO)m<~M`Lt(~fd*VQ;r6zC)^u{+>)Wue`n@~hXAa(^zX`Wns4{IWOI zyRS;`n&A4V`+eElmx3Vn{#zvrdA}^Pf&Td^zao|S<`jf zHe~*keSF^TW$`ilU$cIPTDaS9=9w=#Kj+D&XX{J8OEL$}|I_<;+p_rFP5VvfOnfWM zUbLy-_vVRIZL_P%-nqwKK2F?s{Po(B<3`)3>PyyNb(dc(_szJyq(=h8{LY;LHo-=228Ah>$!T8XTGD|@|u&VGBMzr*qVzm+d@etOhyQQYq~ z^^^XiRaS9PGfLB}C-uJFxKbjyHm_Ue_+pvc*h|nZM7u+|O#;m+OCm z?N6#1t+hY-DBV}>_{~r9XN;a-T=`My?xyLr!F&Iln19u7y6Kt;C+mX4U*FDAuU~gl z`P_^BztoC1r|JJTJrj4VYEH!F`!(ynx^EM_{jmPs{)#XR5PA`&VnOUHW{L=*<@|_4Wlm z*Zp#>b8oO>3r<>SFkkI`jVym{;Ot>dg~Wg7 zqt-LAXIA&LJ}z!k{PfA&Vq3|MeYWlLDlBSuX8t;ILf3tNLB^tHl@s51kMkc&ua8J- zN!~8||I{n45mhS#ZHqgU^9?m&FBD^H)c@=G}UteY;nk@zJ7Kn~NG@yhmz! zB1|lvM)xrOz0vbF>*H#@Uplv6Bp;e2zSnBr=`bEso6PR}RfkRHXU_i^8vCYumR+L2 zZEow56W6EpPwK6>sP;%lcHhW=@;-^?lbOv zCib$M?fW(!v%6wfR#acm6H#PaRy_C15uu$YSY?I%eoEMVP`AAG+%7Eki1A~wc>T*@*<9ti$F~&gUMAVU>iR0FEF0Xp|4ZPN z<-5)ZrWDmbGwhCgIQi?TwEH){c5_~uo_xgrA#dHsUn|TE^=|g7zLh9fd3N)<;jO^= z^*{aos_Z_oJx4J8Nk_@^AEENzU()}S?mPF@^!JbXzvXuC%$3R3trsosaWzYhz2d54 z$@Vk;v-b6qX-9T0Gfoowo~r#zynpk0iA}s$-QQh#bs_Mu&!&rJyCnE6&%Fumi{AC? z$Bj#(j}NH-IgzZn{pseKzPBscqmQxf`y_e)Q$)DT#@zc6SIPyouO_NL(y|tm|7Lvt zzo+Pi;yX7!HMRf6(mz#6a_E^d#JL~=P%>SY&mu`Rj#PcZm7jrc3FYJsmptOiYC0+@p#JJ)585Z z@BiJ9pDOY2$KmVqY|{fm5Bf6epL)V5)}Lu$_~6TQf4&ph4IXWi`L{1DDq3~YU79Ck zYjQx|zF(W(Em?T5O~>eC%dw3=EMHw_nC^E{l8a=kA}m zc%K;eS3&7tPTOtV_io+RW%x+5@ACRjE5p?9wM;Yk^!T@n>a*ngmDOjy zSbyty(7&|Xfo-*4-0if>Zn9sNdcIWNa%=w2Wxr&&t5V%ld${9&sd1+;+dkU=YSUer z#edlQYkIc*@m&64^1BTG++-fpxm#AA{L&k0cVyEwd8@wvhs=Mie!O;4neIQA>PxYc z&u;s9CjN-=<7u~#{F}Jm^pEAWyCL_r8I9! zRll}*eraO&ua4p^^4~vN-pc8%ypuQpl``Y^#E}DN^Q693t%h|B6Be2K(op=5* z|6dE+MeLK~|WSULfXL-vvE<0Z^AOD&CaLvC(wchq`7sqTly6=tVvOCjP$&1bJ+iEcR|E6A> z`mJ_>XSVKm>K!k?Snpe=y1d5Ep7VzkPCq}tNxpQ${M*kfQng=AUT3%Q$-l+xvp?J1 z?6pe1ePUwNolly_mhYSTep08I#j;--{XSQYKF=u^;a{SBd$RpSvt6P3Iw|(Y1%hrW9RB}X1_h{KiyVHDQdI-G=9k~vtAuJF-`w(<$4wO`7R#QZdRSx z%*K4UMY_2_=^oQmE6-=bXM?_+&uBR2 z`8Mg+ro8#^S<^8X=|1!%rRcCEse4h2W%&g*dU6K7v$V{h>CcE0{cAhBT(xfNnF5lak z0h;sq)uA4KdXK^7yGoZ0E|w-8QGcguTd4o}M)8`0v7H1v7(`d_PFgJ@FPq7Z3E74fdpSN>|P03eD?qA<$ubqBoX34Av z-rfbOE}u4+oxaKM*Q2A$K5g^*+}pLbXJsD5h|IT4tKVwpw0O76fdig`{kJpawtqYO z#{?7r30xKik#;E;vR(-*tKAftaOQrV^~5x6^Qi`FWh9nZsNF71N{O<*R`+vBGB#BS zd_B(&r2L%VsIBhiv+1IWvD>i|*yh3#qAU$O3VpUcK5}A9*_ywfJda~jbwEbqY~#sK zip^nuJu^}kd#3gDOvE*oBqWu=VGEt=bSrwW%J=%z|Bt_BpSqa-XT{{&PY(PJcCB`u(2A(>|r|t}hh09CUN*+~svMh4dQj|1zkR->=O6 z*>2mfwY%=w>!$~Qzk79d^6UD)uRp2h|F60EeTVVsWd3`XchCKOaKC_+F+6y=^ggk_ z-5>w+!S8#aa`(!1`v(PIkblhguR3q{#y!ubuGe_IukcUExBExM=fwZ}z(4Qa-;MTp zHJ26k|6JAk^y>Pm%7t^->Ze^|uVCH(;AYURSdVCJ#kSTX$qP#j_2&J)eqL|0)jn}4 z{x1hD7rPMVxGl+6gX$R`YW>B|7af0Xetn^3#ofxMw(Rp`?)^MEd3x%`-zWZ-PyM^U z%ukWCDgVc(-uHjE$P^#zKkeRcwRca_{N&SDujj5yGRylj`NZ=h9^S{-o8{}}M^!tm z-|Z1)HEmVhBx^U1xQz_|XMdLuoAw(6QUoox;E&p73Vdz+n47^%sg6moVq zHDsp$s);iSdh7Pc&S4|3g+tP@?9CnOEv>eeG0y-^OCM$Vk}o8@TO1ngJ<9 z1l8SEiLZ=|3D7_4xzOz9wIg$qy&oR7FiYDgpUvH~G~!3Lpi_Nc^T(vq-#%t*ewgV$ zr#5LqU9Y;>(aUnvYvSHr>YNzZvcF%YX*({n!Xd6K%@yZztK zefqSwUsM0?>ld5ezPtF|q58$X-KU=WS#7W0(^@|9!wl~EEBosvUr;#s@%nq~E!8q@ zF6`yY?o?d%Eq;w==n~-ruGs-}3o#>E}l_e&3irW&XcMr!4j3kM{r2 zXnAww`_>KXzZYzIrxLlwqN4pwoO^xshjr8H|G%m|z1-iT+He2K^hW~g4tsr_`c7!) zyEf@l^6zRA6eEMO+y8VvkBRtqzr1ecW0ro;gZ&lezVb77zuU95yH(=A6!G3kQ#$pf zQs-OUY~o*k`}^uv>zF6EkF8#(yZ+yk!dM}{s(t@I$Mf}h>rH#LU3>lBJih%OS!+J( zp4!ZR{$AAs^R7QjpA^e+Pqg3ixOMf1rPH>od1>=P`o8uZ#%r&R?@KNhiYYqt?~Tgw zMMVjlYECSeDy*EW;`XRzE@xL>;nFk0Vpg$}r)eC2qA9GTA7?6gihE1W&um}ZZ1nq;)@G|+^lUfIL-+kBKh&i~cX{b9npYfE-M zdwgvE-xafGtkPY2uU=vIr_HUg(@x)bQM^rm??;P$_lq8z-re5uDKlcti6a$HyKe=h zS?kVu%5HJ|+ac%Un|p7W&zrRL%&!Y;%|5jT)k^of+rH^PWN^Csx@5DCxczG1BMRRb zHyvuYvB+Oi`{mlgFF%s`=PH= zYFC!6owP$m`>tg8)~kg--Dak`ADz|zy;J|xivGp?M-=3XIp6`I($9Fvb*yFj@Kec{_j+Ogd^^3vXd)q3HgniRo z*}rka{Ew$TK6@M(e`opJl$+9I`Yp|ChKDxFE8JJ%~tP_vhth%@%eZ5|G8cN=f|A* zf==#eu^;yPzI5qD9`5$EWQ()k|L2w8ez6;dnj0btGaAn(OT}CNZnFGX_vnT(+efb1 z`#J?{{x_S~FN-O-DH>a^73jp&!&>#mys(|+X#2hzuj8B*2N(T6bb8&Jl;0;B1oiK= zDtEQEuvA@_s}H+={)_bQ4~%t9)|*uRx0rY8{%W1h{h0mluG5U_(;lDub5dr1GS8dU z_xb+(Dz~8tH?BraC;T77(+ z>|VP&JNUJG;_2kr!^hq&*`dKU-LFH3lbubo?_}8=iJ1z9pQgo@N$J?UNb&8N(XryP z>CG--G2d;UQbcD)h^sqaYWJBZGPmH3;N3&3)%iotg66AlytKB;S3~*T3(2R-5zoywt^Rl1?VWbX_Fta=PVZAYR3rB6lCEv# zr`XAp_q|!ap~LFxydRnBw@v3P=07xf*Jl5C^B4RtyUi}hCQqIlqa^F03vt_!z%z3j?o#|U%Uk)o?UL>5eNV1VQT%zBcY1lZ>As`Sk1m@YUwl_#rh=tdp3WMJ zWmaBd({%pn{dyW2YuoMrr0>_a{%0>9+^&+_oggTA`*`iv)P+*7qkpRyMhHA}Rr@6K zI963A*vPH>m`?wj-TO<5%8xVKmwQ$JY~oY(Uh!N{DCvP-^9+|0+|empCtPcqvn%Rv z(y@a~v&F9;+g-Kcd*Aum&DDuo`|Fzg52+nfsn33@_6=>Z1=@`A^*j=qJvi+YF4$C^oOx}B3e%JC3$I~qipH33p{pXLb*NYWv zy?#xud+xV*2E#*(IjMgd80Y8jEzO=@bNZxEpXR~CcLP)UoiVMFZV>={39IS7U>;T`F-(xj`+=4 zb4rc~?NNU3_Hg~SL*6?A;=89;{pmJa;;d?w_1NWjbk*YZruA3m3CWt?S?qIfdhDAg z$%bl)v6D}4^h`gZ`|6P2zd5<-b7j_FeOmUhSbooo$uHF3DnF}{Te`g8x8&L{`^OVD z&R*jGk$vwU*ZUot-&b_M-7>#$;`&D|7D8{&U0;^-JgDEWz?_A9PrppztpvlpfA3kJ z^8RME>-W@IGgKVdyS>F`Mg@G))Y`|#rj(}D{`|4wktHSPY*<5B+?s3%L5Zl3@3$>Wd3+IA^LJ-U%sAFqG2UF?SB`&sLCYl{9~ z-w>K})6d)Nbx8HAox2_DC;pGze(T95wdsaSeUItCepr0k|7243m5Rx4Z!uZ_5=@@@ zFYM+k?I+294nHaSW9oP0$L5-|+h_4u{aAhS`YX4GSJ{idoSI(4xAJDr$!$5VJr}2M zoV>5_mx!(Dnyk_;#or5mMO;g{pn1Qg{LSK@w|c&1|GpD>;O#e?c?;ZAw%mAh`_r}g zc|VuuoD8skGu?dM&6?Wn5h|L2pLMTmehiFWp`^Y4rwkFBvllgR= zZ;xZ0to$zZ%&+L%(c9I#?ePho$J1(_8>$J_6wGi>sc`ABu6?3@a!+{eBW+p#$|J9@ z$p5LCz%s>W?UMURpL9-XOk8+Ge%}?LmaJwyp$R{{VxRSY$&67n?wNdP_V2*??GM$Y z!6iq%xxblMcgIoapu(Z1Jdr@t#8tl69v#y5-?Hf5H5WC%3y)J)sL6lLw7<1H@5U34 z+_tG(`t5q9gRk6GZ+lapqkrdMYgNrkT_x4&zuV78t-0#;<=aQW+b7&&R!ollsV@K6 zeDT(@6G!b0*8g;mjhV5vByc_F<}c6cVmRh(_PZIRxo%6+!o4Zks>e6`tUjOWUF)}d z+TD)CZPBj}>nuKhbJ;6R8uah$%l%Sprm+{7SInvH`?_&zYNzU}Q+3bx^=*2y{a07A;PS*d zC;qH_DEND2na%H`&u_SyxgEWHNjXP3uGUcgc$v4@?niZB43m6nd1n{?4!I#XKgZL3 z&1J(=Z`^H`{hihG$Tff4M0@Z4Q?u-3rI$a6E|K$pAe}Ea@#3Sdca>B%`qDS`s8`Px3(fc=m4(6cfA_?e_%wCr?4D!&++41^&yxhn}pR1DnA|icguWu zF6%_)j~DHKHluy(dBdw4me!v2^EP|6=4a65smT-0Mrpih|~2qUBYFg zSILJZ>8m#`vazz%vwv*(R@hs2CCa4?{d@b zx8!<>`y0O1{&jWt-j>?^OCp?i_Y3Jyi+_pyl)9f)dTH+8fLfhsqeEZYpVuvaY*2P3 zZ=c!H^pKz3tIenW|7-fYth-uOXNRoz`8ICxY!@aJBc zBgbPcC#$$U(eCfLB9yY{$29ApFG|t2amH`%8a+O7MQ&;5-x=Q{Uwr;_|Iem78pr2) zeVP02TgUN7c7Kn>%02S1QHv2tpYNXeB~Ii^%0G>Zi*{R1a4gReew%GyTr+2*wyf6g zM@p5`yQgqSB+KsB`UUUr33v%_u;3Itx#F^lwSJ$9bL8xnquWkAIT`Rz=IhbgCm$N) zH%`$1_`~A&&EYpQLDiQorpmZP%?N>+kiw%3G$- z?WkTWKcUwud!I-6mz}BMg+YCjI?Ga(e@T~qy=bl({=s-Y^P;z6d6NXwUIfaf_N_e1 znX>u)CCN%Ny||0)vCfV;{{ijtv~yMS%1}&=@yT=EiKnsyLt3XPO^tRZly>151+UuU+G>uL*k;6 z#qoo8^;9}0yqzr3+3$TqZdY6~ANec3XXpW&2}dy#JC=twdYzpJh+Yh}#oucBjLGtw%IT=;mPwSr@Fch-g zW8UiGlq3E9sNgUAdtY6C>({-$^KP%|pH1Ak9kM)G`d(L0hksom^{G}!S$f@`W!_=W z#F^aXq3sCOTi^FhR_;F6=-8FKNmkuW&7$vj$r=}OK8z2dNa$2W<&uRg!>IRDqmc%H?3cj)iW{_8sT&567z z!S&Z)UGdwdB5irN?%9f0N&8QgU5UKhu3OU?llibYX3N5DhGIYEN>AlYS^d)|_L_d} z6jR%e7Qc^3TdK<}%KdV{@JaN>uI9CmUtF!|{aG4{gpWmAQr*ES|`?(nR zGqvYC3uQdw-&Eh6`u@a|A1e-*$GT@Y&;6GneS39W>NWMAt8Vj+#f|zV1zW#dKUFvK zQOC#Cxz83AT&y^?@5{^JlJvb-PHvacFMMkCQ~dNSKiTQ=ACwH7=zXPjSr>gx5}cWb2IoSN!2*^ZeIqkIql6IH|=cc2EA$`Fn@73u24^M9$UQ zu(UsZ!*Rj8{@-3%*q`>UpBQmKzHZ)3_v{P(JTh(9Rm|H|A9Zvuxln9h5HUSsk?psO z{(B1dB((3I_aNaef@UTw1?N!4V&_N7;_BS9w`5lul&W|{x2qCZuDUpFUvH%NP~Sgosr#o%i&GXYeylZf#u3h# zY@?Q#E1|P51cZNPpS!i{=Y-R5Cii{s_58F`MzmRNrQx}nNv>_3)~Q$Y?{C_ZQgTUd zne@#>yR1u{d=E8uZ{4?)@8&fBPrB1?*3ENRZ2ZYJcjfs_YwPClpSu`$#OQa(=D@=q zze2eDOSI>O%|GpStX!mRQ>b>b{P7=8x^KDIt4@DB+2@=8*T{M2FS(vf|F`IE*qM#G zzkl3(^}omeo%L2%zmKcVSUv6kv+n1d~ixxcZ!AkwKCUq{qJRF*`0S5I%x+BeS)Dtrf8VOL zNsD?aJj*1WO*+{3bK-KJN1kAnC{QA+Pprp z?QyN)IkTtl4RRtg3fWJ1a;N-% zci6q;y>RFKOP_OpfyXwVyq*8PWYdJ?{|&o6*e4~uiKZn zU-;Rd6z%(;iru|?8p~~;l)LpzmN+Q>ZpqI(p3lp=3v+~-yKCPqQd}t@tW%ljUH!rK zWwrfVv8M?RO|AJ)vpWT!h%56Y{rJL}&i|{&MfjxVA6aw5MaNgW*`7Nz*F$C7qs5w! z`hIn|9Es-tb8Jq${ww9pKaWXs*K&VK%$H5sk&zDQHKX&?e*!azM3%#6!-1D=O%SH68`1yCcacEEXo}eI+T)TVGuVl!8 z`9#Bx#hph?_^Z?`535;ecl}BJa<}N{*(0X@9@9^Y-~QTqLMEb)Z^MUms%6WU=0{z( z{Btk&`rO?|PHy>;Wj}5H`FG6U8!bPGuuqYA=%37G6JIwoG`;SY{Zy#Iw;kenfmnyc$ERWT0`Sd&Emay{L-6AW#@637nIrzE4 zyP5~HlmAOH7blpoOPE_4Zkkna`}YjvIXs_Y@~tdjvyT!k*PP0ug!%7iKH4q3Ed9}~ zsDzA1FN>;vovMAfFG7pYr#Q*wx`n!fjoh>>n;U&Qw*^^D5LVV!)jR&s&?;DFh7M$o zgUh35g1|$|WOdhNkDnY})b#Jf`I+ahbf)$cKHRaax%^%G%@^&NK0O+Wm%i6ZJ-d}t zaQ5$$IwSUJeawD6I-XITFDn)>(V-v?3VL=)IR`x(VwpFR4E=Tl`` z@=S=;9VcILZ@@9#xf?d8c;w0a*iXCP-zmq~BnjGW3@vRwDtuBf0!<2IZYfTi4w-!h z?aJNkUH5(N?{g?_gX&0t4!_H}$hly(>DhrdaBohoFFW~uU-5nDwD}Ck>^YQz4ip_} zKGBSI{`i2*j95ONAeqT;Eew-Bo!9$$xBQ(o@?GnhA@hBXg- z{@qmF|NC5RI<~28@I3jcPCA-5!nZ}z>!D}1(K--7k zOuAqDe4jDQ8OS=I>9~V^B0JU@_6AFXA)c6K*%*F$QM=TpXub7;<_p+TFDMaDYh?aD z%_%Qw-t8xy6OYT)oMKdWpSJMx_M6N6t+1x()iap)`*uy3J>$7qWfIHb<|iHEuZ}Vo ziSm1VzW>J@GpG|hEf369;+`O)xYcm~krOtXjq>uaA7CKS_|)Y<=ftNj_qX+e&J%D0 zpSu7)IskkCf<$Ag>w(URsjc^q;gBEI|KLCSJjuDcs+%NP85kHCJYD@<);T3K0RVF1 B9<2ZX literal 0 HcmV?d00001 diff --git a/README.md b/README.md index 9bfc73b..36f14cc 100644 --- a/README.md +++ b/README.md @@ -12,9 +12,13 @@ This conditional access baseline is based on the Microsoft Conditional Access Ba - [Resources](#resources) - [Version history](#version-history) - [Changelog](#changelog) + - [Persona's](#personas) + - [Global](#global) + - [Admins](#admins) + - [Internals](#internals) + - [Guests](#guests) - [Conditional access policies](#conditional-access-policies) - [CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA](#ca000-global-identityprotection-anyapp-anyplatform-mfa) - - [CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA](#ca000-global-identityprotection-anyapp-anyplatform-mfa-1) - [CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist](#ca001-global-attacksurfacereduction-anyapp-anyplatform-block-countrywhitelist) - [CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication](#ca002-global-identityprotection-anyapp-anyplatform-block-legacyauthentication) - [CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA](#ca003-global-baseprotection-registerorjoin-anyplatform-mfa) @@ -57,20 +61,83 @@ This conditional access baseline is based on the Microsoft Conditional Access Ba Changes are documented here once they are made. +## Persona's + +#### Global +Global is a persona/placeholder for policies that are general +in nature or do not only apply to one persona. So it is used +to define policies that apply to all personas or don't apply to +one specific persona. The reason for having this persona is to +be able to have a model where we can protect all relevant +scenarios. It should be used to hold policies that apply to all +users or policies that enforce protection on scenarios not +covered by policies for other personas + +#### Admins +We define admins in this context as any non-guest identity +(cloud or synced) that have any Azure AD or other Microsoft +365 admin Role (like in MDCA, Exchange, Defender for +Endpoints or Compliance). As guests who have such roles are +covered in a separate persona, guests are excluded from this +persona. + +#### Internals +Internals cover all users who have an AD account synced to +Azure AD who are employees of the company and work in a +standard end-user role. + +#### Guests +Guests holds all users who have an Azure AD guest account +that has been invited into the customer tenant + ## Conditional access policies ### CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA -### CA000-Global-IdentityProtection-AnyApp-AnyPlatform-MFA + +This policy requires MFA for all cloud apps, from every platform. It captures all authentications in scope not captured by other MFA policies. + ### CA001-Global-AttackSurfaceReduction-AnyApp-AnyPlatform-BLOCK-CountryWhitelist + +This policy blocks all countries, to all cloud apps, from every platform except for the countries configured in the named location **ALLOWED COUNTRIES**. This named location is excluded in this policy. + ### CA002-Global-IdentityProtection-AnyApp-AnyPlatform-Block-LegacyAuthentication + +This policy blocks legacy authentication for all users, to all cloud apps, from any platform. + ### CA003-Global-BaseProtection-RegisterOrJoin-AnyPlatform-MFA + +This policy requires MFA for all users, to register or join a device to your tenant/environment. Make sure to disable *Require Multifactor Authentication to register or join devices with Microsoft Entra*. This can be found under https://portal.azure.com -> Entra ID -> Devices -> Device settings. + +![Image1](Images\image1.png) + ### CA004-Global-IdentityProtection-AnyApp-AnyPlatform-AuthenticationFlows + +This policy prevents all users from transfering authentication flows from PC to mobile for example. This feature is currently in preview. + ### CA005-Global-DataProtection-Office365-AnyPlatform-Unmanaged-AppEnforcedRestrictions-BlockDownload + +This policy prevents all users from downloading, printing or syncing Office 365 data from an unmanaged device. It requires App Enforce Restrictions. + ### CA100-Admins-IdentityProtection-AdminPortals-AnyPlatform-MFA + +This policy requires MFA for certain admin roles when they access the Admin Portals. + ### CA101-Admins-IdentityProtection-AnyApp-AnyPlatform-MFA + +This policy requires MFA for certain admin roles when they access the any cloud app. + ### CA102-Admins-IdentityProtection-AllApps-AnyPlatform-SigninFrequency + +This policy sets a Sign-in frequency for certain admin roles to a maximum of 12 hours. Admins need to re-authenticate of logon after 12 hours. + ### CA200-Internals-IdentityProtection-AnyApp-AnyPlatform-MFA + +This policy requires MFA for all internal identities, for all cloud applications, from any platform. + +> [!IMPORTANT] +> Verify the included group(s) and/or add your custom groups which have all internals in it. + ### CA201-Internals-IdentityProtection-AnyApp-AnyPlatform-BLOCK-HighRisk ### CA202-Internals-IdentityProtection-AllApps-WindowsMacOS-SigninFrequency-UnmanagedDevices ### CA203-Internals-AppProtection-MicrosoftIntuneEnrollment-AnyPlatform-MFA