microsoft.security.toolkit

0.0.5

Public/New-SecurityScan.ps1

                                <#

.SYNOPSIS

    This function will scan the files in the OneDrive folder for any security issues.

.DESCRIPTION

    This function will scan the files in the OneDrive folder for any security issues.

.PARAMETER pathOfOneDrive

    The path of the OneDrive folder. This is a relative path to the user's OneDrive folder, don't provide the full path here.

.PARAMETER accessToken

    The access token to access the OneDrive folder. This is optional, if not provided, the function will prompt for the access token. 

.OUTPUTS

    This function will generate a report of the security issues found in the OneDrive folder, and can be export to csv.

.LINK

    https://github.com/code365opensource/microsoft.security.toolkit

#>

function New-SecurityScan {

    [cmdletbinding()]

    [Alias("amisecure")]

    param (

        [Parameter(Mandatory = $true)]

        [string]$pathOfOneDrive,

        [string]$accessToken

    )

    # connect to Microsoft Graph, if the accessToken is not provided, prompt for the access token, otherwise use the provided access token (parse it to secure string)

    if (-not $accessToken) {

        Connect-Graph -Scopes "Files.Read", "Files.Read.All", "InformationProtectionPolicy.Read" -NoWelcome

    }

    else {

        Connect-Graph -AccessToken (ConvertTo-SecureString $accessToken -AsPlainText -Force) -NoWelcome

    }

    # initialize the result

    $file_info = @{}

    $file_info_sensi = @{}

    $file_info_access = @{}

    $file_info_permission = @{}

    $file_info_scope = @{}

    $file_info_shared = @{}

    $file_info_access_90days = @{}

    try {

        # Get all files in the specified folder from OneDrive

        $graph_url_getItems = "https://graph.microsoft.com/v1.0/me/drive/root:/${pathOfOneDrive}:/children?select=name,id"

        $response = Invoke-MgRestMethod -Uri $graph_url_getItems -Method GET -ErrorAction Stop

        # Check if the response contains any files

        if ($response.value -and $response.value.Count -gt 0) {

            $data = $response.value

            foreach ($file in $data) {

                # Store file id and name in the dictionary

                $file_info[$file.id] = $file.name

            }

        } else {

            Write-Host "No files found in the specified folder."

            Exit 1

        }

    }

    catch {

        Write-Host "An error occurred while retrieving files: $_"

        Exit 1

    }

    # get the required information for each file

    $graph_baseUrl = 'https://graph.microsoft.com/v1.0/me/drive/items'

    $id_to_display_name = Get-SensitivityLabelsMapping

    foreach ($key in $file_info.Keys) {

        # get sensitivity label

        try{

            $url_sen = "$graph_baseUrl/$key/extractSensitivityLabels"

            $response = Invoke-MgRestMethod -Uri $url_sen -Method POST -ErrorAction Stop

            $data = $response.labels

            $id = $data[0].sensitivityLabelId

            if ($data -and $data[0].sensitivityLabelId) {

                $id = $data[0].sensitivityLabelId

                $file_info_sensi[$file_info[$key]] = 

                    if ($id_to_display_name.ContainsKey($id)) 

                        { $id_to_display_name[$id] } 

                    else { "General" }

            } else {

                $file_info_sensi[$file_info[$key]] = "General"

            }

        }

        catch {

            Write-Host "An error occurred while retrieving sensitivity label: $_"

            $file_info_sensi[$file_info[$key]] = "General"

        }

        try {

            $url_access = "$graph_baseUrl/$key/analytics/alltime?select=access"

            $response = Invoke-MgRestMethod -Uri $url_access -Method GET -ErrorAction Stop

            $accessLog = $response.access

            if ($null -ne $accessLog) {

                $file_info_access[$file_info[$key]] = $accessLog

            } else {

                $file_info_access[$file_info[$key]] = $null

            }

        } catch {

            Write-Host "An error occurred while retrieving access data: $_"

            $file_info_access[$file_info[$key]] = $null

        }

        # get recent 90 days analytics log

        try {

            $startDate = (Get-Date).AddDays(-90).ToString('yyyy-MM-dd')

            $url_access = "$graph_baseUrl/$key/getActivitiesByInterval(startDateTime='$startDate',endDateTime='',interval='month')?select=access"

            $response = Invoke-MgRestMethod -Uri $url_access -Method GET -ErrorAction Stop

            $accessLog = $response.value

            if ($null -ne $accessLog) {

                $file_info_access_90days[$file_info[$key]] = $accessLog

            } else {

                $file_info_access_90days[$file_info[$key]] = $null

            }

        } catch {

            Write-Host "An error occurred while retrieving access data: $_"

            $file_info_access_90days[$file_info[$key]] = $null

        }

        # get permissions

        try {

            $url_userNum = "$graph_baseUrl/$key/permissions?count=true&top=0"

            $response_userNum = Invoke-MgRestMethod -Uri $url_userNum -Method GET -ErrorAction Stop

            $userNum = $response_userNum['@odata.count']

            $url_linkNum = "$graph_baseUrl/$key/permissions?filter=link/scope eq 'organization' or link/scope eq 'anonymous'&count=true&top=0"

            $response_linkNum = Invoke-MgRestMethod -Uri $url_linkNum -Method GET -ErrorAction Stop

            $linkNum = $response_linkNum['@odata.count']

            $url_owner = "$graph_baseUrl/$key/permissions?filter=roles/any(property:property eq 'owner')&select=grantedToV2,roles"

            $response_owner = Invoke-MgRestMethod -Uri $url_owner -Method GET -ErrorAction Stop

            if ($response_owner.value -and $response_owner.value[0] -and $response_owner.value[0].grantedToV2.user.email) {

                $owner = $response_owner.value[0].grantedToV2.user.email

            } else {

                $owner = $null

            }

            $file_info_permission[$file_info[$key]] = $userNum

            $file_info_scope[$file_info[$key]] = $linkNum

        } catch {

            Write-Host "An error occurred while retrieving permission data: $_"

            $file_info_permission[$file_info[$key]] = -1

            $file_info_scope[$file_info[$key]] = -1

            $owner = $null

        }

        # get activities log

        try {

            $url_activities = "$graph_baseUrl/$key/activities?select=action,actor"

            $response = Invoke-MgRestMethod -Uri $url_activities -Method GET -ErrorAction Stop

            $shared = $false

            foreach ($item in $response.value) {

                Get-Activity -entry $item -owner $owner -shared ([ref]$shared)

                if ($shared) {

                    break

                }

            }

            $file_info_shared[$file_info[$key]] = $shared

        } catch {

            Write-Host "An error occurred while retrieving activity data: $_"

            $file_info_shared[$file_info[$key]] = $null

        }        

    }

    $timestamp = (Get-Date).ToString("yyyy-MM-dd_HH-mm-ss")

    $csvFileName = "scan_report_$timestamp.csv"

    $csvFilePath = Join-Path -Path $PSScriptRoot -ChildPath $csvFileName

    $csvData = @()

    # generate report for each file

    foreach ($key in $file_info.Keys) {

        $fileName = $file_info[$key]

        $sensitivity = $file_info_sensi[$fileName]

        Write-Host $fileName $sensitivity

        $accessLog = $file_info_access[$fileName]

        $accessLog90days = $file_info_access_90days[$fileName]

        $permissionCount = $file_info_permission[$fileName]

        $scope = $file_info_scope[$fileName]

        $sharedWithOthers = $file_info_shared[$fileName]

        #  Check if the file is private, and no access logs belongs to others.

        $passPrivateAndNoAccessTest = Test-PrivateAndOthersNoAccess -permissionCount $permissionCount -accessLog $accessLog

        #  Check if the file has been shared by others, rather than by the owner.

        $passSharedByOthersTest = Test-SharedByOthers -sharedWithOthers $sharedWithOthers

        #  Check if the file is classified as 'confidential' or 'high confidential', but shared with 'organization' or 'anonymous'.

        $passConfidentialAndNoOrgScopeTest = Test-ConfidentialAndNoOrgScope -scope $scope -sensitivity $sensitivity

        #  Check if the file has not been used in the last 90 days, but still has permission settings.

        $passUnusedWithPermissionsTest = Test-UnusedWithPermissions -accessLog90days $accessLog90days -permissionCount $permissionCount

        #  Generate report based on check results

        $csvData += New-Report -fileName $fileName `

        -passPrivateAndNoAccessTest $passPrivateAndNoAccessTest `

        -passSharedByOthersTest $passSharedByOthersTest `

        -passConfidentialAndNoOrgScopeTest $passConfidentialAndNoOrgScopeTest `

        -passUnusedWithPermissionsTest $passUnusedWithPermissionsTest

    }

    $csvData | Export-Csv -Path $csvFilePath -NoTypeInformation

    Write-Host "Scan report saved to: $csvFilePath"

    $result

}

# SIG # Begin signature block

# MIIdKQYJKoZIhvcNAQcCoIIdGjCCHRYCAQExDzANBglghkgBZQMEAgEFADB5Bgor

# BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG

# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCCDpXpHnQ86TwC/

# saxB/hiv5UXkynhjwEIjdOis7jTsNKCCA0YwggNCMIICKqADAgECAhAdkYHz+qFO

# vkQjYqzHr3pKMA0GCSqGSIb3DQEBCwUAMDkxNzA1BgNVBAMMLkNvZGVTaWduaW5n

# IENlcnRpZmljYXRlIGZvciBQb3dlclNoZWxsIE1vZHVsZXMwHhcNMjQwNjEyMDUw

# ODAyWhcNMjUwNjEyMDUyODAyWjA5MTcwNQYDVQQDDC5Db2RlU2lnbmluZyBDZXJ0

# aWZpY2F0ZSBmb3IgUG93ZXJTaGVsbCBNb2R1bGVzMIIBIjANBgkqhkiG9w0BAQEF

# AAOCAQ8AMIIBCgKCAQEAwdSzTBb7ni0tRubblITxoGHzXlvwu8Y5ndoElOvIKaey

# AFW8+tYCPG5zATsoGGE3f8g6Wtv8JgEjH45ZOhRBjghEVpw/9Iszal5SmucjUlqB

# fMvts+M/x9G7h6GGAQFy65xgQqyCVJA10x2NDheb7cBRCRRZVkT+CUv1dbS41bsO

# BMKDUTumbU7vHk2FSJ5H6f31cj238qboI4g2GD2gIsWID+GhAfzxrmXMV6VgMKqW

# GNlK5g/X2tSM6Aygnx1itXrrV3LwDOYiAAs+j87jEsYhxe3CnFgtDsi4UtW/lFem

# eEiOh9Vd6LaTxNoleV/PGz3FU7t6nnZmIOsjOFWLHQIDAQABo0YwRDAOBgNVHQ8B

# Af8EBAMCB4AwEwYDVR0lBAwwCgYIKwYBBQUHAwMwHQYDVR0OBBYEFMTYcpJNvUO8

# TYpuvvHtzPkUUUmkMA0GCSqGSIb3DQEBCwUAA4IBAQAihkTQ6zo1SNboEZ2C5yXr

# Hf5FoMRFBij0o0drMYEwDbiVCNGXkk74nNqXnGm+CJ0jkPHkM35uC/JGGGyToyBF

# uC27hC6+WsTMlVlJZKr7N5WLaM97hwf5xtEWg1c1s0vLKx92AKSGgqJRU7rlRMaX

# 5oOROmFwLqMj15Oon73EhZNqpjfRsKgMxJJw03n6KwMNvzNTXlsiaS0mvAnFzKFp

# msuvtWJfp8fxHvEQckJzFr2EldNKKyTTZjbN5JfbQWZGIuxftYXZ0JKwXleZhNxZ

# MtkuHzjcpCoBgdIYI3FidWcZgUltoSLRZzM/iVLX6MAX2mjHQOBNWG/gOeZk28qo

# MYIZOTCCGTUCAQEwTTA5MTcwNQYDVQQDDC5Db2RlU2lnbmluZyBDZXJ0aWZpY2F0

# ZSBmb3IgUG93ZXJTaGVsbCBNb2R1bGVzAhAdkYHz+qFOvkQjYqzHr3pKMA0GCWCG

# SAFlAwQCAQUAoHwwEAYKKwYBBAGCNwIBDDECMAAwGQYJKoZIhvcNAQkDMQwGCisG

# AQQBgjcCAQQwHAYKKwYBBAGCNwIBCzEOMAwGCisGAQQBgjcCARUwLwYJKoZIhvcN

# AQkEMSIEIKEBPICYZLPFrWYrq4tcbEmFcBbPz0m9pGveHq12BIOAMA0GCSqGSIb3

# DQEBAQUABIIBAEZsniuVOKNtF6HSn/d7LHtenjpYpz0w6mjTBL+3fdsRxzK41F4N

# H++RczyPNsorJIpzEv8cj/HcPzoZ9CtLIus0RuxLXWgApRfNHq0okybmFCoq/HHy

# m9/mgNgCD6s6l6k9udYx5at89i08+nTAqOlQM2NFHTcisM08eQi6TFVUBoaEKEDI

# qSgWEeJoJ49If4utw6M3MIHvoqzahaYDfluNPC4QoWGF1wbcveVzMh9Pds9035Tl

# eJx0CyZ5HU1IT4NWRx0jXMZ4BlkFP8FhxwMsWABLbRfMYSpTdZK7ulZH2l799rXI

# FcRNASRvbxACpEvhouLhbBukpDn7JV++bgihghc/MIIXOwYKKwYBBAGCNwMDATGC

# FyswghcnBgkqhkiG9w0BBwKgghcYMIIXFAIBAzEPMA0GCWCGSAFlAwQCAQUAMHcG

# CyqGSIb3DQEJEAEEoGgEZjBkAgEBBglghkgBhv1sBwEwMTANBglghkgBZQMEAgEF

# AAQgchtypFijQmAru56XEeHoWeC6I5gkw/Y5s/A2coy7UvsCEEYRRywOkO1he2wU

# 6UEH4Z8YDzIwMjQwOTE0MDkyMzQxWqCCEwkwggbCMIIEqqADAgECAhAFRK/zlJ0I

# Oaa/2z9f5WEWMA0GCSqGSIb3DQEBCwUAMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQK

# Ew5EaWdpQ2VydCwgSW5jLjE7MDkGA1UEAxMyRGlnaUNlcnQgVHJ1c3RlZCBHNCBS

# U0E0MDk2IFNIQTI1NiBUaW1lU3RhbXBpbmcgQ0EwHhcNMjMwNzE0MDAwMDAwWhcN

# MzQxMDEzMjM1OTU5WjBIMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQs

# IEluYy4xIDAeBgNVBAMTF0RpZ2lDZXJ0IFRpbWVzdGFtcCAyMDIzMIICIjANBgkq

# hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo1NFhx2DjlusPlSzI+DPn9fl0uddoQ4J

# 3C9Io5d6OyqcZ9xiFVjBqZMRp82qsmrdECmKHmJjadNYnDVxvzqX65RQjxwg6sea

# Oy+WZuNp52n+W8PWKyAcwZeUtKVQgfLPywemMGjKg0La/H8JJJSkghraarrYO8pd

# 3hkYhftF6g1hbJ3+cV7EBpo88MUueQ8bZlLjyNY+X9pD04T10Mf2SC1eRXWWdf7d

# EKEbg8G45lKVtUfXeCk5a+B4WZfjRCtK1ZXO7wgX6oJkTf8j48qG7rSkIWRw69Xl

# oNpjsy7pBe6q9iT1HbybHLK3X9/w7nZ9MZllR1WdSiQvrCuXvp/k/XtzPjLuUjT7

# 1Lvr1KAsNJvj3m5kGQc3AZEPHLVRzapMZoOIaGK7vEEbeBlt5NkP4FhB+9ixLOFR

# r7StFQYU6mIIE9NpHnxkTZ0P387RXoyqq1AVybPKvNfEO2hEo6U7Qv1zfe7dCv95

# NBB+plwKWEwAPoVpdceDZNZ1zY8SdlalJPrXxGshuugfNJgvOuprAbD3+yqG7HtS

# OKmYCaFxsmxxrz64b5bV4RAT/mFHCoz+8LbH1cfebCTwv0KCyqBxPZySkwS0aXAn

# DU+3tTbRyV8IpHCj7ArxES5k4MsiK8rxKBMhSVF+BmbTO77665E42FEHypS34lCh

# 8zrTioPLQHsCAwEAAaOCAYswggGHMA4GA1UdDwEB/wQEAwIHgDAMBgNVHRMBAf8E

# AjAAMBYGA1UdJQEB/wQMMAoGCCsGAQUFBwMIMCAGA1UdIAQZMBcwCAYGZ4EMAQQC

# MAsGCWCGSAGG/WwHATAfBgNVHSMEGDAWgBS6FtltTYUvcyl2mi91jGogj57IbzAd

# BgNVHQ4EFgQUpbbvE+fvzdBkodVWqWUxo97V40kwWgYDVR0fBFMwUTBPoE2gS4ZJ

# aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0UlNBNDA5

# NlNIQTI1NlRpbWVTdGFtcGluZ0NBLmNybDCBkAYIKwYBBQUHAQEEgYMwgYAwJAYI

# KwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBYBggrBgEFBQcwAoZM

# aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VHJ1c3RlZEc0UlNB

# NDA5NlNIQTI1NlRpbWVTdGFtcGluZ0NBLmNydDANBgkqhkiG9w0BAQsFAAOCAgEA

# gRrW3qCptZgXvHCNT4o8aJzYJf/LLOTN6l0ikuyMIgKpuM+AqNnn48XtJoKKcS8Y

# 3U623mzX4WCcK+3tPUiOuGu6fF29wmE3aEl3o+uQqhLXJ4Xzjh6S2sJAOJ9dyKAu

# JXglnSoFeoQpmLZXeY/bJlYrsPOnvTcM2Jh2T1a5UsK2nTipgedtQVyMadG5K8TG

# e8+c+njikxp2oml101DkRBK+IA2eqUTQ+OVJdwhaIcW0z5iVGlS6ubzBaRm6zxby

# gzc0brBBJt3eWpdPM43UjXd9dUWhpVgmagNF3tlQtVCMr1a9TMXhRsUo063nQwBw

# 3syYnhmJA+rUkTfvTVLzyWAhxFZH7doRS4wyw4jmWOK22z75X7BC1o/jF5HRqsBV

# 44a/rCcsQdCaM0qoNtS5cpZ+l3k4SF/Kwtw9Mt911jZnWon49qfH5U81PAC9vpwq

# bHkB3NpE5jreODsHXjlY9HxzMVWggBHLFAx+rrz+pOt5Zapo1iLKO+uagjVXKBbL

# afIymrLS2Dq4sUaGa7oX/cR3bBVsrquvczroSUa31X/MtjjA2Owc9bahuEMs305M

# fR5ocMB3CtQC4Fxguyj/OOVSWtasFyIjTvTs0xf7UGv/B3cfcZdEQcm4RtNsMnxY

# L2dHZeUbc7aZ+WssBkbvQR7w8F/g29mtkIBEr4AQQYowggauMIIElqADAgECAhAH

# Nje3JFR82Ees/ShmKl5bMA0GCSqGSIb3DQEBCwUAMGIxCzAJBgNVBAYTAlVTMRUw

# EwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20x

# ITAfBgNVBAMTGERpZ2lDZXJ0IFRydXN0ZWQgUm9vdCBHNDAeFw0yMjAzMjMwMDAw

# MDBaFw0zNzAzMjIyMzU5NTlaMGMxCzAJBgNVBAYTAlVTMRcwFQYDVQQKEw5EaWdp

# Q2VydCwgSW5jLjE7MDkGA1UEAxMyRGlnaUNlcnQgVHJ1c3RlZCBHNCBSU0E0MDk2

# IFNIQTI1NiBUaW1lU3RhbXBpbmcgQ0EwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw

# ggIKAoICAQDGhjUGSbPBPXJJUVXHJQPE8pE3qZdRodbSg9GeTKJtoLDMg/la9hGh

# RBVCX6SI82j6ffOciQt/nR+eDzMfUBMLJnOWbfhXqAJ9/UO0hNoR8XOxs+4rgISK

# Ihjf69o9xBd/qxkrPkLcZ47qUT3w1lbU5ygt69OxtXXnHwZljZQp09nsad/ZkIdG

# AHvbREGJ3HxqV3rwN3mfXazL6IRktFLydkf3YYMZ3V+0VAshaG43IbtArF+y3kp9

# zvU5EmfvDqVjbOSmxR3NNg1c1eYbqMFkdECnwHLFuk4fsbVYTXn+149zk6wsOeKl

# SNbwsDETqVcplicu9Yemj052FVUmcJgmf6AaRyBD40NjgHt1biclkJg6OBGz9vae

# 5jtb7IHeIhTZgirHkr+g3uM+onP65x9abJTyUpURK1h0QCirc0PO30qhHGs4xSnz

# yqqWc0Jon7ZGs506o9UD4L/wojzKQtwYSH8UNM/STKvvmz3+DrhkKvp1KCRB7UK/

# BZxmSVJQ9FHzNklNiyDSLFc1eSuo80VgvCONWPfcYd6T/jnA+bIwpUzX6ZhKWD7T

# A4j+s4/TXkt2ElGTyYwMO1uKIqjBJgj5FBASA31fI7tk42PgpuE+9sJ0sj8eCXbs

# q11GdeJgo1gJASgADoRU7s7pXcheMBK9Rp6103a50g5rmQzSM7TNsQIDAQABo4IB

# XTCCAVkwEgYDVR0TAQH/BAgwBgEB/wIBADAdBgNVHQ4EFgQUuhbZbU2FL3Mpdpov

# dYxqII+eyG8wHwYDVR0jBBgwFoAU7NfjgtJxXWRM3y5nP+e6mK4cD08wDgYDVR0P

# AQH/BAQDAgGGMBMGA1UdJQQMMAoGCCsGAQUFBwMIMHcGCCsGAQUFBwEBBGswaTAk

# BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEEGCCsGAQUFBzAC

# hjVodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUcnVzdGVkUm9v

# dEc0LmNydDBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsMy5kaWdpY2VydC5j

# b20vRGlnaUNlcnRUcnVzdGVkUm9vdEc0LmNybDAgBgNVHSAEGTAXMAgGBmeBDAEE

# AjALBglghkgBhv1sBwEwDQYJKoZIhvcNAQELBQADggIBAH1ZjsCTtm+YqUQiAX5m

# 1tghQuGwGC4QTRPPMFPOvxj7x1Bd4ksp+3CKDaopafxpwc8dB+k+YMjYC+VcW9dt

# h/qEICU0MWfNthKWb8RQTGIdDAiCqBa9qVbPFXONASIlzpVpP0d3+3J0FNf/q0+K

# LHqrhc1DX+1gtqpPkWaeLJ7giqzl/Yy8ZCaHbJK9nXzQcAp876i8dU+6WvepELJd

# 6f8oVInw1YpxdmXazPByoyP6wCeCRK6ZJxurJB4mwbfeKuv2nrF5mYGjVoarCkXJ

# 38SNoOeY+/umnXKvxMfBwWpx2cYTgAnEtp/Nh4cku0+jSbl3ZpHxcpzpSwJSpzd+

# k1OsOx0ISQ+UzTl63f8lY5knLD0/a6fxZsNBzU+2QJshIUDQtxMkzdwdeDrknq3l

# NHGS1yZr5Dhzq6YBT70/O3itTK37xJV77QpfMzmHQXh6OOmc4d0j/R0o08f56PGY

# X/sr2H7yRp11LB4nLCbbbxV7HhmLNriT1ObyF5lZynDwN7+YAN8gFk8n+2BnFqFm

# ut1VwDophrCYoCvtlUG3OtUVmDG0YgkPCr2B2RP+v6TR81fZvAT6gt4y3wSJ8ADN

# XcL50CN/AAvkdgIm2fBldkKmKYcJRyvmfxqkhQ/8mJb2VVQrH4D6wPIOK+XW+6kv

# RBVK5xMOHds3OBqhK/bt1nz8MIIFjTCCBHWgAwIBAgIQDpsYjvnQLefv21DiCEAY

# WjANBgkqhkiG9w0BAQwFADBlMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNl

# cnQgSW5jMRkwFwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdp

# Q2VydCBBc3N1cmVkIElEIFJvb3QgQ0EwHhcNMjIwODAxMDAwMDAwWhcNMzExMTA5

# MjM1OTU5WjBiMQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkw

# FwYDVQQLExB3d3cuZGlnaWNlcnQuY29tMSEwHwYDVQQDExhEaWdpQ2VydCBUcnVz

# dGVkIFJvb3QgRzQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC/5pBz

# aN675F1KPDAiMGkz7MKnJS7JIT3yithZwuEppz1Yq3aaza57G4QNxDAf8xukOBbr

# VsaXbR2rsnnyyhHS5F/WBTxSD1Ifxp4VpX6+n6lXFllVcq9ok3DCsrp1mWpzMpTR

# EEQQLt+C8weE5nQ7bXHiLQwb7iDVySAdYyktzuxeTsiT+CFhmzTrBcZe7FsavOvJ

# z82sNEBfsXpm7nfISKhmV1efVFiODCu3T6cw2Vbuyntd463JT17lNecxy9qTXtyO

# j4DatpGYQJB5w3jHtrHEtWoYOAMQjdjUN6QuBX2I9YI+EJFwq1WCQTLX2wRzKm6R

# AXwhTNS8rhsDdV14Ztk6MUSaM0C/CNdaSaTC5qmgZ92kJ7yhTzm1EVgX9yRcRo9k

# 98FpiHaYdj1ZXUJ2h4mXaXpI8OCiEhtmmnTK3kse5w5jrubU75KSOp493ADkRSWJ

# tppEGSt+wJS00mFt6zPZxd9LBADMfRyVw4/3IbKyEbe7f/LVjHAsQWCqsWMYRJUa

# dmJ+9oCw++hkpjPRiQfhvbfmQ6QYuKZ3AeEPlAwhHbJUKSWJbOUOUlFHdL4mrLZB

# dd56rF+NP8m800ERElvlEFDrMcXKchYiCd98THU/Y+whX8QgUWtvsauGi0/C1kVf

# nSD8oR7FwI+isX4KJpn15GkvmB0t9dmpsh3lGwIDAQABo4IBOjCCATYwDwYDVR0T

# AQH/BAUwAwEB/zAdBgNVHQ4EFgQU7NfjgtJxXWRM3y5nP+e6mK4cD08wHwYDVR0j

# BBgwFoAUReuir/SSy4IxLVGLp6chnfNtyA8wDgYDVR0PAQH/BAQDAgGGMHkGCCsG

# AQUFBwEBBG0wazAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29t

# MEMGCCsGAQUFBzAChjdodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNl

# cnRBc3N1cmVkSURSb290Q0EuY3J0MEUGA1UdHwQ+MDwwOqA4oDaGNGh0dHA6Ly9j

# cmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEFzc3VyZWRJRFJvb3RDQS5jcmwwEQYD

# VR0gBAowCDAGBgRVHSAAMA0GCSqGSIb3DQEBDAUAA4IBAQBwoL9DXFXnOF+go3Qb

# PbYW1/e/Vwe9mqyhhyzshV6pGrsi+IcaaVQi7aSId229GhT0E0p6Ly23OO/0/4C5

# +KH38nLeJLxSA8hO0Cre+i1Wz/n096wwepqLsl7Uz9FDRJtDIeuWcqFItJnLnU+n

# BgMTdydE1Od/6Fmo8L8vC6bp8jQ87PcDx4eo0kxAGTVGamlUsLihVo7spNU96LHc

# /RzY9HdaXFSMb++hUD38dglohJ9vytsgjTVgHAIDyyCwrFigDkBjxZgiwbJZ9VVr

# zyerbHbObyMt9H5xaiNrIv8SuFQtJ37YOtnwtoeW/VvRXKwYw02fc7cBqZ9Xql4o

# 4rmUMYIDdjCCA3ICAQEwdzBjMQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNl

# cnQsIEluYy4xOzA5BgNVBAMTMkRpZ2lDZXJ0IFRydXN0ZWQgRzQgUlNBNDA5NiBT

# SEEyNTYgVGltZVN0YW1waW5nIENBAhAFRK/zlJ0IOaa/2z9f5WEWMA0GCWCGSAFl

# AwQCAQUAoIHRMBoGCSqGSIb3DQEJAzENBgsqhkiG9w0BCRABBDAcBgkqhkiG9w0B

# CQUxDxcNMjQwOTE0MDkyMzQxWjArBgsqhkiG9w0BCRACDDEcMBowGDAWBBRm8Csy

# wsLJD4JdzqqKycZPGZzPQDAvBgkqhkiG9w0BCQQxIgQgkULnedf2IsYQltOjszwQ

# WSx8GWZwWzQVFCeUZNyM8yAwNwYLKoZIhvcNAQkQAi8xKDAmMCQwIgQg0vbkbe10

# IszR1EBXaEE2b4KK2lWarjMWr00amtQMeCgwDQYJKoZIhvcNAQEBBQAEggIAiNtv

# 6HEFAV1S+g0iSHe+AalcchuIP4yJX2WnwzHWOkZ6ja/Y8QAxiPYSAG+WwFGuLH/s

# RJZaGHslzCRw/EwDS2CSz5cLIym/rpybnDEzThljqxtqI5ZMpeCr1hHbk790WsQK

# eS58SNRQccgQPjY85JsG0v6uoUQf/D9M3phvDo4txtU4nv8xKbhfBH9LJhgj/RGg

# 9VM01PsSh7AeDj+fzF1WMmByqOzTstCI8c7F0IAWuglTPAReWtdCYQqcJcDvdDht

# /rSXhYoUIwZTJnwE2kB/0HgVYs4A2zyUfxVPZTMgH08+Xl5kg4hgxiHrc5UQcvJ6

# 9UGsW35E4VyfNep3ObLDPY+lDl7o3ZKwaQcDJFk+mZGm2XAk1n4Wrsvw5cTRD4pp

# auTDsD9TdxDiWL7xjomvXVqcYhLW3ZBlXOyic27DKWmcvykZyQ0JDpJBU2kthX4m

# Uf1d6JmZPRj6I9rAJvQIPze5EZjiTArrFb3gb/B25XLdrWwarHAH+3y5Pjcoy6A7

# W8NgtAVQYuCxzQ5spqusIfkUrLeS/zSTQ+4mA9GTFWRXcEuIde287Tkli+8e+QY6

# IPQSCZQrKD8lPeQXyFjat3LWnN8GDf6pLM71iCyP/AKKuqhU8RhdOIAF5H1sWTjj

# 9gvjyeAnuXqtwOYgVg266jRnqFItxPb+gPP1iM8=

# SIG # End signature block