Merge pull request #1 from russelltomkins/Development

Promotion of 1.1 from Dev to Master

Create-CustomViews.ps1

@@ -1,7 +1,7 @@
 <#
   .SYNOPSIS
   Name: Create-CustomViews.ps1
-  Version: 1.0
+  Version: 1.1
   Author: Russell Tomkins - Microsoft Premier Field Engineer
   Blog: https://aka.ms/russellt
 
@@ -114,11 +114,12 @@ Write-Host "`nLaunch Event Viwer (eventvwr.exe) and expand Custom Views to use t
 # -----------------------------------------------------------------------------------
 # End of Script
 # -----------------------------------------------------------------------------------
+
 # SIG # Begin signature block
 # MIIgVAYJKoZIhvcNAQcCoIIgRTCCIEECAQExDzANBglghkgBZQMEAgEFADB5Bgor
 # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
-# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCB/VO02N+v+VSl0
-# tGwogDsaIxQJgmLZrzI643/DGEptCaCCG14wggO3MIICn6ADAgECAhAM5+DlF9hG
+# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCAXDgdxm3aFzoVL
+# hgb3gu8EfY2H+SedmACMawllGvu/iaCCG14wggO3MIICn6ADAgECAhAM5+DlF9hG
 # /o/lYPwb8DA5MA0GCSqGSIb3DQEBBQUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK
 # EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV
 # BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0wNjExMTAwMDAwMDBa
@@ -270,22 +271,22 @@ Write-Host "`nLaunch Event Viwer (eventvwr.exe) and expand Custom Views to use t
 # U2lnbmluZyBDQQIQDhlON30mOhkOirPIWrUoYzANBglghkgBZQMEAgEFAKCBhDAY
 # BgorBgEEAYI3AgEMMQowCKACgAChAoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3
 # AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEi
-# BCDvPhlrWcNxAtf3BIrQEncYTV52S01nj9Oz1M8Gex9xrDANBgkqhkiG9w0BAQEF
-# AASCAQC/ZN0OfQAI1xtaYtyjjohiK31f2wGlGsqAO+rO1fSUgYBLTHJEZ+OJZm0M
-# SyHi7fqWk5X1pjhKgvo8mf367gr9WxYH7nxaLKNeOnqKwP7yE0XDGQ8S0GDfcTTC
-# s87NZCgl6DmpqPnZPU6E57pd8Tq+lRdeIv4AZm6XHL1Me/vNkO1aqvkP5TCFw4ib
-# nR6WQsHRADZVDkWhyHiWtrO6Tt+rmh6xsPDvN25uXARIMOwFvlBCGR9dm6MwmaLS
-# 20z8VldFHCJHDKd9NfzVv+szr7bJmdyvHSTSaEyiZwtBMYBwyiYiqW+ubzcvzSn1
-# X7Mr8CvcEoYbMhPbttFLcFt33CgcoYICDzCCAgsGCSqGSIb3DQEJBjGCAfwwggH4
+# BCBex67HxE1Hfg/oybQqp3u7NxWsYfPmbeyDFdmp9QLb6jANBgkqhkiG9w0BAQEF
+# AASCAQAo9pkmzqtbDItB2kwOAfqA2Gh22Y4QoukhtrERJpiOaCsE4aNhO4eMu6pJ
+# Vcig5cVIiSdkMucGhsWJsvWgMNGnr3VFvwRvfwGI0PKb/XPbQANVzBrdFN1aoPTq
+# +b/FEaAMtMM6bQ792VHY2EhzMA8ISk1p0IdSCZ4RhaNPOFMXywOqnpeoQkaUO4dR
+# pRJN1CTPwwbI7QrGtWK9k4powpPQJ5EzD2L2HuxVPenBYM2ZlX8sT8B2hqfBbD0z
+# Z3o2i/a08w4mgXwShsFuk1Yc1Xb28HZ2ENTyVZ6Hv96mKWwuFnyUpTkIG6LMLNrx
+# R4HUEd63GKYyufFltxTcQhR2x7lZoYICDzCCAgsGCSqGSIb3DQEJBjGCAfwwggH4
 # AgEBMHYwYjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcG
 # A1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgQXNzdXJl
 # ZCBJRCBDQS0xAhADAZoCOv9YsWvW1ermF/BmMAkGBSsOAwIaBQCgXTAYBgkqhkiG
-# 9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNzAzMjgwMTE2NDBa
-# MCMGCSqGSIb3DQEJBDEWBBSwUtmsplyZO3TrepLeZXvznI26TTANBgkqhkiG9w0B
-# AQEFAASCAQAoFg9ZQPS0KlMkwPPjQgmmvpUeSnxC6Gj8vbr4kAwPo8EMo8OA1P4v
-# JTI52L2/AB2JLTEVXknyVqEalx3yjSdutSi81aER0sgrZYca+dC2Mb8jQ3hyQtBh
-# ZIeOHsUBlVZNbX5IrDsBg2czk57qFjUf5HA9IgWhipFR3jVM8SmUgZ/4KpBIlRpq
-# thgSAhlvQxo6jSWmd27crnb9ODMKxd+aSuiUfIthD2nD5ziTwiZgdAuWy0cLMHR1
-# klxgX611h6r3q+z+/zRuT6EoKw8QR8KGx7PvBTNqq6bTg0hJGj3IiDxb+qTmMZ/W
-# IH0mdI4Vyi8hVMeiDxSS8ev7dnHBWmBn
+# 9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNzA0MDYxMjAwNTBa
+# MCMGCSqGSIb3DQEJBDEWBBQjjsKnRRahp8E/oxtMOCizmT6raDANBgkqhkiG9w0B
+# AQEFAASCAQAevhz5h1IaLpwLxoy4lKJ9KbOCHYS5afAlHms7cOSyTBF6wPtErp1+
+# dlKQePXSPQjEnVuunbACbjZ1M1sCRdECPXTxZJN/c6OVE6PzgMLqXukzttdAeF0I
+# JMAv5LTt9mPBb0/Ix4t4YxpZahuIXAj1fp7Kbv+v6//+NidRNs0VPbhgIuBv9CVB
+# 94ugKQWHu3fVPmRMTY7k5Grx/XsXBjQxQbVD7tAAizOAaCFioavYMfR9EsDu+lWA
+# NbBe7BwayCqvyM/TMlKtvh+DIhDortznbJiUT04FKcWSDhn22xUflmt0UTvm5Z0b
+# zStCeO2xNPsL24raX38FXEAanBBlVkx0
 # SIG # End signature block

Create-Manifest.ps1

@@ -1,7 +1,7 @@
 <#
   .SYNOPSIS
   Name: Create-Manifest.ps1
-  Version: 1.0
+  Version: 1.1
   Author: Russell Tomkins - Microsoft Premier Field Engineer
   Blog: https://aka.ms/russellt
 
@@ -75,7 +75,7 @@ $XmlWriter = New-Object System.XMl.XmlTextWriter($CustomEventsMAN,$null)
 # Set The Formatting
 $xmlWriter.Formatting = "Indented"
 $xmlWriter.Indentation = "4"
- 
+
 # Write the XML Decleration
 $xmlWriter.WriteStartDocument()
 
@@ -147,8 +147,8 @@ Write-Host "`t `"c:\windows\system32\wevtutil.exe`" im `"$DLLPath\$BaseName.man`
 # SIG # Begin signature block
 # MIIgVAYJKoZIhvcNAQcCoIIgRTCCIEECAQExDzANBglghkgBZQMEAgEFADB5Bgor
 # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
-# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDhYO0kNTmXVg0X
-# zaC712EQ0yI3b4zJw4t2ZLNHGqcAVqCCG14wggO3MIICn6ADAgECAhAM5+DlF9hG
+# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCClCmr0opDAE+lP
+# 3KmO1Yo/zh3Uyu3u6vT24xFcxuNZ9aCCG14wggO3MIICn6ADAgECAhAM5+DlF9hG
 # /o/lYPwb8DA5MA0GCSqGSIb3DQEBBQUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK
 # EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV
 # BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0wNjExMTAwMDAwMDBa
@@ -300,22 +300,22 @@ Write-Host "`t `"c:\windows\system32\wevtutil.exe`" im `"$DLLPath\$BaseName.man`
 # U2lnbmluZyBDQQIQDhlON30mOhkOirPIWrUoYzANBglghkgBZQMEAgEFAKCBhDAY
 # BgorBgEEAYI3AgEMMQowCKACgAChAoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3
 # AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEi
-# BCCRpix1a9H9IuIAPHIvplTdngpCzd5n+hDOLgWgyMhw6TANBgkqhkiG9w0BAQEF
-# AASCAQAH3XZhlPwmFx6pGRieaqnVDTbha0w/Cx0QoENcMgmiyRtlm/UdDvObYgex
-# U924uBjnW0rw4C/bRZx5KUfWdke8pVgwZScMNMSPAefgO0AacYArQEpqz4CUhjrD
-# 09Qbl5oRU3grRIxcxCdPxCEm2a/obBina+RjIhCWHBiu7KYdv/kgvnj3r/oSGqSa
-# XYBPwNuLJyT/gGbUZas21FzkjNo0en1lMZRMlWMOi8s2IC9XSxIAECY+bMCQ5oPM
-# L27Gh2GAs++jD2lisl4eWAj0Taei9pU6dBKPPYx0KeLJBt93HoEP3336dsGYK/Vx
-# BwkXYHnc/xiRYlYQ/S7+1x/vpOO7oYICDzCCAgsGCSqGSIb3DQEJBjGCAfwwggH4
+# BCAgSxj3/sCjD2c91lGljGzSQSzSR6JpgbNciSzyWDcFwjANBgkqhkiG9w0BAQEF
+# AASCAQBOZx7FjhF/9BDJADEUgdaXB3tRpnCT9wLLby/LsBNI3Zcq2//ujc4ltmbt
+# i1+fg2IT7nt/IWYS0s/XSMi4DQ0rdT3a/WeMIaQBa7zxytlqUFOmBdMoDc3AB/Nh
+# l4sYYFwSHwWRDhNeNXZ+cb5+GjSBPn9Yy1sRxgC/Uap0VW9e1zRWDJtxpxG9ppWN
+# pEZa8EMdS5s0TNV8bOI3XGu4uUnX5gUSyia1ISc9vls8Lb0wZFqk2wUz1sU2mTep
+# 9n01bXJa0w+N2hunlVWXQUVLWwdU+9BkbS9gprUV4/5zZwqdgzT7aSonEn9U3HDw
+# lM5ZkozbE15nP+qTDQ1wTzUvHELvoYICDzCCAgsGCSqGSIb3DQEJBjGCAfwwggH4
 # AgEBMHYwYjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcG
 # A1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgQXNzdXJl
 # ZCBJRCBDQS0xAhADAZoCOv9YsWvW1ermF/BmMAkGBSsOAwIaBQCgXTAYBgkqhkiG
-# 9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNzAzMjgwMTE2NDJa
-# MCMGCSqGSIb3DQEJBDEWBBQ7hxrw8PNruzC2Y6MFb8hquPF8sDANBgkqhkiG9w0B
-# AQEFAASCAQBPNKdmjU0j4DjdN5P50QtNe9WSGSzEv2aoPo8GQtTKtLqotJk6/uu3
-# kQu02FlZbEIpf0AFv6MK+5KWBj69XIr55f/T6cHi6GC3dLdaGWAh7k6HXcQbxGw7
-# 4V/15spMTCWXSwDOspmbmNI/qhGbGXaCHfKnNi+Kao3t8UGFleNIleQwHXtZbnbN
-# QT/vIjimsuLEaEUsiUjAtNdkeNdjsQn4a+v+mdYIxwYbRhqYAXYkqSo9MjevuFpY
-# ccZ1t+kZao11yECnBb2pzfbGnEDy3ny8nfY+gXIVPn654yRmqboTcF5pdiHXEwrd
-# u79Zxxv4+rPqCah/Gcqtpyw67cKtdCMi
+# 9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNzA0MDYxMjAwNTFa
+# MCMGCSqGSIb3DQEJBDEWBBQFcCtVgUTgayMN3C3fDrfJxF1SLDANBgkqhkiG9w0B
+# AQEFAASCAQChXxUj0qqDiQZlu0wRdPa/3YLpxT5gORcPNBKkUt7oUTIOzZGytfxN
+# RJFjm40NAPqgEGcdEkDH6WMzZ7eEpE2T96l9d8d5nn3hbyr+OfWGvSJ81WRQ6P0W
+# Gzx9448EEkWa7vTHXSCwVcLFWtYIXGP1o/Ijo94tplLrAR4tYWIrql+ECuy0AEVZ
+# uAfZWdKsZTO43yzAvj/7sODAp2ZrTSnuL7tcGZW9i+7vGuAKOVNPQx6kUd+DsI7+
+# Kz7rchZdZjmcgfmhWnH3RMDxTxTDC8E8waHELEfmpJCEEMhcmE5EiJhUaVcnfQj6
+# Lxy7VK+G+/tXwAaOXcWA2YaQ21HShPW8
 # SIG # End signature block

Create-Subscriptions.ps1

@@ -1,27 +1,28 @@
 <#
   .SYNOPSIS
   Name: Create-Subscriptions.ps1
-  Version: 1.0
+  Version: 1.1
   Author: Russell Tomkins - Microsoft Premier Field Engineer
   Blog: https://aka.ms/russellt
 
-  Bulk creation of Windows Event Collection Subscriptions from  input CSV
+  Bulk creation of Windows Event Collection Subscriptions from an input CSV
   Source: https://www.github.com/russelltomkins/ProjectSauron
 
   .DESCRIPTION
   Leverages an input CSV file to bulk create WEC subscriptions for event delivery
-  to dedicated custom event channels
+  to dedicated custom event channels. Subscriptions are imported by disabled by default.
+  Use the -NoImport and -CreateEnabled switches to override the behaviour.
 
   Refer to this blog series for more details
   http://blogs.technet.microsoft.com/russellt/2017/03/23/project-sauron-part-1
 
   .EXAMPLE
-  Create, Import and Enable the WEC subscriptions.
+  Create and Import the WEC subscriptions (disabled by default)
   Create-Subscriptions.ps1 -InputFile DCEvents.csv 
   
   .EXAMPLE
-  Create, Import but don't enable the WEC subscriptions
-  Create-Subscriptions.ps1 -InputFile <inputfile.csv> -CreateDisabled
+  Create, Import and force enable the WEC subscriptions
+  Create-Subscriptions.ps1 -InputFile <inputfile.csv> -CreateEnabled
 
   .EXAMPLE
   Only create the WEC subscription files, do not import them.
@@ -30,14 +31,11 @@
   .PARAMETER InputFile
   A CSV file which must include a ChannelName, ChannelSymbol, QueryPath and the xPath Query itself  
   
-  .PARAMETER LogRootPath
-  The location of .evtx event log files. Defaults to "D:\Logs"  
-
-  .PARAMETER OutputFile
-  The location of the output subscription .xml files. Defaults to "D:\Logs"  
+  .PARAMETER OutputFolder
+  The location of the output subscription .xml files. Defaults to "\Subscriptions" under the current folder
   
-  .PARAMETER CreateDisabled
-  Creates and imports the subscriptions, but does not enable it
+  .PARAMETER CreateEnabled
+  Creates and imports the subscriptions but enables them immediately.
 
   .PARAMETER NoImport
   Creates the subscriptions files, but does not import them
@@ -69,49 +67,41 @@
 [CmdletBinding()]
     Param (
     [Parameter(Mandatory=$true)][ValidateNotNullOrEmpty()][String]$InputFile,
-    [Parameter(Mandatory=$false)][String]$LogRootPath="D:\Logs",
     [Parameter(Mandatory=$false)][string]$OutputFolder=$PWD,
-    [Parameter(Mandatory=$false)][Switch]$CreateDisabled,
-	[Parameter(Mandatory=$false)][Switch]$NoImport)
+    [Parameter(Mandatory=$false)][Switch]$CreateEnabled,
+    [Parameter(Mandatory=$false)][Switch]$NoImport)
+
+# Configure and Start the Windows Event Collector Services except if we are not importing.
+If (!($NoImport)){
+	# Prepare and Start the Windows Event Collector Service
+	$WECService = Get-Service "Windows Event Collector"
+	$WECService | Set-Service -StartupType "Automatic"
+	$WECService | Start-Service
+}
 
 # Import our Custom Events
 $CustomChannels = Import-CSV $InputFile
 
-# Create and ACL the Log Roots Folder to allow Network Service access.
-If(!(Test-Path $LogRootPath )){New-Item -Type Directory $LogRootPath}
-$ACE = New-Object System.Security.AccessControl.FileSystemAccessRule("NETWORK SERVICE",'Modify','ContainerInherit,ObjectInherit','None','Allow')
-$LogRootPathACL = (Get-Item $LogRootPath) | Get-ACL
-$LogRootPathACL.AddAccessRule($ACE)
-$LogRootPathACL | Set-ACL
-
 # Loop through Chanel in input events.
 ForEach($Channel in $CustomChannels){	
 
 	# --- Setup the Event Channels ---
 	# Bind to the Event Channel
 	$EventChannel = Get-WinEvent -ListLog $Channel.ChannelName
 
-	# Disable the channel to allow changes
-	If ($EventChannel.IsEnabled) {
-		$EventChannel.IsEnabled = $False
-		$EventChannel.SaveChanges()
+	# Do not proceed if we are importing and the logs are still disabled.
+	If(!($NoImport)) {
+		If (!($EventChannel.IsEnabled)) {
+			Write-Host "Error: Event Channel is not Enabled" -Foregroundcolor "Red" -BackGroundColor "Black"
+			Write-host "Execute `"Prepare-EventChannels.ps1`" to configure them prior to creating event subscriptions"-Foregroundcolor "Red" -BackGroundColor "Black"
+		Exit
+		}
 	}
 
-	# Update the channel to our requried Values
-	$NewLogFilePath = $LogRootPath + "\" + $Channel.ChannelSymbol + ".evtx"
-	$EventChannel.LogFilePath = $NewLogFilePath
-	$EventChannel.LogMode = "AutoBackup"
-	$EventChannel.MaximumSizeInBytes = 1073741824
-	$EventChannel.SaveChanges()
-
-	# Enable the Log
-	$EventChannel.IsEnabled = $True	
-	$EventChannel.SaveChanges()
-
 	# --- Create the Subscription XML's
 	# Pre-pend the current Folder path and create the SubFolders
 	$SubscriptionNamePath = $OutputFolder + "\Subscriptions"
-	If(!(Test-Path $SubscriptionNamePath)){New-Item -Type Directory $SubscriptionNamePath}
+	If(!(Test-Path $SubscriptionNamePath)){New-Item -Type Directory $SubscriptionNamePath | Out-Null}
 
 	# Create our new XML File	
 	$xmlFilePath = $SubscriptionNamePath + "\" + $Channel.ChannelSymbol + ".xml"
@@ -131,11 +121,11 @@ ForEach($Channel in $CustomChannels){
 	$xmlWriter.WriteElementString("SubscriptionId",$Channel.ChannelSymbol)
 	$xmlWriter.WriteElementString("SubscriptionType","SourceInitiated")
 	$xmlWriter.WriteElementString("Description",$Channel.ChannelName)
-	If($CreateDisabled){
-		$xmlWriter.WriteElementString("Enabled","false")
+	If($CreateEnabled){
+		$xmlWriter.WriteElementString("Enabled","true")
 	}
 	Else{ 
-		$xmlWriter.WriteElementString("Enabled","true")
+		$xmlWriter.WriteElementString("Enabled","false")
 	}
 	$xmlWriter.WriteElementString("Uri","http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog")
 	$xmlWriter.WriteElementString("ConfigurationMode","Custom")
@@ -183,6 +173,7 @@ ForEach($Channel in $CustomChannels){
 
 	# Import the subscription to the server
 	If(!($NoImport)){
+
 		# Import the subscription to the server
 		$command = "C:\Windows\System32\wecutil.exe"
 		$action = "create-subscription"
@@ -192,18 +183,19 @@ ForEach($Channel in $CustomChannels){
 
 # If we didn't import, write out how to import manually
 If($NoImport){
-	write-Host "Event Channels updated with required settings"
 	write-Host "Subscription files located at $SubscriptionNamePath"
-	write-host "Import with wecutil.exe create-subscription <subscription-name>.xml"}
-
+	write-host "Import with `"wecutil.exe create-subscription <subscription-name>.xml`""}
+Else{
+	write-Host "Event Channels created and imported. Use Event Viewer to enable subscriptions."
+}
 # -----------------------------------------------------------------------------------
 # End of Script
 # -----------------------------------------------------------------------------------
 # SIG # Begin signature block
 # MIIgVAYJKoZIhvcNAQcCoIIgRTCCIEECAQExDzANBglghkgBZQMEAgEFADB5Bgor
 # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
-# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCC0Osw/1T4Td6An
-# uktM5rKr0UFEp2V+3sHBob/Pz2ZvRKCCG14wggO3MIICn6ADAgECAhAM5+DlF9hG
+# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCDmRTCSV+qfcL+6
+# pOqLspQirwP7zaAf9qnDaQCuzmm48qCCG14wggO3MIICn6ADAgECAhAM5+DlF9hG
 # /o/lYPwb8DA5MA0GCSqGSIb3DQEBBQUAMGUxCzAJBgNVBAYTAlVTMRUwEwYDVQQK
 # EwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xJDAiBgNV
 # BAMTG0RpZ2lDZXJ0IEFzc3VyZWQgSUQgUm9vdCBDQTAeFw0wNjExMTAwMDAwMDBa
@@ -355,22 +347,22 @@ If($NoImport){
 # U2lnbmluZyBDQQIQDhlON30mOhkOirPIWrUoYzANBglghkgBZQMEAgEFAKCBhDAY
 # BgorBgEEAYI3AgEMMQowCKACgAChAoAAMBkGCSqGSIb3DQEJAzEMBgorBgEEAYI3
 # AgEEMBwGCisGAQQBgjcCAQsxDjAMBgorBgEEAYI3AgEVMC8GCSqGSIb3DQEJBDEi
-# BCDk1IB2qVR9RaXlfijXEmFLt+9dHQ5rQkHDcaX4FmgzfjANBgkqhkiG9w0BAQEF
-# AASCAQByFSrKaw/KQws3vuIHuFkP8ed1mb/ZKExVBKACbvX8d5XjZXLfQMtWXKtP
-# wsRV2vDpsDJRzE5iqjpGNwRTMflRprkwU0MgpFpZd3VzUX+9PlXPUin/H07Ik8Kv
-# djn7YzppOMvx7UTeBbMLhMJPJsnaISyffCgeBtEU1zi1I0Fkwy3fUS8Q4A3klQJd
-# pWhgUr9esMMr7YQo0z58T4Qhz4EZyLSyrxKhwuxg+belv6/dClgqxdXB9cqge3/2
-# J14Pkp2ih2VJy6w+oKfu0G4dp1C/Neh/zzNsjGx5YfwYo1yQKnHnp4YZ9X/oNrwH
-# DJooWpB+uwngpFsyd3LKFm1tErhAoYICDzCCAgsGCSqGSIb3DQEJBjGCAfwwggH4
+# BCBdRdQcl3uoARDQBCqg/cwdZleMA9onGTt8ho1IDiiCqDANBgkqhkiG9w0BAQEF
+# AASCAQB82JthTsuUn9nAfJm4u94njOdCcya64ThMcwTw6gjtOMmW8lys7gnoxCvB
+# hOBF+DVlOcBp0LUMN4yYZM8M9HxSjZTdQ0efzcEQZRfnhF5MvRyWSwnfG+dhaC2U
+# 26WTx3F9CPiJhZlbbC13jcZmlkGmP+5tY7kXnn+QTIqO9KO4Se9BYkRR8u4lH5JS
+# 3NwEzvyWauHblG5jpAY6gGGb63xl/bC1lc2NEkcRwE+bkPjPyp8k4P4CjGsseouJ
+# VuLqLv8PP2nk1SAoYzTPj3qPLPhi9UuLV9rk4AWTLPbro1qbrGim0LAS9ccKknBG
+# 9NCZa6tmIVjcW5Lql7UKsjmn6wlnoYICDzCCAgsGCSqGSIb3DQEJBjGCAfwwggH4
 # AgEBMHYwYjELMAkGA1UEBhMCVVMxFTATBgNVBAoTDERpZ2lDZXJ0IEluYzEZMBcG
 # A1UECxMQd3d3LmRpZ2ljZXJ0LmNvbTEhMB8GA1UEAxMYRGlnaUNlcnQgQXNzdXJl
 # ZCBJRCBDQS0xAhADAZoCOv9YsWvW1ermF/BmMAkGBSsOAwIaBQCgXTAYBgkqhkiG
-# 9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNzAzMjgwMTE2NDZa
-# MCMGCSqGSIb3DQEJBDEWBBT9yDxcEWrXneHdE8PrXR3ZC/CcrDANBgkqhkiG9w0B
-# AQEFAASCAQBMCoNP712CMHL+XJV/OIkJrpashiwLxFPL6KKyggEfcKwRA5k2zNSz
-# Mt3B8UiOyl9Qocmxex7T0rwGxRxrcSgFYlKwSngdAKqABTzApFaXzZ6NAhn9eJAd
-# zYql9frJD2sAam9My5MhMoGqwbYlKlLlTas1j/maimIZm9/JGgpLqKOBxxKRjF+G
-# O+RXU38IZW0DjL64UAKXzB/C9Ybns3R2JYzhwdy5fxGnKb4JLVsV6IiM/oLtAMv9
-# Y2FgI9pz0CU6NGsM/eo1thaMNcN3zU2CpcOryiLEHH51t3z5O53aZ5oXHLBG6c5Q
-# xGQyvvmL3sBDQcpl/SfhASHvTwlkLdCw
+# 9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNzA0MDYxMjAwNTNa
+# MCMGCSqGSIb3DQEJBDEWBBQUSafeu49EHQNcvAKNKKEXcURbrjANBgkqhkiG9w0B
+# AQEFAASCAQBt8bsMZ+lx7gSEFFX1I3cRmEsv7JmDxsE8z/SJDd/l9Ua2Tf6hnTnl
+# U6hhIV7VQAEDLq9CaATkug3QjykqDYRWOWHAKZz3ngSulxfN/AQLrZP1tLByxfxW
+# 8pCinR0sIO+jggioo1EcMJeajEEtUrWJU/280MWcEgs8ghlQedfoDPMxxoWwBZv9
+# 2ovdiXp4qTkvq0bMEt/p19doeYeQJC68cFUob2l3MN4bvkFW1AmrmhuRvr3VckY+
+# GglJxeANfnFKHHwjsi6WEWzNY2m7SJUwuaF7PrcAi2eNq9t2rMUpQrBts6xlfrbw
+# 9lOStks/uV58iNSRQfFxEqX1lSHbkO5O
 # SIG # End signature block