Apache 发布
Log4j 2.16.0 了解决此漏洞的问题(更新了:12/14)。我们建议将此更新应用到受影响的系统,并查看您环境中的相关
Log4j 配置,以确定可能受此漏洞影响的潜在工作流。对于第三方应用程序,请与应用程序供应商联系,以了解执行此操作的步骤。
有许多方法都观察到了攻击者可以使用
Log4Shell 的地方。此漏洞具有广泛的范围和规模,并且从风险上 inoculated 的唯一明确的方法是同时应用供应商更新和查看应用程序配置。这些操作可确保根据 Apache 的建议缓解漏洞。与所有主要的零天一样,最佳的安全做法是假设您已经过扫描、正在进行定向,并应用具有绝对优先级的补救或缓解步骤。我们正在努力提供此威胁的 tirelessly,并确保安全管理员在评估其环境时在调查中启用。
Trellix 产品是否受此漏洞的影响?
我们要查看产品组合中的所有产品,以评估其潜在影响和对客户的风险。在2021年12月13日,我们发布了正式的安全/Security 公告,向客户提供有关受此漏洞影响的产品的指导。其目标是概述不包含
Log4j 组件的产品,或不存在风险的产品。
有关您的环境中的产品是受影响、解决方法和缓解步骤以及其他产品相关信息的信息,请参阅 "Log4Shell" (
CVE-2021-44228、cve-2021-4104、cve-2021-45046、cve-2021-45105 和 cve-2021-44832)的 SB10377 注册-安全/Security 公告产品状态。
注意:所引用的内容仅可供已登录的 ServicePortal 用户使用。 要查看内容,请单击该链接并在出现提示时登录。
将继续提供更新,因为它们变得可用。
要在更新本文时收到电子邮件通知,请单击 订阅 位于页面右侧。您必须登录后才能订购。
Trellix 产品解决方案如何帮助?
我们始终建议您,最好的做法是确保软件和操作系统在可用更新和安全更新发布时一直保持最新状态。我们还建议根据适合您的环境的入门级威胁评估和实施一般对策。有关详细信息,请参阅
KB91836-针对条目矢量威胁的对策。这些方法中很多,在未解决漏洞本身的情况下,可能会严重抑制演员的利用漏洞攻击能力,并为安全管理员提供相应响应的可见性。
我们将在我们的安全解决方案阵容中评估产品覆盖范围。本文将根据可能的覆盖范围机会和对策予以更新。
当前可对以下组件使用产品功能:
检测和响应:
Endpoint Security (ENS) ExtraDAT 、专家规则进程内存扫描触发器:
有关此覆盖方法的详细信息,请参阅
Log4J 以及知道过多博客 文章的内存。
我们开发了一种解决方案,使管理员能够识别和响应在其环境中利用 CVE-2021-44228 的活动尝试。此解决方案是一种双折叠方法。利用 ENS
10.7.0 2020 11 月更新(发行说明)和更高版本中的专家规则的功能,通过调用目标进程的按需内存扫描来响应触发器。此方法需要对端点应用两个先决条件:
- 您必须在本文的 "附件" 部分应用提供的 ExtraDAT 内容,以提供按需内存扫描的内容,以检测 JNDI 进程内存中的相关字符串。
重要说明: 12月21日,存档 EXTRA2.zip 中的本文中添加了一个新的新 ExtraDAT 版本。有关详细信息,请参阅下面的 "调整环境的专家规则" 部分。
- 您必须在 ENS 漏洞利用防护策略中实施 专家规则 ,并将其设置为仅 报告 。专家规则不会仅仅提供足够的保护来实现数据块容量的价值,因此风险可能会与您环境中的合法进程发生冲突。如果将规则设置为仅 报告 ,确保在违反规则时触发按需内存扫描,而不会冒非有意的阻止。
注意:
- 对此配置进行全面测试,以确保规则完整性并防止任何潜在冲突,这一点非常重要。一旦测试确认该规则对您的环境可行,建议客户将此机制应用到 Windows 服务器平台,其中基于 Java 的应用程序可能会暴露给来自 internet 的网络连接。例如,Apache Tomcat、弹性搜索服务器等。这样做可以降低误报的可能性,以及这些结果可能需要的其他优化措施。不建议将此内容应用到常规用户 Windows 工作站。
- 我们正在查看选项,以使此内容也可供 MVISION 客户使用。订购本文,以便在进行更新时得到通知。
- 此配置会导致在检测到潜在恶意行为时生成两个事件。第一次检测反映漏洞利用防护规则触发器。第二个检测反映的是按需内存扫描检测潜在的恶意行为。如果仅收到第一个事件,则内存扫描不会识别进程内存中的任何恶意 JNDI- 相关字符串。如果收到第二个事件,表示按需内存扫描检测到进程内存中的 JNDI- 相关字符串,则 管理员必须立即对确定的系统采取措施。
- 下面的图像描述了两种不同的可能检测威胁类型的示例。记下威胁类型 Trojan ,威胁来源进程 "按需扫描。" 此事件类型为第二阶段事件,表示管理员必须立即采取措施。
![Detection threat types](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABAgAAABdCAYAAAAolVRNAAAgAElEQVR4nOydd3Rcx3W4P2xBW5RF7yAKCXaAvXeKRRKpLqu7RLYjO07iOPk5thMrduIoiaPIsiVLlm3JkihSnV1i7wRBEgSITvTee1kAu9jF7u+Phx1i0UECJCXNdw7PIV6ZuTtv3p07996Z55RVXGsLD9Qj+WJhs9lIzatk4YyI2y2KREJ7p5HapnbiIgNvtyjjprqhDYDQAO/bLMmdR3N7J60dRmLC/G63KLeMyvpWNGoVwX5et1uUUalpbMdqsxIWIMfwLzrN7V20dnQRE+Z/u0WR3GIuZZWydE7U7RZDchvIK6sjNECPp7vLLa87o7CaGVOCcNaqb2m9V/MqiZ8WilqlumV1puVXMic2FI361tX5RUe2lEQikUgkEolEIpFIJBLpIJBIJBKJRCKRSCQSiUQiHQQSiUQikUgkEolEIpFIkA4CiUQikUgkEolEIpFIJEgHgUQikUgkEolEIpFIJBKkg0AikUgkEolEIpFIJBIJ0kEgkUgkEolEIpFIJBKJBOkgkEgkEolEIpFIJBKJRMJNOghKK2uoaWiaKFkktxBTTw+p2fm3WwyJZExcTs+h12q93WKMm16rlcvpObdbDMkdTnlNHVV1DbdbjDFRXddIWXXt7RZjVJpb28kvqbjdYtwyqusbKa2685+LZGKxyjFGIpFMAprRLjh89tKQx6PDQ7h6rQA/vRchAX4TLpipp4fkjFxWLYofdO5aUSllVXVD3rd1zdIJl+WLSkZeEdV1jYOOa9Rq5s2ayoefn2TB7LhJqftSeg6zp0Xj4e426FxzWzullbWi7oLSClycnYkMDZoUWSR3DscvXMFi6QXA3c2FNYvnjem+t3cfImHmNNTOY/dpXkzLprXdAMCW1UvotVo5nnhFnA8O8GXezGljKqvHbOZkUqr4OzTIn/jpsaPeZ7FYeHvPYZYkzBqz3KDoXbsua+swkF9ayeK5M8ZVxq3k8LlLbF19a3Vv/7HJy0PHigVzbmn9oExCy6rrmD9rbP1oOK5k5uLi7ExYUMAESTaYdkMnecXlLI6feVPlZOQVYejqZkpo8ARJNjI1DU2kXysUf8+JiyE8ePR2Kqms4XLGNeKiI8Zc18A2Kq6oxgmIjggdt9yTQX/92Z+QAD/qmlpoaWsnKmxynsvxxCvctXLRsOezC0qoqKkHYMWCOXh56CZFjvHQZTRy9nK6+DsiJJDZ06Jvo0Q3Rm5xGaWVQzt/NixfwNu7D417jBkrV3PymRIajK/ey+G4qcfMqYupQ94zc+qUSdMPnd1GMnILWT5/aH2fmp1PfVOL+HvTqsWoVXdmsnRGXhFtnRZCA/Rjur6ksgabzUZMP310ITWLebOm4u7qCsCJpBQ2Ll84oXIWlFZSVF4FwKK50/H3GZu8N0pZdS3XCsuGPLd+2QJcnLUTXmd5TR05BaVDnlu3dD6uLs4TXidASUU1NnB4pv3pb1u1thsoLK9k0ZxbYwuO+tYYuroxdHVTVdfAZ6eTxN8ms3lSBes2mth7/NyQ54wms5Bj/8lEahqaxN+S6xhNPaJdPj1yhqbWNgxd3XR2T347HTpzkdb2jiHP1TW28N6+oyRn5gKQmlNAbnH5pMskuf28f/C46JP1Ta2cSEqZtLq6uo18cuQ0Ta3tgDLJ/+jQKVF/UXkVKdl5YyrLaOrhkyOnxb35JRVczSmYNNnf3n2IfcfPA9DY0sax88mTVtdE8O6ew7e8znf2HBLPo7q+kbPJ6aPfNIG0ths4kZRCcUUVKVlj60e3i85uI0fOXaasuo6Ladm3W5xxUVJRzbkr6eJZX0rPHtLxPRE0tbazY99R0UaZecVkFZRMSl03QmeXEUNXN81t7Xx8+LouM/b0THrdOw8cG/ZcZn4x14rKhDzHEpPp7DZOukyj0WHoYt+J80Ku3OIysvKLb7dY48bUz+Y9eOoC1fWNt8zmPXXxKrWNzYOO22w2IUNBWSUnL6aKv81my6TJ02Ho5OCppGHPn0xKobSqRsiy99jZSZPlZjl/JYPK2voxXVtaWcOVzFxSs/MprqgWxw+euoChU+kHNpuN9w8cn1AZC0orSc8tFO155nIazX021WRhNltEfacuppJfWiH+ttlsk17n6ctXySspn/Q6QdGdmXnD66R3dh/mwMlEABqaWx2CXJPNqBkEj2xdB0B5dR1VdY3ib4CcwlIupmVT1TdYb1u/An8fbwDe2X2Ix7fdxWenL/DQ5rVU1zVyNFExcuOnxzpErg+fvSQU0NP3b8bJyYkPPz9Ja7uBt3cfIiIk0MEjNn/WNBGxSb9WyNY1S0UWw879x3jqvk00t7aTnJnLltVLyC+p4MLVLHH/uqXzHbzsO/cfw2yx4OrizOP3bhxP+93RLImfyZK+SMiF1Ey2b1gpvPqNLa20tLXz9u5DAMRFRYgI3IXULEKD/MkrLmfR3On46b3ZdeAYPWYLLs5anth2l6ijpKKaM32G+ZL4mcyaGsWJpBTqmlrYe/w8Hu5uPHP/ZtRqtYNsGo16WMV48NQFGlvaAPjGg1txcnKio7OLT4+cEddMj47Aw92NlL5lEuuXzXfwWO/cfxSzpRc3F2ce+xI90y8Ddh1S29jMK+9+It7tvOJyOruNQjecvJjK7KlRBPn7OtzfbTTx4ecnAQbphv5sWL6QAycvcN/GlTg5OQGgc3O9Xn9DE0lXs6mub2PhnOmjyu2lcxf3nr+SQdq1AqGHzl/JYEpYMBEhgQB8+PlJB11pp7y6jpN9UZcFs+NGzELQatR8euQM82ZOdTiekVcklgdtWLZAZN58fOiUMMrdXF3YsmqJcLJOjQxzyMY6m5wujIyHNq+ZtGjftaIyLvWlv65eFE9sZBgA+46fo6Uvu0OjVvP0/ZvFPf3bCGD5vNlMj4kcsnx7G7cbOjl96SpnLqexdomSlXIlK5esfGVyt3X1EoL7ZbrZ9Z63p44HN60BoKi8inNXMvD3C2DRnNEzq1o7DOQWl7Fl1RJSsvNEH0q6mkVev9T2h7esxVPnDiiZce8fPAFAWJA/m1YuHlTuyaQUZk+LJsjfl48+P8nDW9YCsGPfUXFNZEggG8YRJers6iY1J58nt2/ixIUUls2bDTi2EcB9G1fi661ECq1WK+/uPQJAoK+ee9YtH1TuuSvpRIeHEB4cyJ5jZ9m6ZiluLi6ifUHJ1LFHQLLyi7nS50xZt2QeUeEhAHx65DTbN6zk/QPH+cZDdw+qJzYyTDzrP7y/l+qGRkKD/AFEG6nVarqMRo6dT+b+u1YPKuNSeg7XipSo1Lb1y4eNgmnUKuoam0nqZzPYOXLuslhW+dR9m9BqNHSbTHz42UlxTUxEKAG++iH7PSi6odtoGtTvx8L9d60C6HOU5DjomKPnk8nIK6LbpDgLBuqGBzev4f0Dx3nmgS20thvGpRve2XMYs9nC27sP4af3YvuGlQ5yZeYVEeTvK3TxhdRMVH0612az8U6fAzHAV8+9ff3oWlEZRlOP0KEnklKYGxdDoJ+P0J/vHzjO0/dvpqWtg30nFIfptCnhrFw4l9TsfDLyigDYvHKx6A8D8fHyFO10LDGZrIIS5sTFkJiSSURIIDlFpSyNn4WPtyfv7TuKpbcXN1cXHrtngyjDrhsAlibMYmbsFI4nXqGyb1nQY/duwM3FRTybTw6fBmBKaBDrly0AICUrj8w+58TmVYsJDRxa3qFImDmVhL5xICu/mM2rFhMerIw1PWYzXUaTeOciQ4PY0Ffn1Zx83F1dqWtqZmpkOKFB/uw+eoZ2QxcA3+z3rlXXN3L0vKONnpiSSVl1LYfPXeJyxjUe3boOXV9WqKuLs2jX1Ox8kq5mOfTHc1fSKSpX+tGDm1bj7ekBKLbZA3et5kRSCvdtXEVZdS2nLl4V9y2fP5vp0Yq+P3AyUTj4v/nQ3Zh6eth99CyNLa28vfsQMREhQ2Yhrls6nxkxUwD4+v/7FQ9vWSd0w7J5s8kuKGHD8oVkF5SIQNXaxQkOmULvHzyOqceMs1bDk9s30dTaxoGTFwDF/uyfwXDqYipl1UpWs72NxqI/x0NJZQ09ZjNqtZri8mpiIkI5ev4yjS1tfHL4NO5uSgaBqcfM27sP4e/jzbb1Kxxs9MVzZ4w7g6agtAInJycxDl3JykXVLyPjnT2HsdlseLi7iedfWlVLdV3joDlFVFgwB04movcJHLHOqVPCmTolHID6phaWzpvFwtnXbbQde4/Qa7Wic3Pl0bvXA4rdUFFTj97Lg16rlfjpsZy5nEZJZQ0AMdEjZ3zGRoYJPd3Y0sbC2XEO2XZD6YaKmnrKqmrx1XthNltImDnVQX8CPH7vRlxdnDGbLcLJGhLgJ+amKVl52ICW9o5Bc1M7arWaPUfPMicuxuF4+rVCrl5TAlUbly90sD+7jSYA3F1d2LRy8SD9aad/Gw20BW8678bfR09sZCixkaHsP3GedkMnAIfOXuIvn35GREgQ9U0tHLtwRVxXUllD2rXr0bfQIH9x7o8f7McJmBIWjLNWQ2xkKMEDJggjcfyC4l1pN3SSnHkNgIraeuqbWkQd566ki8npu3sPE9ZXf7C/Lzv3D+8l/7LhrNWKNmlobhUGUXZBCe/sPkSv1YqLszPv7j1MaGD/NrpuqOrc3UQZmfnF5BaXEezvi5uLMxHBgcRGhorJWX8C/Xzw8fIkt3hwGlF4cIAo8/VdewFlUpiSlSeO1ze1kFtcLv4+m5wu1vC+s/sQYUFKGQF+PuwaIfIhufX8/r3d/P693Rw8mcgjW9eL42XVdRSUXp9YpWbn09zmmIXS29vLjr1HxHPvNprEOz9eggP88PLUkVc6tnXKLe0GIXt5TR1rFieIcxl5RdQ3X09rPJWUinXAngnVdUqU2y57XnH5iNGstUvmcTY5bdBxvZeHQ7+3R1NPXbpKZGgQsZGhBPrq+fTIaXFdS3sH5/sM3LPJ6bR1GMS5jz4/RbfJNKY2GA/5JRVk5BaKei6m5YiB6NyVDIIDfImNDCUyNFAYt9X1jZxJThP3NDa3CsNrJLw8dESHh4hxJSUrj4rqelHOkXOXaWpVnI5//GC/OB4ZokygSqtquZSeQ2xkKL7enqPW19HZxcmkFB64azUxkWEE+flyIfW6/rTZbKKODw6ewNSjZNypVCpx3Gy2CIO8P6nZ+bT0ZV+dunSVXqsVJycnYiND8fHyICO30MHZMRqmHjP7jp/na3dvIKJPt56+pBjkecXlmHp6hEx7j52jo1OZPNjrjI0MRaVWcfDUhUFlZ+QWUd/UCihOsp6+3xkbGUqgnw9XMnMJ65sI5RSWkl1YKspMTM0UKelnLqfz+q69xEQOnWaZlV8s3r2QAH+i+xwLAKf72giUSKt9Itefy+k5VNc3iroPnLwglh8NxE/vTZC/L9lDZA6EBvqJMv780UFAiTxdTMsWx1vbO0jv1+8vpeeIvQF2HThGoK9iM0WEBPJOP0fKRKD38hT1nklOc9ANr+3cQ0xEKJ3dxsG6IeV6mwX5+fTTDSfpNpmIjQhFpVL6w1DLO5bPn0N9U4t4RnHREbi5KhPm13ftFeWp1SoRDSurrqWwrFKUkZqVR0ufvj91MbVP3hAMXd3sOXZWlBHopyftWgEllTXi2PGkKw5p5WMhq6CYt3cfwmaz4azV8E5fMMquP+2R2NLKGqEbYiND8fbQcTzxCj1mszj27p7DWK1WzGYL7x84Lo4HByi269WcfMqqa8Vx9762mSjU6ut6pavbyMm+zLz80kre3XuEto5O3Fxd+PjQKbw8dP368AFRhrurSz8bvZqrOQUE+unRubkJ+0+jUQ8nwiAC+/Wjjw+dosuoOK8/P32RnQeOER4cSFVdg8OY2NDUInTCvuPncXF2Fude27kHlUpFREigOB7o5zNmeUwmM/tOJHLo7CWCA/zILS4ju6BElH/hahblfWPNzv1HCfZXxqfo8BDaDZ3sO35eXFvX2CKyjE5dTKWz2yjO2dvoD+/vE8dudulYcUU1tQ3NrFgwl2UJs2hoaaWwrJKQQH9cXbRi3I/p957a6/TQuQs5sgpKhJN0z9GzNPUF4kYiYeZUrFareLcDfX3QeynOnrc++Yzo8BAxbn7UF7ipbWhy0J9ZBcXU9QWBE1Mzb9reiIlQfo+f3osPPlMc7nWNzXx86BTZBSXovTw4czmNdkOn+O1azajx8FHqDBmkG+qbW/j48Cky84rw8fYcZFtdTMumpy/b/s1PDorjVpuVw2cv4eXhjq/eCz+9F7GRoXi4uw6q18lJcTIPlSHp431d35++fFU4r09dTCUqLJjYyFD8ffUO+rOptY3ElEyAQW300ecnMfXLRru5FgOmTglj9SLFUD505hLdRhNeHjqcnGDFgrnET4+lqLyKxJQMavuEr2tsxsVZK9b/ZueXUF6jvJjpuYV8/6kHWZYwi+OJV0TZN0t4cIAo60pmHq3tBsKDA7mcfo2q2gZUKhWW3l6aWtp46r5NE1LnnY7O3U20ycmkFEoqa4RXNC46gtWL4vFwdyM5I9ehjRqb23jqPiXy0djSJgzjqroGgv19WbtkHl4eOhbOiRNe7qGInx5La7uB05euOnhXM/KKqKlX+srVnAK+/9SDAHjorst7PPEKXcZW8XdyRi5tHZ2EBQVwOeMa1fWNiryWXprb2nly+1fjmX4RWLFgDt3GHj76/CTf/tr2cd1rtdo4dyVdTKDaOjoJDw7grhXDr42dKNxcXVixYA7FFdXUNDTTPyo4FtoMBs5fyaCqTpnc1NQ3offyGOQVtuPq4szX7t7Au3sO4+J8ff1bVW2DeOdKKmpYOCdORM9WLpiDi7Mzre0GPjudxLOPbgPgbHIaRRXVrFoUT1F5FbnF5WIinFNYytfuWS8iYBNFfXMLXUaTeEdf27mH5tZ2MblbljALvZcnph4zHxw8wTcfupu2jk7qGlt45v4tAFTX39gmuBU19ZxPyRAGZEFZJeuXLcBP783ShFkcPncJnbsbP3j6IUDZS6C13cCT2zdRWd86avmmHmUi2tCsXNvY0sa8mdNExGRm7BQRpf/40Cl6rb2AFoulVzy7dkMXwQG+bF41OItgICqVivmz4nhn9yG+9+QDTIsa+7p6S28v51MyaG5TInGt7QZiI8NYt3Q+ANOiIsQzOnjyAqYeM546sNpsQtbObiM6N1e2rV8xpjqXJczmtV17+MEzD4lIXm1jM4kpmYT19dWSyhrip8eKqMfShFmizQYS5O/LigVzOHkxFW9PHX567zH/flAcQJczrhHgq2QN5JVUcPeapYDHkNfPiImkobmVUxevsn7ZfHE8u7CUsr7JfkZuEd978gFAmVzZ2/D8lQyaWisH9fuosGBSsvLw9fZCo1FjtdqorK0fMmPiRokMCRT1Xkq/RpvBIHTDsnmzWRI/k9b2Ds5dyRBZes2t7cyOi2bVQiWLIL+0gpxCZS2uohs2sGpRPG9+8tmw9lh0eAhqtUpMOD4+dJont9+Ft6cH51MyxBheUFopskVGY9m82SyeO4Pm1nauFZXxV4/cK84dPHWBxJQMkV1WVF7FygVzh5ww1jY08T9/3AlAeHCgw/OcHhPJqoXx6NzduJRxjce3bRT681evvcMT2++iqe26brCz+9hZauobRbQtM6+Yb39tOyq1itnTojl3JZ0pYcGivUID/SkoreRCahYP3LUavdfoTsjx4KLVXreFMnNJycoVGUaxkaGsWhiPj7cnadcKcXHWijXceSUVYgxubTeI972usRlnrZbtG1bi7+NN/PRYZk2NGpdMBaWVYpJ4rahMifS6Krps5YK5zJ4WTXZBCQ1NrULfV9Ze36g1K7+YHotFOFPSrilzg8VzZ3AxLWfEucHO/cfE/ld//41HxXF3VxdWLpjDtKgIzlxOw9RjFuW8suNTWto6iAwNIjkzl//44bdF5ld9UwvnB+j7BbPjWDZvNrGRYZy8mEp2QQnfevgeMVYvTZjF8QtX8NN7jdvOGUhjSxvnUzLEPKmipp6osGCWz5+Dh7s7S+JnEujng81m4909hx3aprGltZ+N3kiQnw8zY6eQkVfEwoTR+2FYUACrFsWL+dvxC1fYumYpoYH+JF3N5psP3Y1KpaKhuZWX3vqQr/XLvJksktKy6e3txWyx0G7oEpnfAX56Vi6cS1hQAMfOJzMzNkqMyWn5lSMVOSoX03Mwmy1YLL20tHfwxHYlkzrAV8/KhfGEBwdwIimFaVHhQpfuOXp9ecu55AzaOpQAuqGzG1+9F1vXLCU6PASbjRH7s5urCw9vXct7+44IxytAZW29eLbFFdUsmTtTZNOvXDAXrVZDc1s7h85cFPrz9KWrFFdWs3LhXIrKq8gvrcDH67ot+Pi2u7Bvt3DTDoKR6J8+G+jnI1I5ATFQv3/gOOEhASI9s3+6443wT88+zvO/fRNfb0+H9KmR2LZ+hXipnbWT2iRfGKLDQ4RyBLh3/QpcB7RRQWkll9JzxHM9dPbiuOrw1Xuxdsk8hy9hvLv3MFMjw1mWoBiK/TNNxsP2DStx1mod5JXcGcyfFdeXnaLljQ/28deP3z+u+11cnB10iZfnjaXHZxeUUF3XyKYRNt7qj6uzlvmz4oiLiuB8SiafnU4S6bJjJSTQz0H2kSIgarWaJfEz6TGbSbqqRCuSM65RUVMvynj/4I2tN1w8d4bQzw9uWoPObbDn+otEdV0j565kOBgnc+JiWLngeiqdfTKRMHMqbq4udBtNvLLjU/72mYdvqM7+yxNSsvKwjrJO0Waz8dJbH4qUyIKySodURDtPbt/E7qNn2HXgOM89fj9ajQazxcIr737KE9vvuqFN6NzdXIWsWQXFNLcOvT9Mf/7j1bfFpKi8pm7IfRYe3rKW/ScS2Xv8HI/fu1EY5f/1xns8c//mQZv7TYsKZ8uqJeLvsH7R6LkjLLcJ8NUzf5bicP78dBK5xWXC8TBWEmZMZWm/jdxGcjLovTxZszjBISr9wWcnCA30Z8EsZfmJfRI9XrauXYqnuzK2ascRkb1ZEmZcX6rkqXN30EM+fc7Cz04n4eKsFefKx5C9A8ryBl+9p9g868PPT9Jzk+vQBy6tGsisqVEO6eXDRWn1Xp7i9+i9PBx0bswAO2c8LJ8/h7g+R92Dm9agcnLCycmJxfEz8PfxpraxmQ8+O8Hj924kyN+XDcsX0Nzawbkr6Wg06nE7mG+U8OBA8XxBWd5gX0akVitJxNX1jXx+5qJop5vdz+Xz00loNGpRXkXNJ+Kcus+JMhbWL50vlmL076+jsWZxglhyOi0qXBx3c3UZl3O1P3ovDwcZfPVKm0aGBrF51WIMnd3s3H+Mv3rkHrw9PVgwOw5PnTtthk7+9OEBvvPYzTkJosKCxdKp/X1ZOKNRWFZJ0tVsIffhc0NvOj8SSVezMPWYhUP5yLnLdN3G/UX+90+72L5xJSonFW2GTj4+dEqc89N7T8pGvy+++QF3r1mKVqOho6vLYZ8HX2+vMW2a2/99ACXgOVY0dluwx8zlDCUz/lJ6DlV1jaLMkfaIGYnFc2cyty9I9eCmNQ4OiFsyc4oMCeKetcv4w/v7xLH7Nq5k3dL5bFm9hLf3HKKyRvEcWnqVHXo9PXR846G7+dELrzJ7WpSIhI3GrKlRfO3u9by3/6hD9PrkxVSuZOaJuu1K4ud/8w1efvtjkQIa6KfnJ3/99M3/6C8R//r9r/PyOx9jMiltFOCr56fPPU1kaCCRNUHiubYbOkVWyA+eeZg3PthHU0s7//Pj54ZN7/Hx9nTYHffedct565PPRQbBjewN8vwPvslLf/lIbJQT5O/DP3/3qfEXJJk01CqVsqbSSUn5/u7j97FywRyOnL/Mj154FVC+djFwAq7RqPnn7zzJ67uu65LFc2cIb25/Xn77YxqaW/n5y3/mpZ/+QJRpL396TASP3bORLtPgXcFHQufuxprFCZxIShE7zD65/S527j/Gzn2KkranafcnJiKM9cvmO+jBR7auZUW/SexAtFoNkaFBwkEwa1o0FbX1ogx7VHg8PLR5DR8fOuUgx7//8NkhvzgyVqxWm2hXUCLoT9+/mbaOTnH87rVLRzUMYyJCWRI/U9zT3tnJ1+4ePiJhvy44wJdnH71XTPo2rljIwVMXHH7jP337cUID/fnJi3+gp8eCzs2Vv/264hyYNTWK5lalb8yZEcc9a5cNW6epp4dXdnzKv3zv68LRHRasRCxOjrDpppOTE49v28jv39sjypkRO3iSGxrkz+Pb7uJXr71DZGgQTk5O2Gw2svKL+d07iqE9Jy7aIaI6Er/6/Tv84m+/JRwkEaGBnLp4lc9OD7/RF8C3v7aNl976CFDWOdsj/f0JDvDjka3r+PWfdxEa5C/2mrlWVMYrO3YDSpbh9596kKUJs+gwdDo8k+eeuH9cXxkI8NVz/12r2HXgOM5aLTERoTz/t9/i57/5M2ZLL1ardcg06LvXLmPvsXMOdf/se0+PuBu3t6eHw/nNqxbz7p4jYtJ8IxPgf/7uU7zy7qdirxC9lwfP/+Cb4y7nZvD00PHdx+9zaIu1SxK4/67VrFo4l48PneLw2csAIuIFyrj6oxdeJSzYn3/8q8cdylw2bxa7j55l137FcP76g1tEhtKvf/w98Z6GBPqJidLqhfEcPueo7+/buGqQvN5eHjx9/2Zx3dKEmdy7fgWfn05y+A0//NajYslQf1xdnMfUx57/wTd5/uU3MVt60bm58uPvPAnA7KnRtLR2iPof2ryGp7Zv4r39Rx2+bPPiT75Pj9nMT1/8I6BMHL/+oBIZP3kxlYN969e3b1gxpgnFZPDDbz7K67v2iuU1bq7O/OePvkuAj575s6aJ9jR0dYksj28+fDfv7D7Mnz86yPM/+KZILx+JlX396Og5ZQnVcMt5pk4Jp7GlzUHf26PBzz15P3/+6CB1jYqTTqVy4sWf/A3+vnoe2ryGH73wKvNnTxPZB/2JCAkc9XITbB0AACAASURBVJkvjp9Bu+H6+HTv+uXMiFX2PvjZc8/w32/spNtows3VmX//+2d55oEtDv1t44qF3LtuOR9+fpJLacp+I888sEWMo//4X78HwE/vxV8/cd+obTYcReXKJrjfeWy7yDz59qPb+PDzE/jpvfmHb31NPNOXfvYDfva9Z/jRC68SGRrI9558gKiwYAcb3R4Y+JunH6KsbvQlBnOnx3LozMXr/X/LGrG3yX/88Fl+/OvXsVpteHvq+NFfPQYoTvjWdoO4p7XD4OCgvBmeeXAr//fmB/T2WrFarTgP80WDh7es46PPT4r9QO7ZuB64sa/RPH3/Zn7z1ocjjjFw3bbafUTJHLAvvwP4xd/9Fa+8+6n4O2FGLN946G7WL1vAZ6eT+NELr/KNB7eKvUYG4qzVEhESJBwEc6ZFU1nbcFO24MNb1vLhZycd+vWvfvRt8UUMp6ziWlt44OifrOi1WjEaTWKDElB29lapnESk1tDVjburCyqVirYOg9iUBJSJf2e/HVddXVxEmlNnV7dwDADivl6rFUNnFxqNZtgIV/86AbpNJn75yl/4l+99XXiGTySlUF5dx0ObFU+Lu6sr2n5R5XZDp9ilUqVS3bBH+VZis9lIzatk4YyxGVcdnV14uLuJ/QCsViud3UbxW3vMZqxWG64uzmIDpbG0kdlsEWvLQPHQ2vtDR2cXVqu1b8nJ9X0ILL29mHrM4pkaTT04OTmJ/mDo6qZ3QH+wWq10GU1C+faXF5QUWBdnLZo+A/WL+Ey/yLR3GqltaicucuTNZ9oNnQ6boPT29mI09Qi9YurpwWi6vgZK5+6GRq2m3dCJp85dTJbse52AojjdhljT2b8feXt6DLpPq9Xg7upKdYMySIYGDB9RtO/Y3L8fmXrM2GyOfdBiuT5psP/O/veZLRYH73v/96U//fXnWNuo/zs+UN4es5leq1UsI+gyGh12mh74jtppbu+ktcNITNjIa97bOhwNQLvONvWYMfatNxyoG/rL2tHZJdqrfxvtO3GeYH+/IdPw+9epVqsHOTiMph6H9XQeOnfUKpXQDU5OTg590a7LGtu60Lm5Euzn+FkvO0P1BUDUZbXaHPTnwN86VB9U7r2uA1/88/ts37iSuKiIIe+zt29NYztWm5WwET6TNfCdg+v6E3AYwzs6ld9uH0/7t3H/Zwo2kXX36nu7Wb0onjlxMeJzYg73qdXj6rsDMZstWKy9DktgxqLvzRYlHdSuG7pNJrFHAihRdNWAz58NtHPsz9T+W4eyVQb2h4HydhmNaDUa4SQfbmxqbu+itaOLmLDRN68bqz6yt9HA9rXbVnacnbWj6gZ7HxxuPO02msR6W/u7ZsfeHwa+pwP7g4e7G+oB+n6gvHZ9P+j97ru3PwPthoHyajRqh+DFaLoBrtuuA/X9wDFmuH4/0P4EuJRVytI5Y0vhN3R14+bqItp3KP1p7/cDbSu4bpcBDr9zsI3uPKjfD/XO2Os0WyxiYgHD96OB+qi/vt9z7JzDksGhbEFQxkRDV7fQn/3p7Dbi6qwd1BeGe2fs49Nw8wJ7G9nrtOPi7Czs5aH6vb3Pj2R/dhmNFFc1MyXED0/3oZf4DbSX+9/rrL3+flutVoc+aH/XRrLRMwqrmTElCGftyJlM/d81dzdXh3dmuN/ZYzaLjfLgevt2dHaRX9HIvLjwMX1+cqD+hLHpe/u99j5YVNVC/LQwNOrR6xxJN4ynzud/+yb/8cNv4+WhG3bsh+vtO5RuGGQL9usLY9GfN2MLjtlB8EWh22jix79+nVee/6E4diIphbrG5i/VOvTxOggkkslkrA6CO5GxOAi+qozVQTCRpGTl8dJfPgQUD/eDm9YMOXGcLCrrW9GoVcM6CG4Fv/jdWzz76LYho/b9GYuDYLL59Z928cBdq8eVCSAZzHgcBJIvF+NxEHzZSM7M5eW3lUylR7eu5/67Vt1SfX+7ySurIzRAP6yDYDIZq4NgormaV0n8tNAxOQhuhld3fEpS32aSX3/kQTYumT0mB8HN8NrOPSSmKpsA/s//+95tyxaaCL50DoKvCtJBILmTkA6CLye3w0Fwu7kTHARj5U5wEEgmBukg+OryVXYQfNWRDoJbQ1p+JXNiQyfdQfBlQraURCKRSCQSiUQikUgkEukgkEgkEolEIpFIJBKJRCIdBBKJRCKRSCQSiUQikUiQDgKJRCKRSCQSiUQikUgkSAeBRCKRSCQSiUQikUgkEqSDQCKRSCQSiUQikUgkEgmgaTN0Y7XZbrcckvFig16rlfK6ltstiURCj9lCl8n8heyPhi4TABar9TZLcudhNJkx9li+kM/1RunoNKJSqeix9N5uUUals8uEDei1fnWez5eVr+K7JlGwgXzuX1G6TWbqmjto6ei65XWbLb1UN7aiuoWfGwTF1qqsb8XJyenW1dlrpaq+FSfVravzi45TXnmD9A5IJBKJRCKRSCQSiUTyFcep1WCUDgKJRCKRSCQSiUQikUi+4sg9CCQSiUQikUgkEolEIpFIB4FEIpFIJBKJRCKRSCQS6SCQSCQSiUQikUgkEolEgnQQSCQSiUQikUgkEolEIkE6CCQSiUQikUgkEolEIpFwCx0Evb29GE09t6o6iUQi+crQ2W3EZru5D9J0dN767zCPly6jEavVOmHlWa1WOjq76DaZADCbLfSYzRNWvkQikdxJTMRYIZFIhqfbaKJ3Au2U28WoDoLahibxr7m1/YYryioo4Y8f7B/1utrGZgB6rVYaW1qHva613eAg20QajePFZrNR39Qi/jaaemjrMNw2eey0thsw9UysU8ZqtdLQ7PhcOruN1DY00dltnNC6JJI7gYHvt6mnh9b20d9vuy4biXZDp5ic3gy/fOUvtLR1jLneoXju5y/e0H11/err7e2lqbXthsoZC//52rvUNw8/LowHq9XKtaIyfv7yn3lv71G6jSaOnL/MyYupo97ba7WKsae1vcPhXLuhU5wzWywO5+zH+7dRl9HoMJbVNjQJJ0V9U4vD8ZHGxOGou8H+MBKGru5B+r6xpZXahiY5+ZhEJuNZjhWbzTZo7O/fd7uMcvz/IvAv//dHDF3dt1sMyRjpMZsHjTFfBQxd3UK3DDWPGU4XdnZ13/b+/bt3P6G4vPq2yjARjOog+IcXXuWVHbt5Zcdu9hw7O+kCvfH+PgA6DJ389xs7h73uvX1H+PWfdgnZcgpLb5th0mO28ItX/iL+Lqms5kRSym2RpT/v7T9KTmHZhJVns9nIKijhhdd3OBzPzCvi33//DmcuXZ2wuiSSOwWrzcZP/+8NyqvrAMgpLOO9/UdHve///ffvRzzf3NrOvhPnSbySOaHG9eu79k5YWWPhJy++QVF5FQD1za28/JePb2n9N0q7oYu3PvmMl//l7/jOY9tJzsylqaWNrauXjnif1WolK69YjD0fHTolHEhNrW3sPX5OnLuaUyCcBAWlleL4jr1HqK5vBOD8lQx++erb4twrO3ZTXd8EwL/97i1+9+6n4viuA8fH/Tt/+n9/HPc9I9HWYWDXgWOcTU5zOP7evmP843///ksROblT+dlLE/ssx4PR1MO/v/q2+NvQ1c3pS2mib56+lHbbDXOJ5MtGYVkVb33y+e0W45bS1mHgyLnLQrdcSM0SGeillTUUlVfx41+/7nBPZ1c3ReVVfHz4NMcSk2+H2F86NKNd4KzV8J8/+o7DsebWdow9PYQG+gNQWlWLn94LT50714rK6OlRoh9qtYo5cTFDlltd1yi80bFTwvBwdwPgoc1rsNlsZBeUYjT1kH6tEC9PHdHhIYPK+PqDW5k3cxoA3/3XX/OHf/8nrDYb+SXlRIWFUF3fSGxkGE2tbVTWNAAQHhKAn94bgPySCqLCg3HWaknPLSRhxlRAiYgXllYC4O/rTVhQAADlNXW0tF735M2aFoVWoyEzvwiz2UL6tUI8dG6EBQXg4e4urqusbaCpRYkYTYsOx93VFYD0a4XiGnc3F6ZFRYz0KCaM3j4DF8BD50ZsZJg4V9PQRH3j9WhpXHQEbq4uiry5hRw4eWFQecvmzRbGrkTyZcRkMrP3+DnuXrNs0Ln+umzqlDB07m5kF5RgtdlIv1aIVqth1tSoQfcdS0wm2N+XnMJSAv19iJ8eC0BWfjG9vcoky9lZy8zYKQC0tndQVlUn7o8ICcRX7zWo3Ie3rBX/7+zqprBMmbzbdVlVXQONzYo+mhoVjs7NVVxv10luri7ERY9dH3186BTbN6wcJE9jSxtVtYrujQgNxNd7sLxWq5Xc4nKiI0Koqm0g0M+H1g4DkSFBgKI/Pdxd0Xt5DrrXLu9o+rOovApDpzJ5mTs9BicnJ3IKS8QYA1BeXUdDSxu1jc0E+/sOW5alt5fE1EwxLl5Oz2Hv8XN897H7OHoumdBAf77+wFYAfvriG0SFBRPo58Pzv32T93/zbwAUllXyzu7D/PS5pwGYNTWKNYsSAIiOCMHLQyfqe3jLWjRqNRqNmtnTooeVa7zUN7VQ0+eIiAoPxtvTQ5zLzCvCalUc7i4uWmbEKH2wpa2Ds8np5BSUEhES6FDeD7/5KH/98/+dMPkkjlwrKqO310r6tUJhW3UZjRSUKLaKn4834cGKrVJRU++Q8TlrahS5xWVYrbZB/ai5rZ2K6noAwoID8PfxpqSimnaDsuRodlw0GrWazPxiesxmYefY3237e/CnDw+QXVDC0oRZg2S39PaSnV8CgJeHO9ERoYASBVSpVAT46gHlvQgPDsTVxRm4/n67ujozPTpyglryi0l/+3N6TCRF5VVYLL0AaLUaYiJCySsuB8BH7yn0J0BZdS2tbUrWm2mEJVSt7QbKqmoBCAn0I9DPB1D0Z2iQP24uii2YkVckxqvh7GXJ5NN/XJsTF41arQbA1GMmt0gJDuq9PZgSGkxdYzO1DUrUfaC+v9NISsvGarUK3fK/f9pFaJA/06Mj2X8ykc6uwQGVqrpGPj1yhobmFlYvTrihege2UWNLm2hfgPgZsWTkFgGgc3dl6pRwca62oYm6vrlTu6Fz2Dq6jSbySyoA8NV7iXG0srYeD3d39F7Kc7lWVEpcdCRqlWpY/TnZjOogsFqtXEjNBMDLQ8ecuBhqGprILihhxYK59JjNXEjNYs3iBDx17vzh/b1MCQtWDBq1mh6zhQWz4xzKrKytJzE1S6SI1DY2s2pRPDo3V1588wPe+q+fkJSWTVe3kTPJaUSHhwzpIBiKnh4zv/nLR3zt7g10dHWh9/Lg/JUMyvqif1NCg1i1KB4/vTdvffoZ//Ts4/j76Pn1H3ex86Xn6TaaSEzJILdP0Qb6+bBiwRwiQ4I4ePICDc2t+Hgrhmprh4E1ixM4fyWTHrOZM8lphAUFEBkaREpWHs89cT/l1XUkpmaKCURdUwtrFifg6uLMf73xHisWzAFA5+ZKj9kyoQbgcCSlZpGakw+Ap84di6WX6TGRVNU1kJiSKVKUswtK+MlfP010eAiX0nNIzrjGD7/5KM+//OakyyiR3Em4u7nyyNZ1vL5rLw9tvj4Br6ip50JqJnV9EeS6phZWLZrLxbRsrFYbZ5LT8HB3G+QgqK5rRKVSERzgR2+vlaq6BmIiQvFwd+Pltz8mfoZifLk6O9NjNpMwYyo5hWV8dOgkMX2DQ1RYMKsWxg+alP/vn3ax48Wf02U0kpiaRW6xYijMmzmNsKAACsuqSM8t7JO3mdWLEoQT8ExfVNjd1RWzZez66MffeZLnnn+RX/79s+JYQ3MrF1Izhe6NDg9h5cK5g5wEZksvL731IU9sv4vW9g4iQ4NJycrluSceAODo+cvMiJkidKWdC6mZXMnKA0bXn+m5hVT2OSo6OrtYvmCOMsYYTeI3NzS10tndTXlV7YgOAmetlu8/9SCgRDoaWtqY2s/JOl6CA/zILS4XclTWNbB6UTxeHjoWz51BYt/466zV0GO2MH/WtBuuy05tYzOJKZlU1SltUlUXxsqFc/H29OBKVi6X0nLotVoxWyxU1Tby0s9+QEtbB+dTMvDx9mDVoviblkEyPi5nXMNi6eVMchquLs5MnRLO+SuZ4v0O8NWzcsFcIkOD+Ox0ErUNTUI3tLR3kF1QQq/VilZzvR81t7WTmJJJSWUNAOuWzsffx5vM/GJK+yaKdjsnMSUTo6mHM8lpRIQEMjcuBg+dm7AP65qagdhBcttsNhJTMoXO8fb0wNLby7SoCMqq66iqa2Dlgrk0tbaTdDWLBzatxtXFmaSrWSRn5gLg5uKC2WwZNuD0Zaeksoakq1k09gWaIkICefW93UyPjkSlcsJZq6W6vpGcwlIA/PTerFwwh6jwEIorqrmQmkVzm+Iw6jYOvaSttd3A+ZQMiiuU1OiI4EBWLpxLoJ8P6bmFlFTUsHpxAldz8knJyiN+euyI9rJkcskrKSfparaYjLYZOlmzOAFLby8XUjPJzFeCgHHREUwJDaa8uo6ktGxA0fer+saYO5GQAD86DF1CtzS3XQ/M/t3XHwHgGz/+T4d74qIj+OlzT3Pw1IVBS/vScwuZHh0pHI9DUdvQRGJqlhgTPXTLeW/fUVyctbj3BVE6OrvE3MnD3Q2zpZeZsVOorm8kMSWTmoamQfL2x9TTQ2JKJjlFynsa4KNn+YI5RIUFk19aSbfRxKqFcymtrOViejYxEWGotE5cSM0k7dpg/TnZjO4gsNnEyx8c4MecuBhmT4vGarNxKT0bS6+VlQvmEBl6XSH89WP3oXN3w9DVzb++9KdBDoLkzFx0bq7iQf/ylb8wc+oUEclSq9V8+9F7+dVr74prhiI1O1+kdq5YMBcnJydASfnv7Dby4KY1XErPITU7n5UL5wKQmJJJcICfyCIYSEt7BwdPXWDb+hWAkk58KS1HKLxtG1awcPZ0AJ57/kVWLJjD9558gH944RUhq31QA0i6moWf3psntt0FwL+89EcSZsTi6qIYoPZ7iiuq+eDgiVviIPjzxwd5+39+BihOgM/OJDE9JpKUrDxcnJ2FTL967R1xzxvv7+PxbRs5dTGVzm4jl9JzhowUSCRfVnRurkyPjuRq3wABcDkjB08PHY/duxGAf/vtm8yaGsWzj27j9KWrw+qv1Jx8Sitr8PbUoVI5ceRcMnFREXj0TTTt99U1NvO7dz8R2U1z42J49tFtAPzh/X0UlVcNmUUA0NzaQWJKhsOkHSDI34cZMUo07uCpC8yJixEOAnu9pZU17Nh3dMz6yMnJiRUL5nL+SoY4lldSTnNbhyjztZ17KKmoGTKLwGyx0G7o5OEt6xz050i8suNTvvXwPYCSqbD3+Llh5Y0ICRJZan94fx+rFsXz7CPb+I/fvy3kO5ucTklFNUvGqNc6Ors4m5yOzs2VDcsXjumeoYifHiuicQAv/vl9YiND8fLQ8VeP3CuOt7R18MIfdkyIgyArT4kG23/7S299yJQwJar09qeHePEnf4OrizNtHQZ++YqSVl5aVcPFtBzWLkmgqLwKZ62WhBlTRSahZHL5xoNbOZuc5qAbzly+yn/+6LsAHD2fTNLVLGGL3bt+BYvnzgDg+794id/87G9xcdbS2t7Br157l/mzplFSWUNFTf0gPdU/iv+XTz9n9aJ4nnvifn7869cdru21WklMUYz44fZlsdls/OXTz3lyu2IDVdY2cOTcZaZFRbAkfiaX0m1cSM2i22ji3nXLhX54becennlgC6D0/U+PnPnKOgjOXUlnSmgwT27f5HD8b556EK1WQ3NbO//1h/f433/+PgCnL13lXEoGUeEhnL50lRkxkTx9/2YAfvir3w1ZR0VNHYkpmaxfNh+A5Ixc9F4eBPr58NDmtew9do4TSSnUNTbzN08/BCjZJwdPJbFt/XIAsgtKuZx+TToIbgGHz15iw7IFzO0bO5792X+zZnECRlMP+46f5+V//TuH6/18vMW4f+JCCtERoXesgyBhxlRsNhup2YqtdbNLlz787CR//41HxLxrKDLzi7FYLIN04ZPbNwmd+sw//Qc7Xvw5oNg3+4+fZ2bsFNKuFaJSqcS9//PHoZfHd3R2sefYWe6/a1VfGRVcSM0kKiyYDcsWcPJiKmeT02ntMPDk9k24OGuxWq289cnQ+nOyGdVBoFGrHYwUO67OzthsoFGr0Gq1kyLcaBi6umnpG5Se2LZROAg8de7iAYCSUmW/bta0aMKCFINmw7IFnE1OxwknHti0WlxvsfSK60MC/USK71eZ7RtW0tJuoKfHrOz8bbjzdzyXSCYSb08P7l67lJ37jqFS3/wHYLpNPULPmPtSRSeba0WlZOUryx8AkaJ6szg5OfHEto3s3H/shu7Xubny4KY1477P3n5qtZpVC4eOal9Kz6G8uk78Zhs3v1dNl9HI0fPJ+Om9WLd0/k2VVVxRjamnh5mxg5ehHDp7kc2rlqBW3f4vEgf5+xI/I5aWdgNGUw+9vVZ6zJbRb5R8oUjOzKW0sub6+zLC3k7ToyOZHh1JdkEJXh46YVudvJjK0oRZIuhjs9nEu6obkFHl5uqC2WLB2VmDRqN2KN9+D05ON5w2LBme/sEwUBy19jafGhVOVFiwOOfl4U5jSxv6Aanplt7r9nJokL+0l+9ASiqqSc3OF/vDDIyw34nMmzmNeTOnkZKVh6fOfdig7p3OZ6eTuGftMjE/7e21ivcl0O96sAbAw82VppY23F1dUfUb80fSn5PJqA4CS28vO/YeAZTI0+ZVSygsqyTtWgELZseJFKPVixNEJOHDz0+i1WhwcnKceNuZGxfD1ZwCUe68mVPxGbC+1M3VhbVL5rFj7xHCgwNYv2zBoHLWLE4QexAMx5TQIBbPnUlXvx2X7S/J5lVL+MEvf0NjSxsfvPwLALw9dGxZvdRhDYl9PfBwaDRq7l6zlB17jxDk74NPvwjZvFnTyMgtEr91acIsPHTuwxU14Zy8mEJWX6oRwNP3b+aRreuEPFqthrVL5gEwe1q0w3Oxr8UBeHCzYrx3dHaRmp3PXSsXUV3XKDZjdHVxZuYt6rQSye3CT+/N6sUJIu07fnosadcKxTuzYHYc3p6KV/7J+zaxY+8R3N1cHfYFKCqvotto4sntd4k1bNFhwVxKzxFrPu3lqVRO3LN2ubg3v6Tiuj728yEidPhIjbenjgWz48T1M2Kn4O2hw2aziX1irAOMf/u1arWKTSsXjattXJyduXvtMl57b4/ym8JDqGtsEWUGB/iKNdIjERESSEVNnbgvr7hcrIHvz9P3b3FYZ20eZrKq0aiVdPkJmsyaLRbe23eUK5m5rF6UwI69R5gWFc6yebOZP9tR3y+bNxsPnVufvJvFcY1GzcYVStaBSqUip7CUK5nKconYKWGiHzhrtew6cAxsihNm+4aV45fXbBb1AkwJCyYuOoI2g0Ecj4kIJThAia48tHkNnxw+jc1mw9Rzfb1yaKA/j92zAYBPDp9G5+5KVFgwJy+min0mtq1fgarPEJJMPI/ds5Ede4/g7Kxl2/oVLE2YJZ6hq4sz88aZXRIRHEhZQK0oY0n8TLQaNZbeXuE8tDsItFoNm1ctZsfeIwQH+LJp5WIKSiu4mJaDu5sLSxJmEh6srKc9ev4yc+Ni0Lm54uTkxCNb1zlkGNjLzsgroqC0kuXz51DT0MTRc8ncs24Z3p4ePHnfJrFXinLPnT+pmSwWzZlBZn6xeE7j0QNL4meSXVAi7m3v9znb3UfPCgdBSKAfKxfMdYjW2m3lo+eTMZpMbN+4kjOX09i5/yhP3bcZb08Ptqxa4mAvW3pvjbP7q0R5v/EQlHnEmsUJZBWUiNRzu4PdRatl44qF4vqo8GARARfjvvXO/9JMRl6Rst+Juxtrl8zD30dxEHx86BRGU4+Ym/p4e7Jt/QrKa+o4cymN4opqrFYrhs5uVi+KJyo8hHvWLRt13hUXHcGVzFzRbmuXzhuzrDNjp5CSlSfutS9TANh3/Bxb1yxF7eSEzs2Ne9Yto61j8PzyYlo2NQ1NrF+2gNyiMvYeO8fX7l6PRqPm0bvXi69UwcQFdkZD/ZOf/esvRrrAT++Ft6cOb08dfj7eBAf4YTKb8ffxJjZSMWRUKhV6Lw/cXF04fPYSC2dPx1fvhZ/emzV9Xl9nrYZAPx8CfPX46r1E+pq3p45l82YLo9rfx5spocoeBuHBgRi6uvH31RPUZzDZ8fRwJywwQKTG2lE5OfVt1qMMVB46ZdMHi6VX/I6woADh2fbVezFv5jSi+vY4cNZqCQ30o6vbKK4P9vdF7+Wp1BnkLzYZ9PX2IjIkELVKRVRYMO2GLvz65A/y88Hfxxt/H2+ctYqzxNtTx4oFc0Wqq7+Pt6hXo1ET6OdD0AhrX8eLp84dLw+d+B3enjqiwoKZGhlGa4cBb08dEcGBzJ8VJ35P/+dSXFHNkviZDs4blZMT/j7ehAUHYLZYMJp68PbUMWtq1Jj3iZBIvkg4Af4+XkT0pU26aLVCl/npvXFx1vZ7v+eItL1pU8JpaevA19tT6CNQBml/H2+HDW7CggPosVgI8vfl0JmLrF4Uj7enjiB/X5bPV9beV9TUU1XXwNzpsXh76pg/axrBAX4A6L08iQgJQKNW4++jZ0pYMC7OWkID/YUuC/LzYVpUBM7a6/LOiYshdkoYWo2GAF9voS9CA/1ZEj9zTO3jr/cWBohGrcbfV09IoJ8oy9Kr6N75s+OGXNvv1KdT7Jv1eLi74ePlidliwdtTx7SocKbHRKJzd0Pv5UFEcCBajYa4qAha2jocx6chyg8N9MfS24uLsxZvTx0LZ08nKjwElcqJAB+92FTLxcWZYH/fYZdsCGw2OruM4jl4e+oI8NP36Xs9Wo0GlUpp35ULr+v7aVPCaWnvEGPQor70b72XBzp3V6xWG96eOhbPnSmiJTERobR1dOLl4U6Ar37YLImR8PX2chgDAnz1TJ0Sjoe7G1arFW9PHYvmTsffR9koLjoilHZDJ546d9zcESJUOAAAIABJREFUXCgur2bL6iUOZbq7uhAS4I+Xhw5DVzdajQZvTx3rl81Hoxk17iC5QWIjw2hp68DHy5PYyDBCg/zp7Hu/46LCievbyM9T505okL9YO+vXtxmWyskJlUqljOFBAejc3fDx9sJsVt61kEA/4qIiwGZDq9X06Zk4osJDUKtUTAkNpqOzC3+9N8EBvph6zFgsvcyJi3FIK/fxUnSeRqPGycmJmPBQ2gydDu9LgK+eblMPkSFBhAcHEBakvKcBfj44azVCfw60P7+KBPjq0ahVqFUqxW4LDSLY35eIkECc7M/UVy8yOFztuszbi0A/H9RqFWq1Gm9PHQkzphITEYpapcLPx0vobnc3V/z0XvSYzaLNQwL98dS509HZxcI5M9C5KRuztbZ3MCUseGh7OcBPbLQmuXm0Gg16Lw8HHW5/T61WK85aZVzbsHwhKpUKtVpFZEgQHZ1deHvqCPRT9H3/MWZG7BTiosJHXJN/u+k29WCz2Zg/O85hXtTW0YmHuxsLZ0/H21OHj7cXYUH+mC0WTD1mosKCiQ4PUeyYIH907m5EhgbhrB15XNJ7Oo7DYUH+hAb6Ex4cgHNflrzdtgJlThvg50OQnw8+Xp64u7pgsyn3zoyNYlpUOC7OzvjpvYgMCcLJyQmtRuOgs+02no+3J13dJqZHRxLgqycyNIiubiNhwQGoVSqiw0OG1J+TjVOrwTihrqS//9VveeFH30XXZxRJvlicTU7ncnoOoKT4rFg4RzhEJBLJ5PPtn/0Pf37hnwcdv5CaxbWiUrEHgUQyWfz2nY8xmy04a7VsWL7gK7v2WyKRSCSSryIT7iAoKq8S3mbJF4/6phaa+tJ2I0ODHD6BJpFIJp/8koohPzHYbuikq9v4lY2iSW4deSXlyifx1GqmRYWPfoNEIpFIJJIvDRPuIJBIJBKJRCKRSCQSiUTyxUOG+SUSiUQikUgkEolEIpFIB4FEIpFIJBKJRCKRSCQS6SCQSCQSiUQikUgkEolEAmjkJ4slEolEIpFIJBKJRCKRaFxcbrcIEolEIpFIJBKJRCKRSG43comBRCKRSCQSiUQikUgkEukgkEgkEolEIpFIJBKJRCIdBBKJRCKRSCQSiUQikUiQDgKJRCKRSCQSiUQikUgkSAeBRCKRSCQSiUQikUgkEqSDQCKRSCQSiUQikUgkEgm30EFQWlXHZ6cu3arqJBKJ5CvDu3uOY+jsvqkyXv7L7gmSZvLYuf8kre2GCSuvqbWdl978lL1HEwFIzS7k4tVrE1a+RCKR3Em89fFhjKae2y2GRDJm9h67QHVdEwBvvP8Zvb29t1mikdlzNJGahubbLcZNM6qD4JevvCf+vbP72A1X1NLWwbWiilGve+H19wEwdHbz2s4Dw163+8h5B9m6uo03LNvNYrZY+E0/4zqvuIL9x5Numzx29hxNpLCsakLL7DKaeHXHPodjlzPy+OUr73ExTRrWki8fVquVF//8ifi7sKyKPX0TypH4z9d2jXrNZ6cukV1QelPyAaRmFWDqMY+53qE4l5x1Q/f99xsfiv83tbbz5keHb6icsXA1u5DuCTJuDV3dvP3pUdYtS2DujGjSc4vJLihlSnjQqPe2dXSKsefjz886nDt46pI4199IsNls4nj/Nkru05/9/5VX1wPwm7c+dTj++q7/3955h0dVdA38tzW9h9BDEkpC7x1p0kFFsFDsqCCKn742LC/2gmJBRXhVVFAQUAHpgrTQOyEQIAkkpPdedze73x93d7JLCi0I6vyeJ8+TnTvt3jtz5syZM3PXXfF9zrZ7P3XFzgMnOHD8jEPYvJ/W8OYXP1FhNtd5eRKFD79ecaOrIPmbc+hENEaT6UZXQ3KZxCens2LDzhtdjRvKqZh48ouKAdh37DRmi6XGuPuORbHr8NXpMnXFyeh4CopKbmgd6gLtpSKcio7nnf88BICri9N1r9A9o/oDyqT7dGxCjfEuJKfTpU0LQkOaAPD+guW89cwDqFSq617HizGbLZyMrlTyGzfwx9vT/S+vx8XEJ6cT2CigzvKzWCz895MfqijorYIacyQymozsvDorSyK5WbCgDDofffMLLzx2N/mFJcQnp18y3fGoc7Ve3xR+mIoKM7sOnUSn1dIquEmd1Pfe0QPqJJ/L5cTp87z04bfMfvFRysuNnI1L+kvLv1qMpgriEtN4bkoLALbvj6DcYKRhPd9a05UbjMz9YRUTxwwEID4pnV837eKuEbewYcdBzBVmcW3xyi08NmEUvl4ezPxoIVPuHgFAZk4+C1dsYso9I8jMycfXy4Pht3QVZdTz9QIg8mw8zz16FzqtBgC9XnfF93niTNwVp6mNPUdOsXjVFu4c1tchfPSgnrz2yQ9YzBa5efE6MX5EvxtdBYlE8hdSVFzK+cS0G12Nm56T0fEsXrWF3PwihtmNpQCfL1rN5DsG4+fteYNq9/fkkgYCtVpVRXHde/QUqZm5jB+uDFbfrthI3y5tad0ikFmfLSIzJx8ANxdn5rz8eLX5/rZpF3/uPQbAfx4ZT8ugxgB8uXgNc15+nJkfLSQ7r5AnZn1Oh9Bgnph8W5U8GjfwE3W7kJyOxWKh3GDknXlLmTpxNCv/2M3/PXQnuw+fZMmabQBMvn0w/bq1AxRvhakTR+Pn7cmTb3zJvDeeAiAuMY0Pv1Es9QN7dhQK96KVWxxWyWe/MAVPDzeeeXs+eflFPDHrc1oFNWZwn86cOHOe+8cOAWDZuh3sPHgCgJlT76VZY2WF6olZn4u8mjUKYOa0CZd6HXVCWbmBZ99dAEBocBOeeXicuLZ6y17+2HVY/H552gRhZHjqzXk889CdDt4SAN6e7vj5yI4n+efi6uzEyAHd+eibXxjcu5PDtV82hrNt33EAXnj0bkICGzLzw4WYKip4Ytbn+Hi6897zj1TJMzs3Hz8fT4pKyigpLRfhz7//NcVWj6h6vl689cyDAByOjGbhL5Urz/ePHUKfLm2q5Pv5otV8PutJAM4npPLRt78AMLh3J+4e2Z/l63ey40AEAC8+dg/BTRuItDaZ1LRhPV55YuJlP58ZD4zlxdnf8MxD4xzCdx44wbL1OwB4cNxQenVqXSWtwWjk9bk/MuP+O1i2bge39u1MxOnzPHBnpfxs0awR3dq3qpLWVt9Lyc9Pv19JtNVwMfe/T6BRq5n54UKy8wpEHqVl5RiNFTSs58voQT1rzEuv0zJ14mjq+/sAitdEjNVTKyu3gPr+3mJcSs/Ow2hUVuui45IdxlLb+AdwIOIMUbEXAJg2aQwuzpXG+C8X/w4q8PZw4/0XptRYrytlU/hhfv9zLwBTJ4ymU5vm4toz78wXHikN/H14/en7lXoeP0N0XBK9O1dtd0GN66PVSMvA9cKmW81/62lAMTLN+mwRAN3atWLKPYrx6bdNu2gY4EefLm349LvfuHf0QBrV9wMq+0vDer7MmnFfjWV9+ePvnIpR2uNHLz2Gu5sLZeUG3pm3VCwYHT0Vy+lzCUy+fTCgbP/ZbV25e+WJiTRtWK+uH8G/msWrtrDPuv1p1lOT+XzRavIKlVVVb093Ztx/B2/PWwJA785thPwEZVvBochoADJyal7IOXIyhm9XbARg3PB+DO3bBVDk590j+9OkgT8AM96cxxevVzPG9OrE3dZFPsn15/NFqzl9TllI/fjlx3F1cQYgMyePWZ8tBqB7+1Y8cvcINu48xJqtimfztElj6BgWcmMqfZls2HGQtdv2A4oH+rjhlcbRp9/8ClQ46FYtmjXi2YfHsWXPsSp5Tbp9EN4ebpcsc1P4IX63en9PmziabfuOEx1f6YX9xawnmfHWPACaBzbk+UfvFtfWbdvP+h0HRX2h+oWaxNRM4Snfr2tbJt9xK6DIz9bNm9KlbUsAXvvkB16dPhEXZyeKSkp54YNvAGjbshlP3X/HJe+lLrikgaDcYOSB5z8EIKx5U155YiLd2oeyfvsB1m7dT3ZeAS2aNaJVsDLBz8jO4/Wn78fNxZni0jKef//rKkaCNVv3oVGrmf3io4Cy9/WRu4fTpEE9UjNz0GjUvDp9ErP/t5z3X5iC1rp6cjmYLRaiYi8wf8laXntyEodOnOVUzAVR1s9rt+Ok19G9QyhZOfmYre6QaRmKK2hqZg4//LZZxA8/eILf/tjN+OH9yCsoYsKYgXRuo6w4vTLnOz577Qne/s+DvPiBsoKm1aiJPBtPXoEiuH/ZGI67m4vI76NvVjDjgbEE+HmTmpHD4jkvApCQksGHX6/gxcfvuex7vVpmvDmPj1+ZCkB0XBJfLF7NjAfGsm77AUwVFaKus/+3HJNJ2esz9bW5fDTzseteN4nkZkStVuPj5U5Wbr5D+OrNe3DS6USf+Xjhrzw+YRSvPTmJh16aw+wXH0VdjVfThh0H0et1DO7dmQE9OvDZ96vw9HAlpGlD0rJy+erNGQBk5ebz+tzFvPl/D1BabqBNi0AeHDcMgJ9+34pep60ycU61yrLk9CwWrdoi6qbXKeL+jiG9GTmgu1Lfb39l2uQxYtXcFjcpLZMPFiy7bKNlowBf0jJzHcL2Ho0i9kKKyPPH1X+i1+no0raFQzyLBc6cS2TuolW8PuM+Is/Gk19Yec5AfmFxtdsKHnj+Q760GnUvJT+nThiFqUKR9dNnfcG37/+H156cxPsLlvGBddK9+/BJ4pPTGWJVimtCpVIJ48Dp2AT2HztdrQH7chnSt4swWgN8vWw9zk56QoOb8Pms6cKdMr+wmFfmfFetselK2bbvONm5+eLdfLt8I056Ha1bBPLsOwt4dfoknPQ6CoqKeX+BskUh4vQ5DkWe5dF7RrJ6y95rroPkynjx8XuY+upc8dvP20O8vyMnY1i0cgsPjhtKQVGJ8GDMyi1wcCe3xU/NzOGdL5fw2lOTq5Qzf+k6urVvxQN3DgXghdnfMO+Np3DS63j03pH899MfmDBmEDv2RzD9PqXdL1+/E1+vyvp8sGAZzz4yXnjCSK6NJWu20cDfVzxfd1dn0rPy+Ojlx9BpteQVFPH5otXi+oHjp/l57XYm3jaIRSu3ENy0AXeNVCbuL3zwdbVlnIyOJ/xQpMhj9ZY97Dx4ggE9OjB1wije/nIJzz92NzM/XCj0x5T0bBatrBxjdhyIYNXmPVW8iyR1z7wf19CrUxgPjVf0gf+89z8WvP1/FJWU8v6C5eKd2LzPBvfuRN+ubQH4etkGnPU6QkOa3pjKX4Ite46SX1gs7uHT735zuP7u8w+j1WjIKyji1Y+/593nHsbZSU/DAD883V2rbKHx97m0HNq69xjZuQWiTFdnJ1ZsCOep++8Qxs7HXv2Uuf+dDkBcYiqffvcbzz4ynj92Haa4tLxSD7TbkmpPVm4+85esFfH2Hj3F8vU7uXf0AMYP78f8JWtx0utZtm4HU+4egbOTHrPZzAvvf8Psl5Q0UbEXmL90HU9MGnNZz/JauKSBwEmvY9FHLziE6XVaxg7tw5Lft9Ggng8DenRwcO33cHPB3dUFtUpFcUnVswHKDUb0Oi2e7q7id0VF5b5FlUqFh5sLarVaxKmOt79cAijlfj/7OdRqZfXC38eLd597GJVKhdFUwabwQ2wKt62KW2gfGlxjnmazmYgz53nwhY9E/HtGVVqCXJ2dRJ2KS8uwYMHDzRWVWlVtXQ0GI+6uLuJaaZlBGCUAEe7spKekrLxK+utBUUmpKNdJrxOrlwaDEZWq8j40dqtBhcUl4plYLBbhUiyR/FtoXN+fh8YP45U539G/RwcAyo1GXJ2dRZ8xGIyYzRbc3VxQQY3yy2A0sXTNNpau2W4NsXD3qFvEdVu6ktIyBxmq01bKzYoKM6ZaDusxmy0YDMYqdfhp9VZh6bZYLDXKo+LSy5dHarWaz2dN5+GXPhbeYEaTiQqzWeRpMlXUWF9fL3c+eGHKFW0Rs5dJAB3Capbr7y9YLraBWawTbnc3ZYyy1c/F2Qm9TovTZbrxxyWmsXTtNt565sFr2tqm12mF8QaUtmE7hMndzUWEmyoqKKpmPL0aDEYTZoulst2aTOLdFJWU4uHmIpQTG0ZTBVv3HmPr3uMoG2/Aw82VAT071EmdJLXj7uqCfTPLyM7jiVlfWH9ZGNG/+yXzsO8vYc2rnxyUlZVbz61QCrP1F5VKRVDj+jw0fhiLVm7hzf+r3NJZbjDw9bLtfL1sg0hjqWWfsOTKKC83oNVqqshyDzdX9DotRpOJkrJycV2tVouDCMvKDWg1lWnVquq9fCoqKgg/eILwg5HWEAtP3nc7AK4uzrz3/CM8/upnzJ01HVerh5PZUlVfvnf0wDq8c0lNlJaX46TXifcqDim2QGlpeZW2smbrPgd9w7ZIcDNisHqv2e7h4kViDzcXdFotRqOp2jnm1WAzKlz83NxcnR2ese1/vV4n5mwGg2Pamha1LRYLUbEJDv3FZkxzdtLzzMPjeH3uYh4cN1R4dlosFlIzcxzS9O/e/tpv+DK4pIHAYlFcL0EROs5OekymCtZt24+HuwspGTmEH4ykX/d2aKwT9NKyctQqFaXl5bg466vkqdNqsVgQBwvqdFoxuReoVNbJaxkajaZape2/T00W7hgXYxu4tBo1w2/p5uBuZcvrk1en8dgrn5KZk8/qBW8o96hS0T40iJftVs602tofk0oFzta6XnwfOp0Ws9ks7tVJr/tLz0koNxgcDnB0dXHGxclJhBlNJvE8dFotBqNRXLM32iz99GUACopKmPnRQma/+CgVZjPl1kHIYlHSSyT/ZFo3D+S1JycTfkhRorRaLRYsos/odZX929XFmZLSMlQqlYPLuMlUARYLD44bxtihfQBlxa3cYBJKtS2/MoPRQYaaKirENbVahVZTs3eVSqVCr9OJ+FqtljVb91Hf34cln7wEINwQbdjiGowmnJ2ubL+7t6c78954is9+WKWUp9GgVqvs6quu1QXd9tw0GjVqlVqks3kxXYyrszPfvPeM+F1lDLHy6fcrGTe8Ly9PuxeAh1/6+Iru62IsFguJqZl89sNK3n/+EUrLytFqNeh1OvQ6LWZzZXtw0mlRq5X7cnNxcny+Vrm7ZfcRsnILuGNIb0B5brax9MnXv+C95x9Bp9VQXm7A2anqeHrJ+tq1TwCNRoNOq0FF5bvRatTCIOzirKe0rByz2SzGfoBu7Vuxar4yTi5btwN3V2cG9OxAWXml0dvF6fqfUyRRjDgfLFgu+vG+Y6eJvZACwMN3DeeLxb/zxeLfefe5h8SWxodenCPiJ6Vl8f1vmwHYvv84cYlpPGI9H0Ov1zFz6gTahwaJ8tRqtWj3C1dsYvIdg/nku9+Y8cAd6HU6dFpl24294mov8yTXxsV65JXIAb1Oi6miMq39AW+Tn/2AJZ/OBJR33L97e6ZOHG2XVpFRZeUGZn22mA9enMJTr3/Jl288iauLMyqVig5hwcyceq9Icyl9WXLlVNiN+6C8Fye9DqOpMlz0NxU4OVWO+xqNhvBDkRiNJtH/P1nouCJ/s2GbYAsdoMLx4NuS0nJ0WhNlhsoxsaKignKDEaPRpBjMSstw0uvQaDSUlRsuOffSajSgUjnM1S4XnU4DZZXjrP1BvQ88/yHff/g8GrUalUpFWEhTZs2o9Nyy9ReD0ciXi9dw7+gBfP/rH0ydOFp4LtT39+bTV6eJNJpa9L665JI92dvTTexXbxXchOem3MWBiDOYzGbuGqaseH2zfAP1/Lxo06IZAK/M+R61WoWbizOfWG9Kr9OJPSBjh/bhl43hIt/nptwlHkSAnzeg7C15bsp4nn13AR1CQ3jy/tsd6uXp7iaElz1qlQp/u/3wPTqGUW4wirIApk4cLQwL/r5eQoEDaBjgx8N3DXeIP3pQT26/tTdeHm4OjaaerxcqVOh0Wt557mGefXcBLYOaMKRPZ2FJumfUAJau2Sbye/mJicI9tb6/t8hLp9XgU8cHG3q5u7Jo5RYWUfn1iflvPc1Xb83g/97+CoDQ4Kb8Z8p4AG67tRerNu8Rdc3Nr/o5MbVaJQ76OB2bwBeLVwMwemDPm9oiKZFcLSpwcJV10uvwsvbv8cP7sWLDTtFnXnz8HrFPc9FHLzD1tc/w9nR38LY5eMIqP0dUegzMnDaB9+b/LOSfLT+bN5SNvUeiiDyrHDr34LihYnuBr7cHausEz5ZHkwb+PDBuiMjr1j6duWfUAJat2+Eg32xGhgA/bxHetGEArz056bKeTz2/ymej0ajx9fYAoG/XthiMJpHnQ+OHVWvQVakUOWyjW/tWDukAenQMFfdpMzIs+XQmU1/7TMRp3TzQ4TwVG88+PI6PF/7KAusXALw9lXFIo1I5nJ3i4qTHw61mjzUb5Qaj+FKErY79urXj/rFDmDBmIEt+3yrCX50+iXq+yvv48eOXmPZfxUU8uEkDsX1jaL+urN9+QKSZPvk24fo5780ZPPXGlxhNJrw83PnwpSv32vJwc3F4ll3bteLxCaPYFH5IhE+bNEaM35/PepKn35pHudUbprqDEd1cnIVC+u2KjaJNfjTz8SvaEii5OtxdXXj1yUkO73VAj0pPDk93V+r7ezsY7X/48HmH/tI8sBGgTDbtPVWevO92vli8mu9+rTzvZP5bT2MwmliwdJ3Y4lJuMLJifTj3jb2VibcN4qfVWx3q895zj8izieqI+8cO4YffNovn+8bT9+Pv6yU8StRqNX5WuQvKZNH2Th++azjfrtjIsnXbxXXbRMledrcPDa6iKz9w51D6dm3LvJ/W8PSDd+Dn7cl3s59j+utf8NWbM2hc358Hxw11SHPb4F6MGdyr7h/CvxSdTktCSobDM550+2BmPDCWz75fyTfLFa+duf99ArDKhukTRfzuHUJ59J6RbNhx0CEPe6+1m43ht3Rjnd2YCJX1refrxYuzlf349rrVibNxYowH2HnwBI/eM5LuHUL5ZOFvPDZhVK1bnob07eLwjKZNGoOPl4fDIoxNt7LVx9tDmbON6N+dNVv3OdTXtrVDmScq+Pt4Mf2+2xziDb+lG+OG92PF+nAG9OxA25ZBvPvcw7wy5zv++9RkXJyd+PiVqY76UIcwcebM9URVZiqrUz+waf+dy5yXH8fd1eXSkSU3Hdl5BeRbz0/4/c+93D1qgJjwSCSS6899z83mp49fqhK+6/BJTkXHM+0v2Hsm+XcTl5iGxWKhuLSM9TsOOqwQSv56ktKyMBiMfLtiY52cQSGRSCQSSW3UuQmpdfPAWt1eJTc3R0/Fstv6PfQHxw+VxgGJ5C+mXctm1YZ7e7jJ/ij5S1i6dhsGgwk3V2dpHLgJWL/9ACnp2bV+eUAikUgkkrqizj0IJDcPxUHtLh1JIpFIJBKJRFItbvEnb3QVJBKJ5C9FfrT4H4o0DkgkEolEIpFcG1Kfkkgk/zakgUAikUgkEolEIpFIJBKJNBBIJBKJRCKRSCQSiUQikQaCfyxyz5xEIpFIJBLJtSH1KYlE8m9DVVgqDymUSCQSiUQikUgkEonk3462ouJGV0EikUgkEolEIpFIJBLJjUZuMZBIJBKJRCKRSCQSiUQiDQQSiUQikUgkEolEIpFIpIFAIpFIJBKJRCKRSCQSCdJAIJFIJBKJRCKRSCQSiQRpIJBIJBKJRCKRSCQSiUSCNBBIrpHSsnLyC4tudDWuG0aTiazc/BtWfklZGQVFxVedvrC4hKKS0jqskeRmJCM7lwqz+ZrySMnIqqPaXD8yc/Iw1eGnd0wVFaSkZ5GTVwBAcUkphcUldZa/RCK5eiwWC2lZOTe6GhKJRPKvo1YDQUx8EjHxiVX+0i9TYFeYzcQnpdZJRSVXR3J6JjHxiRiMRkB5pzbKDQaS0jIBKCgqdnjHFyvJ5xKSiYlP5FxCskP40VPRrNwcDijK+7VMZmvi4jILi0uIiU+sdeJuq29MfCLxyWlXXXZyehbzl666ZLy4pFQxQbu4vldLUUkpOw8eZ+/Rk4AyCbR/R0ajCcAhLCEl3SGPY1ExbNlz6Lq8l38LFouF84kp4ndxaRlpmdmXTBd7IemScTKyc+tkQjpn4TLyC4ouu9zqeOGDr64qnX17NxpNJKSm1xL72vjshxV1ZrCrqKjgWFQM839ezYad+ykoKmbb/qMcjjxzybRGk0n0uYsNK/b9tNxgcLgm+qndM8orKKoyxpaWlQMQl5jiEH4h5cplWV3JI3ty8grIKyh0CItPTiMmPhGLxVLn5Ukcqa4dXSml5eUObctmJLuZMBhNvPXlDzVet+9rZeWGGuNJJH9XSsvK/xbG+787+YVFN3Qx8GakVgPB73/uYuXmcJZv2Ma7839k5eZwVm4O52hU9GVlbjAa2bz7UJ1UVHJ17D16kg++XiIa/huff0fEmVgAUjNz+P63DQAcjjzDlz+tFO94z5FIh4nL2m17mTV3Iet37BNhBUXF5BcW0aRBPQA2hu/nWFRMndb/WFQ0787/0SEsOT2Tr5evZcuemtvW2/MWiXv5c8/hOq1Tdfyx6yAmkwmLxcL7//vpmvMrKillz5FILGYLI/r3BGDd9r0s/HW9uC+bZ8Csud+JsHXb9zpMEPt374iPpwc7Dx4nr+Cf6+lxPTFbLLzz1WKiYuMBiI5L5Nc/dl4y3ZtffF/r9ZSMLLbsOczuIyfq1ICz+s/ddZbX5fDOV4tFv8/Ky+ebZWv/0vKvlsLiUpat+5O3n3mU++4YxvHTseTkFTCoV5da01WYzRyOPCP63Obdh8RELSVdeae2awcioig3KMbZY1HRInzDjv1i4n7wRBTzlqwS11ZuDic7T5HXH377M79u2inCt+49csX3ebH8vFYyc/JYsnYL+46fcgj/c89h3vryh2v2ZJHUjn07Wr9931UbgBKS05mzcJnIa/uBo2Tm5NVxba8fKRlZ/Lm3+r4mkfxTiEtKZdm6rTe6Gv94ziemCh1PoqCt7eLzj04EIDsvn9lfL+WlxycDkJaVQ1xSKiqVCie9joaSgvu9AAAV9UlEQVT1/DgZfV5MQHp1botWo+FI5Fm6tGsl8svMyePs+QQAgps2pHF9ZWIZefYc+YWVCnK/bh3q8Bb/3dw9chAnzp5zCNtzJBKDwUg9Px+H8J4d2zDptqEAbAo/wO4jJ7ilW0fcXV145qG7mfSfKJ5+4C4R/3xiCucSU5hx//hL1mP34RMAuLo406VtZZtITs8kLrHSy6Rty2B8vDwA2H/8FEdOnq2SV1hIM4b360Fmbu3KjK292sjJLyAzJ4/Q4EBRf3dXFwL8fIg4E0thUaVBpKY2mJSWKbxiwpoH4u/jDUDXdqFoNBp2HzmByVTB7sMncHdzoVPrllXyULxwcgHo3LYVbi7O1ZSTQeTZc6IP2rhtUF/6dm1f471m5uSxYed+TBUVhIU0A2Bgz858vWwN0XEJ9OjYptr7ktSO0Whi79FI4bVhz/nEFFLSFQt/h7DmeLq7cTAiCrPZwu7DJ9DrdfTo0LpKul2HIgjw8+Z07AUa169Hh9DmgNLuTSbFjd7ZWU+3dmGAo/wEaBnUhPr+vlXy7dO5rfi/oKiYE2eU/t+ovj8hTRtxLiGZ1AzFA6Jj6xZ4uLmK+LZ+6ubqQuc2VdtuTew9GonBaCSwUX2H8JSMLM4nKN4XrYKbEnCRzAFlwn3k5FnatgzmXEIyjev7k5NXQMugpoCyAu7p7kY9X+8qaW31ramv2bAfY3p3aYdapeLgiShKyspFHtFxiWTm5JKQkl7lPuwxV5iJjksUfe5gRBSbwg/w+L23s/Pgcer7+zD5dkWOvjznf4SFNCPAz4cPv/mZnz99HVC8PFZs2M7L0+4DoEmDAHpZ+2abFkH4enuK8npbx1O9Tlun/TcpLYP4JMUjoXWLZvh5e4lre4+exGyd6Ls4O9G1XSigrNjuPXqSxNQMWjRr7JDfo/eM4VDk6Tqrn6Qq+4+f4vDJs6LtZWTnsnHnfkymCkJDAklMzeCCncdc+9AQvDzca8yvRWBjXnhsEqC04z1HIunTpZ3op0dOnhXeLLYxsaiklON2CwG2BQKbN2K7ViF4e1aWaetfF7ej6LhEEedi2XAwIgqD0VTrdqJdhyLw9/EWOssvG7dTbjDgpNc5lGuTDVm5eZw5p8jPoCYNRb2l/in5u1LdvAsU76AjkYruXM/Xm9CQQBJS00lIVgzZF8v7fzuZOXkUl5Q6jPunz8WTnat4VXXv0BonvQ6zdXGgR8c2FBQVk5SWSZsWQQBcSEkjMSUDgDYtg/D18qxaEI7ys76/Ly2DmgCKTuDt6S7mFIciz9ClTUs0Gg1Gk4kDx6MA8PHyoG3L4OvwFKpSq4GgJk7HxrP7SCStmzejfasQ0rNyOB17gXKrG3tBUTEjB/Ti9LkLnIqJEwpuUUkpsVZrd3p2Dj07tqVJg3qs3ByOn7cn7lZFtaSsjGH9etTF/Umq4eG7RvHCB19VmXzaM6J/T975ahFhIc1wd3Wpcj2voIgLyWl0DGt+yfI27z5IinVCotVoMJlM9OjYhqS0TA5EnKKwWFkJjzgdi4e7Kz5eHoQfOk58chrTJ9/JlFdm15r/yejzQjnp27W9mPBsCj8AgLurC/26daCktIzjUTGYzRZ0Wg3HomLo0rYVAX4+/PbHTur7+eBmvdeycgND+nZzKCcpLYMDEaeFZ0VWbj63dO+An7cXP67eRJsWQcReSKaiwkxsQjL+Pl7VTlrSs3NFP8grLGJIn244O+kv+RwBxZBhLf+W7h2rGBfq+XrTpW0rNoUfFAYCybXj4uzEqIG9mb90NeOGDRDhsReSOBYVQ3FpGaAYoQb37kpcchoWLMQmJOPm4lzFQBCXlIparSawYX30Oh1xiak0a1QfLw93vl2xTiipGo0ao9FE787tiIlP4vetu8XgkJmTR58u7aoYCeYvXU2fLu0pKillx4Fj5OQrruB6vY6Qpo3Iys0X7S+3oJDBvbqIdm8L12mVQak6w0Z1PDFpLNNmzeHN/5siwlIysth37JRor5m5efTt0r6KkcBkqmDB0tXcOaw/Wq2GcoORIyfPCAPBzoPHCQtpVsVAsCn8gNifrNNqMZoq6N4+rNr6JadnibiFJSUM79eD+KQ0jEaTuOeM7Fzyi4rJzS+s1UCg02l5cNxIQHG1T83Mpl3LkMt6TtUR2Kg+KRnZoh7Zefn0794JHy8PBvXsLLZIadRqDCYT/bpe+wQmITWdQydOC9mblZtP/+4d8fX2ZMeBY1xIScdisWAwGDlzPoGu7ULJzMljz9FIGgf4X3a7kNQt36xYy8L3ZorfAX4+dGrTkj92HSQ0JJDDJ88QcTqWoCYNAUUeDerVBQ83VzbvPoTZbMZJr6vWS6ZHxzZ8/9sGouMTCfDzYf/xU8ReSBaTdNuYmJWTx8/r/qS7tQ2kWrdb2cvAgT074+nuBlTKFK1V0e3VqS3R8Yms3baH1lbl2l427D58gvNJKZjNFmGkqo6WQU25kJwmxvlh/bqLMu1lg20cLiy21z9zgdY0aRDAqi278PHyEHqD1D8lfweOn44hKjYeg3XRoqComFEDe2M0mti694jwGjZbzISGBJKbXyjaf1ZuPv17dKxxEvtvo6iklO0HjtIqqClBjRsAioe1bctuflExI27pgdli4btfN9CjYxtSM7NZv32vMBDk5BXajeEFDOjRycFQCorhZvv+o2Rbt3OlZGQp7yc4kIzsPE7FxNGvWwfOnk/gXEIKHcOao1ar2bLnMBnZyqKik16HqaKCjmEtrvtzuSoDASh7MNu1CiY0JJC5i35hUK8uYgVsyisfMGpgbybeNoTXPvmmsjCNBg83RRGNOHMOP28vYcW9fUg/AhsqStn9z78tBfR1RKvRMLBnZ7buvXrX+6zcPE6fu8DMqfddMu6Pqzfz45zXAEhMzeC7X9fTo2MbYi8kUVJWzkNWZfvzxb+KNCv/CKdHx9as3LwTo9HEpvADwtX+YsoMBjEJqaioVChsYSqVCrCu0nVuy6ETZ7BYLHRu05LmgZWrYHcO7U+j+v4APPTSe1UMBNHxSZSVG0R9P/vhF5o3a+xgiX1o3Ej2HI0UcarD2Ukv+sGarXvo06XdZRsIysor77U25UlS93i4udIxrAV7jkaKsIgzsbi5unD3yEEAvD53IV3ahnLvqMGs27anxnZwKiaOs3EJqNVK2ww/FEG7VsFitc+WLj0rh88X/0rvzu0ACAsJFNcW/Pw7CSnp1XoRgGLEO3LyrMOkHZQBxtb+NoYfoGu7UGEgsOUdn5TKj79vvuyJoEqlYli/Hvyx66AIO5+YQkFRMQ+PHwXAV0tWkZiaUa0XgdliwUmvZ1i/7hy6jDMAABat2shdIwYCkJtfyObdB2s0ELi6OIl7XvL7Fkb278U9owZzNi5B3HP4oQjiElPo2PryBt68giK27T9K4/r+4v1cDWEhzRyMeXO+/ZnQkEB8vDy4Z9RgEZ6bX8h7C36sEwNB9PlEDEaTuPdPvltOy6Am+Hp78uumHcyZ+STOTnryC4t48wtlD3hSWgb7j52iR8fWRMXGo9dpadsiuFZjiuSvp1v7MMYM6gMo25w6tWmJh5srxSWlmCoqMFU4XVY+67fvo3mzxpX9Zu0WMSY2DPATbWfNVmVLk00GvvPVIjqENheTdVv6wuJS1m/fR69OiodTWPNmIo+vlqwiMU2RDav/3MVr0x/A29ODcoORw9V4EQLCE9G2xWLLnsOM7N8TN1cXfli5kWWfveEQX6e11z9j8fXyoEmDAADuuLWfaMdS/5T8Hdh58DiDe3Wh/UXzrnKjkT/3HOaz1552iK/XVY774YciCA0JlAYCK8FNGtKrU1uHc1hc7PT0XzftYEifrqjVNe/Kt9erth84SpsWQVUMBMUlpazfsY+hVjl6PjEVU0UFocGB9OnSjv3HT7F9/zEsFgvjhg9Ar1O8Fpav38rtt/YFFMPFrkMRN7eBoFVQ0ytaoUxJz2Lv0Ug8PZRBQ6fVXG3RkmtEp9UyelBvVv4RXmOcHQeO0b5Vc/y8b4wAGTe8v1iRUKmUFdya6NYuTHip2GNTWOwxmSqwWCyo1SqMpro7Db0mktMzOZeQTP/unQDFbSgpNQNX68q/bYJ4ufTs2KbaLQY2cvIKOBl9ngE9Ol19pSXV4uHmypA+Xfl10w7K6mCvq06rFe1Ao/5r5OGxqBjOJ6bYlVs3H7JRqVTcfmtfVm2uWabUhquzE8P6db/ydNb7cHVxrnHA3L7/KIXFJSJuXaAM9Htp2azJNbv9nzl/gdIyQ7VbOn7ZuJ1xw/qj0dz48bJx/XoM7NUZAL1Oi16nEy6tkr+GiaOHsGjlRuHBkpWbT1RMPP17dLxk2juH9a/1+rGoGLw83Ahp2kiEuTjpRb+ZdNuQK67v0rVbxJZBUx2Pt8eionFzcRbj/KuffM0t3ToIY6c9KelZ7D4SiZfQP69a9ZVI/nacPZ/AyejzuFsnsBqN/IBdbew9GklGdp6QfbZFRo1azZjBfVi0ciNarZbBvbsCynaE0+fiRXz7cXH5+q3cM2qwyEOtVot47VoFO8jbsnIDOq2WopKSKof92tI0D2xEo3r+1+O2q1AnUnJYvx4cPHFa7Pm67/ZhVeK4ODvh6uIs9pvb7/mS1D27DkcQefY8oLjd+3h6OFx3cXKib9f2DqezH4uKEfuZmjYMYECPjmIV4NsVa7FYLHz363rGDRvArsMnxCqFPdv2HeFUTJz4/eC4kUydeDtfLVG+BODspGfs0FsAZQUhJ79AXIu9kCQmtrYJNcAvG3cwoEcnMnPy+GXjdgB8vT3FSkRN2PL18fRg4m1DiE9O40BEFD07tkGr1bD/eBRqtUqcSbB07RbRCR+/97Yq+bVp3ozc/EKRb4tmjWlq9YCxZ/JtQ/lqySoC/Hxo2awJx0/Hivvx8/YkJj5RuGUaqtnTXhtb9hwSh0xOvn2oWHG21cnF2Ylu7UKFVVlSt3h7etC1XZjwIujWPoz9x6PE8+/dpR2+3kpfmzrxDr5asgo3VxcevHOEyOP0uQsUl5Yx8bYhwmuqSYMAwg9FCDd6W356nVaskoPieWC71rh+PYLtBpeL8fX2oHeXdiJ+h7DmNGkQgCnORFyi4n578Sn79v30jiH9rujZ6HU6+vfoxMlopf+3CmpKVk6+yLNJg3oENWlwyXxCmjYkNSPLQS5UZ4x+YtKdnIw+L37XNAGp7+9LQmoGxdZDPa/1lH2j0cT/lq8hKiae/MJiDp88S5sWQQzs2Zlenduy//gpUXd7V+snJo116KdjBivy09PdjVMxcew7pnytJKx5MxoFKApAYKP6fLNiLWazBa1Gw4TRt15xfQ0GoygXoHlgYzqENWfv0UgR3iq4qTgT6IGxw/lh5UbMZrODfArw82Fk/14AFJeU4ebqTKP6/qzfsU/se7931OA6MzpJqjKkbzfCD0U4yvv2YbRvdXVbXOKS00ReAX4+9OncTrS98SMGcDjyrHCH1euuXF0MatyA46eV8arEepbBpZgw5lZWbNyOyVRR64GXPp4e7I+IYus+5eDOW7p3FAtQ0yffKe6rnq83Q/p0w81B/5QH9kr+PpxPTHGQ4QN6dGJYvx4cijzNrovmXU56HWMG9bHTU5vQrlUwarVatP8S6+KbpHr8fbw5l5hCSobNM1nRLdRqNf26dmDarDmEBjcVZw15urthsVDt89267wh3jRyERqXCw82VsUP6EXuh8mBZb6sOv+PAMQqLSxjQoyPnE1P5ee2fPDhuBDqtsqXxzLkLIo1O89cYOFV5RWWX1JYMRiPnElJo3VxR0rLz8iktM4jtAaAocQXWQ946hjVHo9FQVFLKa598I1xdcvMLibP77GGzxvXx8/YiJj6RJg0DcHFSVomPRcVc0QFZkqokpmaIE4lDg5sKq/qxqGg6t1Fc80rLyklKy6RlUBOycvMdPpEX0rQh3nZGhYjTsVSYzWi1Gur5ejPvp5W88+xjDmUmpWWKfTI22rcKQafTcvSU8uULF2c9rZsHiesZ2bni/IC12/YwdugtVVYCI87E0jGsBSVlZeKQIX9fLzG5qg5bfUGZ7LRpEUR+YRG5BUVij1FSWgauzs74ensya+5C+nfrKA4Hs7kvKs8oQ+yHTs/KIdl6IF1wk4ZideRUTBxhIYFoNBpMFRWcOHMONxdnGgb4kZ1XQLB1Tygoh5nYDj+xf0b2FJWUsvvICcwVZkYN7A04vlOAti2DcNLrORYVjW3O4+riVGUytePAMYpKSunXtb3DO5VcHhaLhZPR54XRpaComJy8ArHPNyktg4xs5b20Cm7qcGbH0VPR6HRaBwW+OvkJipU/qElDnnzjE6ZPvhNQBnvbmQN7j55k1+EIhvZVVtpt8hMUo0OLwMbodFoH+VlUUioOAwvw86ZJg4Aq7ahNiyCcnS7djmoi4nSscMsvNxiIT04TRrfMnDwSU5WDe4IaN3A4fM+G2WzmVGx8lWd0IblSHtn6mvKMGuCk14vna8PDzVUc+HMxyqdbS8XvLm1bWT9VmGS3h7CAkrIy4XZcExVmMxHWSY8Nfx8v4aKckJpOVo6y/zOseSCuzorR0WKxiK89uLk4ExoSKNKnZWaLc1qaBzZyOFju+GnruSkXtaPLxf4ZgXLIUXCThqRl5YjDNUOaNnJwh7TJz5LSMlZuDueTV55yyCM1MxuNWk2Anw/nEpKFwb99aIhcnf0LsL3T6tqR2vpegCq6lT32sgGgUYAfDer5OcQ5FRMnvgygUavp2FoZh5PTskRfs3322rbVKSY+icYN/EW7t29/bq7OhAYHkpNfQHFJGU0bKn0tPjkNH0930e4jz54THn61tXv7vhYaEuhwJo+tXJssq1X/bBAgvBSl/im5mVA+6+346eLARgH4+3gTE58ktpza5l2gjMOnYpQT+YW8txtjoKqu8m9ny55D5OQVcK/VCH8+McXhy1+dWrdArVZjNJmIPHsed1cXWgU3FddTMrJIy8wRv23zrhNnz9G+VYjwILCfxwDU9/ehcf16JKSk4+nuKnT0k9Hnad0iCI1aLeYUNny9PIT+eT25LAPB1fD63IXo9TomjRlS6yqX5O+HwWgkLTOnTvae7j16kj92KYcM9e3agb5d21d7qv/1ZtbchUybcIc4g+BmoKiklF2HI1CpVIy4pfrzFy7FrsMRZOXmM7hXl1pPs5bcPDz6ymy+fe+lKuF7j57k9Ll4ptw95gbUSvJv4t2vFmMwGnF2cmLCmFsdDJwSiUQikfwTOJeQzOJVm2gZ1JQR/XuIrwhIrqOBIDk9E7VaTcOLLNISiT1FJaXC3c/Xy7PWswauJ5k5efh4edx0e2pLysowGk1XPbm3WZftP2UnublJzcyuVm6WlpVTbjBWOfhGIqlrUjKysFgsaNTqKqvKEolEIpH8Eyg3GMjKzcfNxUXqVhdx3QwEEolEIpFIJBKJRCKRSP4+yM2C/3Aqwq7+81sSiUQikUgk/1Y0Z07e6CpIJBLJX448bvgfjDQOSCQSiUQikVwdUo+SSCT/Rv4fuuU68OLXLPAAAAAASUVORK5CYII=)
- 通过主存储库页面的 "签入包" 功能签入 ePO 中的 ExtraDAT 文件。或者,对于测试或非托管端点,请通过 ENS 控制台应用 ExtraDAT 。
有关详细信息,请参阅 KB67602-如何使用 Endpoint Security 客户端以本地方式签入和部署 ePolicy Orchestrator 和 KB93673 应用额外中的额外 .DAT 。 .DAT
签入后,会在主存储库中反映以下名称,并在客户端任务中显示 ExtraDAT ExtraDAT (JNDI.Log4J-Exploit.a;JNDI.Log4J.Exploit.b;JNDI.Log4J.Exploit.c)
注意:如果您收到其他必须应用于您的环境的额外驱动程序,我们会提供工具以在支持门户中进行合并 ExtraDATs 。
- 确保客户端更新任务到端点包含 ExtraDAT 包类型,并且这些更新应用到系统。一旦部署到预期接收专家规则的 ExtraDAT 系统后,请继续在步骤3修改您的策略。
- 要配置专家规则,请导航至您的 Endpoint Security、 漏洞利用防护 策略。添加使用以下设置配置的专家规则:
规则名称 |
JNDI Log4J 漏洞利用 |
严重性 |
高 |
操作 |
报告 |
规则键入 |
进程 |
- 将以下规则内容应用到规则中:
Rule {
Reaction SCAN ACTOR_PROCESS ScanAction REPORT
Process {
Include OBJECT_NAME {
-v "java.exe"
-v "javaw.exe"
-v "tomcat*.exe"
}
Include AggregateMatch -xtype "dll1" {
Include DLL_LOADED -name "java" { -v 0x1 }
}
Include AggregateMatch -xtype "dll2" {
Include DLL_LOADED -name "jvm" { -v 0x1 }
}
}
Target {
Match PROCESS {
Include OBJECT_NAME { -v "cmd.exe" }
Include OBJECT_NAME { -v "powershell.exe" }
Include OBJECT_NAME { -v "powershell_ise.exe" }
Include OBJECT_NAME { -v "wscript.exe" }
Include OBJECT_NAME { -v "cscript.exe" }
Include OBJECT_NAME { -v "rundll32.exe" }
Exclude PROCESS_CMD_LINE { -v "* chcp 1252 *" }
}
}
}
-
保存修改后的规则和策略。将其应用到已收到相应
ExtraDAT 内容的端点。
针对您的环境调整专家规则:
专家规则设计用于触发目标按需扫描(ODS)。该规则未指示系统中存在威胁。您可以安全地忽略
Log4J 不是 ODS 检测事件的漏洞利用防护事件。这些漏洞利用防护事件可能会由正常操作生成,不会指示误报,因为符合规则标准以触发 ODS 任务。要管理事件,请参阅 "" 计划清除以下项的威胁事件日志 "" 部分。
ePO 5.10 产品手册。
此方法的优点是根据专家规则触发器来调用目标 ODS 内存扫描。因此,不需要进一步排除项,也可能会降低规则的 ODS 功效。但是,您可以为您的环境微调专家规则。调整规则可确保 ENS 仅会在需要时扫描处理内存。请确保通过目标策略分配和 ePO 系统分组,将规则应用于具有潜在漏洞的应用程序的系统。此操作可防止不必要的覆盖范围,并且您可以进一步调整规则以忽略自然应用程序行为。
有关专业规则培训视频的详细资料,请参阅
KB89677-专家规则培训视频。有关 ENS 的自定义规则的技术支持语句,请参阅
KB94889-Support 语句,其中包含 Endpoint Security 的自定义规则。如果您按照本文所述更改规则,请确保
在 ePO 中应用策略之前,在客户端系统上验证并强制实施专家规则。有关详细信息,请参阅 "在客户端系统上验证并强制实施专家规则"
ENS 10.7 产品手册。
您必须关注规则的三个主要部分。
主角进程: 这些进程会引用专家规则预期要监控的所有进程。本节包含利用 Java 或已知可能包含
Log4j 的应用程序可执行文件。此部分允许专家规则监控其活动,以实现对目标部分的潜在调用。
目标部分: 此部分包含任何可能会被视为可疑的二进制文件(如果从主角进程启动)。专家规则会将详细信息与 "
wscript.exe " 和 "
powershell.exe " 等常见的 fileless 攻击媒介进行比较。如果主角进程调用了目标部分中列出的二进制文件,则专家规则会解析为反应部分。
您可以通过在规则的
目标 部分添加类似以下行,在流程执行时使用的命令。行参数来排除合法的流程活动。
示例:
Exclude PROCESS_CMD_LINE { -v "* chcp 1252 *" }
Exclude PROCESS_CMD_LINE { -v "* ping 127.0.0.1*" }
这将允许根据所使用的指定命令。行参数,触发要排除的规则的进程。没有指定参数的相同操作仍会触发规则。命令。行参数会有所不同,应该完全唯一,以便它不会排除意外事件。ePO 管理员可以在其环境中查看
Log4J 漏洞利用防护威胁事件,以确定可能需要哪些参数。
注意: Owing 为规则的性质,单独按进程排除项对仅包含预定义进程没有好处。
反应部分: 此部分指的是规则内的第一行,
反应扫描 ACTOR_PROCESS SCANACTION 报告。此行告知漏洞利用防护,当主角进程调用目标时,会开始对受影响的进程进行进程内存扫描。除报告以外的任何反应都适用于主角进程,这可能是您运行的易受攻击的应用程序。这意味着,如果我们检测到 TOMCAT 被利用,则清理可能会应用到
TOMCATxx.EXE 自身。建议仅在报告中保留规则,并使用其他方法(例如 EDR 隔离)来隔离系统(如果发生检测项)。但是,有多个选项可用于反应。建议您在实施之前进行测试。
注意: 本文中的
ExtraDAT 提供已更新,可在2021年12月21日提供增强功能。在12月21日之前应用的
ExtraDAT 客户必须重新部署新的增强版本(
EXTRA2.zip )。这
ExtraDAT 种情况下的更改允许在目标进程中引导干净操作,而不会影响父参与者进程。例如,如果
Java.exe 由于漏洞利用而启动
cmd.exe ,则检测会停止
cmd.exe 进程,而不会停止
java.exe 。这可让管理员对系统进行反应并调查系统,同时限制生产应用程序的潜在中断。
- CLEAN_PROCESS -尝试清理进程。系统会将检测记录到 ODS 活动日志中。
- DELETE_PROCESS -尝试删除进程。系统会将检测记录到 ODS 活动日志中。
- CLEAN_DELETE_PROCESS -首先,尝试清理进程;如果不成功,请尝试删除该进程。系统会将检测记录到 ODS 活动日志中。
- REPORT -在检测到的进程上不执行任何操作。系统会将检测记录到 ODS 活动日志中,并会向 ePO 发送检测事件。
- REPORT_CLEAN_PROCESS -尝试清理进程。系统会将检测记录到 ODS 活动日志中,并会向 ePO 发送检测事件。
- REPORT_DELETE_PROCESS -尝试删除进程。系统会将检测记录到 ODS 活动日志中,并会将检测事件发送至 ePO
- REPORT_CLEAN_DELETE_PROCESS -首先,尝试清理进程;如果不成功,则为尝试删除该进程。系统会将检测记录到 ODS 活动日志中,并会向 ePO 发送检测事件。
ENS、VirusScan Enterprise (VSE)、Secure Web Gateway (SWG):
2021年12月12日,我们发布了
V3AMCorecontent 4648、
MEDDAT4818.0000和
V2 DAT 10196。在标题
Exploit-CVE-2021-44228.C 下会提供一般性检测。这些检测项会识别使用潜在恶意
jndi:ldaps, jndi:ldap 、
jndi:rmi 和
jndi:dns 字符串。检测项表示为 "潜在有害程序,",建议您查看策略,以确保扫描程序遵守有害的程序检测项。
其他检测项会继续添加,因此建议客户在每日发布节奏之后继续更新端点和网关内容。
启用有害程序检测项:
ENS:按访问扫描策略、进程设置(请确保在适用的情况下对所有风险配置文件进行相应的设置调整)。
![Select 'Detect unwanted programs'](/library/MCAFEE/CORPORATE_USER/CORP_TS_AGENT/KB95091/KB95091_OAS_PUP_2.png)
VSE:按访问扫描策略
检测到的示例也可利用此漏洞与有通配符的活动相关。此列表可能并非全部包含在内,并且示例正持续评估进行检测。
散 列 |
检测名称 |
0579a8907f34236b754b07331685d79e |
Linux/Black-T.a |
07b7746b922cf7d7fa821123a226ed36 |
Linux/Coinminer.bl |
648effa354b3cbaad87b45f48d59c616 |
LINUX/Kinsing.a |
ccef46c7edf9131ccffc47bd69eb743b |
LINUX/Downloader.bb |
09c5608ec058a3f1d995a4340b5d204b |
Exploit-CVE-2021-44228.d |
671182fa65c043c5643aca73a2827553 |
Exploit-CVE-2021-44228.d |
0af9f06338c94bc026787a85d06af5ac |
Exploit-CVE-2021-44228.d |
2b4303e6a9346781bd70f32290f97d4f |
Exploit-CVE-2021-44228.d |
751249af62035965a26ab90ff9c652f2 |
Exploit-CVE-2021-44228.d |
eab89d2f9511d79a7ea10477320b93bd |
Exploit-CVE-2021-44228.d |
e29b1df3acaa1dd701fa123e362ab52d |
Exploit-CVE-2021-44228.d |
b8519db943405027127c8a8b919fde9e0c5f9c9f |
BAT/Agent.bp |
f43a96d6970e8252894d6a53c6858bf2ab75149f |
BAT/Agent.bp |
716167b08e01e9c5919b8e8458e59e8e9ad68826 |
BAT/Agent.bs |
c927738922b87802cc75697dd99dd8c7d8cfdf1e |
Linux/Black-T.a |
8611063eefa5cc2bbec29870fb56779192eed454 |
Linux/Black-T.a |
bf2df8f2813ef4e2cf61ea193e091b808aa854c7 |
Linux/Coinminer.bl |
ffe3dda2486083d0b26f1c64ac300923088e01df |
Linux/Coinminer.bl |
38c56b5e1489092b80c9908f04379e5a16876f01 |
LINUX/Downloader.bb |
8654b19a3fd4e3e571cc84c0c3990669c04e3558 |
Linux/Gates |
0194637f1e83c2efc8bcda8d20c446805698c7bc |
LINUX/Kinsing.a |
296273fd9965bf41d8d3970c766158c7f24fc618 |
LINUX/Tsunami.u |
61586a0c47e3ae120bb53d73e47515da4deaefbb |
LINUX/Tsunami.u |
43c1c41fdb133c3f9c25edcdff16e229ac31f42b |
LINUX/Tsunami.u |
335d6b7d76d2918ef133fe9d4735ae201616323b |
LINUX/Tsunami.u |
e3eb1e98ca477918154b9ed7bcc2b7fe757c1020 |
LINUX/Tsunami.u |
fd91820560d2e0aa7079d7c7756e343e66f47056 |
LINUX/Tsunami.v |
82d984fcbf4f8bc8ffbad29e3f3cc4cfac70d8d4 |
LINUX/Tsunami.v |
b21aa1107ecc79f4ad29f68a026a02e2abc952ef |
LINUX/Tsunami.v |
0c876245dfdeb17c0ad472b0356cd5658b384f6a |
LINUX/Tsunami.v |
edcacb6b71a0a66736f8b3dd55aaae371e4171b8 |
LINUX/Tsunami.v |
e121d1050bf62a94adfde406325e70a7878b3ed8 |
LINUX/Tsunami.v |
3c7a4da4190ceac25f28719794e2b9e6d62105c1 |
LINUX/Tsunami.v |
2e75071855d7f1c78eed2e6e971e763451c6298c |
LINUX/Tsunami.v |
237315820fe77880e892d5c30b2f5fde7e5f6d64 |
LINUX/Tsunami.v |
7c1808a5296ece6400e4ec558b9ef0d82e0f23b0 |
LINUX/Tsunami.v |
5008672d6f47a444c743455346e0b04eef257b30 |
LINUX/Tsunami.v |
74402152ac0f0c9dfed6f76975080ce1d0d4584d |
Linux-coinminer.d |
18791de615208b29809e840771e11ac8c3b5ed7b |
PS/Reverseshell.a |
0d4404b132e6e297974eca391f176a047ad7ed73 |
PUP-XOK-HR |
cef612c5c042cceddff8b6b8bc573bb0af46a208 |
GenericRXNV-AC!F5271F6B20FD |
9147d834f4cb7047a6e6ab96565868c6fede373e |
RDN/Generic Downloader.x |
95d9a068529dd2ea4bb4bef644f5c4f5 |
RDN/Generic.dx |
18cc66e29a7bc435a316d9c292c45cc6 |
W64/CoinMiner |
0BB39BA78FC976EDB9C26DE1CECD60EB |
Linux/Tsunami!0BB39BA78FC9 |
0F7C2DD019AFCC092FD421EE52431AFF |
JAVA/Agent.f |
1348A00488A5B3097681B6463321D84C |
Linux/Log4Shell |
163E03B99C8CB2C71319A737932E9551 |
Coinminer.cp |
1780D9AAF4C048AD99FA93B60777E3F9 |
Coinminer.cp |
194DB367FBB403A78D63818C3168A355 |
W64/CoinMiner |
1CF9B0571DECFF5303EE9FE3C98BB1F1 |
Coinminer.cp |
1E051111C4CF327775DC3BAB4DF4BF85 |
BAT/Downloader.ax |
1FE52C0B0139660B2335DD7B7C12EA05 |
LINUX/Coinminer.cl |
20DF80B56B1B6FFC8CA49F8AD3AB7B81 |
Linux/Mirai!20DF80B56B1B |
39FC2CEE0A2BEA3EE9A065F6955FFD43 |
Java/Agent!39FC2CEE0A2B |
51E052EB6032D11B3093FECB901870EA |
Linux/Mirai!51E052EB6032 |
7B8CE524AE078A76A69548AEBB95CB7E |
Main.class JAVA/Agent.i |
844864C45816B10356B730F450BD7037 |
Linux/Mirai!844864C45816 |
963B4F516B86C9D8B30BEFE714CEDB22 |
Linux/Downloader.bv |
AB80C03C460BD3D6A631FD0CEDDDEF49 |
Linux/Mirai!AB80C03C460B |
C6E8E6BB0295437FB790B1151A1B107E |
Linux/Mirai!C6E8E6BB0295 |
C717C47941C150F867CE6A62ED0D2D35 |
W64/CoinMiner |
D766BD832973A991C5894A3521C9815E |
Linux/Mirai!D766BD832973 |
F14019C55E7CE19D93838A4B2F6AEC12 |
BAT/Downloader.ax |
F5271F6B20FDA39C213FD9579AD7E1FB |
Linux/Tsunami!F5271F6B20FD |
F65F547869CA35A8E2902C4DEC0DD97F |
LINUX/Coinminer.cb |
F8ED43117DFB995F4B9D88F566394BA4 |
CVE-2021-44228!F8ED43117DFB |
客户必须确保所有解决方案在发布时都能收到最新的内容,这会在每日节奏发生。这样做可确保添加了覆盖范围,并随时可以提供保护功能。
SWG:
SWG 经典 10.2 及更高版本可以通过 "搜索 Log4Shell" (可在本文的 "附件" 部分中提供)来识别和阻止恶意的
Log4Shell JNDI 查找模式,从而触发漏洞。这适用于请求,其好处如下所示:
- 当使用 SWG 作为反向代理时,其后面的系统会受到保护,防止 Log4Shell 在 HTTP 报头和主体中利用漏洞(GAM 检测 POST 请求中的漏洞利用模式,最近的 DAT 更新)。
- 当使用 SWG 作为转发代理时,来自您自己网络且通过代理发出 POST 请求的攻击将被阻止。
要应用/导入规则集,请执行以下步骤:
- 将规则集 2021-12-13_10-50_Search for Log4Shell.xml (在本文的 "附件" 部分中提供)放在桌面上。
- 单击 Add 然后 Top Level 规则集。
- 单击 从规则集库导入规则集。
- 单击 从文件导入。
- 选择文件。
- 解决所有冲突。
- 点击OK。
- 将规则设置移到策略中的适当位置,理想情况下是 SSL 扫描启用。
- 点击保存更改。
UCE 和 SWG 还可以针对 Java 类文件的下载进行保护。最简单的方法是完全阻止媒体类型 "
application/java-vm " (在 "媒体类型" 类别 "可执行文件" 中找到)。如果需要允许下载合法的类文件,则建议通过 IP 地址或域授予访问权限。有关 SWG,请参阅该文件
2021-12-20_15-16_Block Java Class Files.xml (本文的 "附件" 一节中提供的内容)。要导入规则集,请按照上面的类似步骤操作。在 UCE 中,您可以通过策略 UI 轻松创建一个类似的规则集。
注意:所引用的内容仅可供已登录的 ServicePortal 用户使用。 要查看内容,请单击该链接并在出现提示时登录。
搜寻、漏洞评估和调查:
- MVISION Endpoint Detection and Response (EDR)、Trellix Active Response (TAR):
您可以使用 " Real-Time Search " 和 " Historical Search " 功能在您的环境中主动寻找易受攻击的系统或漏洞利用活动。
我们维护了一个 GitHub 有用的 " Real-Time Search " 查询存储库,管理员可能会在调查中找到帮助。有关详细信息,请参阅 RTS 查询 GitHub。
内置收集器可启用以下搜索:
可通过基础查询来完成对已报告易受攻击的 Log4j 哈希版本的自我评估。例如:
HostInfo os, hostname, platform
AND Files sha256, full_name
WHERE HostInfo platform equals "Linux"
AND Files sha256 equals "bf4f41403280c1b115650d470f9b260a5c9042c04d9bcc2a6ca504a66379b2d6"
OR Files sha256 equals "bf4f41403280c1b115650d470f9b260a5c9042c04d9bcc2a6ca504a66379b2d6"
OR Files sha256 equals "58e9f72081efff9bdaabd82e3b3efe5b1b9f1666cefe28f429ad7176a6d770ae"
OR Files sha256 equals "ed285ad5ac6a8cf13461d6c2874fdcd3bf67002844831f66e21c2d0adda43fa4"
OR Files sha256 equals "dbf88c623cc2ad99d82fa4c575fb105e2083465a47b84d64e2e1a63e183c274e"
OR Files sha256 equals "a38ddff1e797adb39a08876932bc2538d771ff7db23885fb883fec526aff4fc8"
OR Files sha256 equals "7d86841489afd1097576a649094ae1efb79b3147cd162ba019861dfad4e9573b"
OR Files sha256 equals "4bfb0d5022dc499908da4597f3e19f9f64d3cc98ce756a2249c72179d3d75c47"
OR Files sha256 equals "473f15c04122dad810c919b2f3484d46560fd2dd4573f6695d387195816b02a6"
OR Files sha256 equals "b3fae4f84d4303cdbad4696554b4e8d2381ad3faf6e0c3c8d2ce60a4388caa02"
OR Files sha256 equals "dcde6033b205433d6e9855c93740f798951fa3a3f252035a768d9f356fde806d"
OR Files sha256 equals "85338f694c844c8b66d8a1b981bcf38627f95579209b2662182a009d849e1a4c"
OR Files sha256 equals "db3906edad6009d1886ec1e2a198249b6d99820a3575f8ec80c6ce57f08d521a"
OR Files sha256 equals "ec411a34fee49692f196e4dc0a905b25d0667825904862fdba153df5e53183e0"
OR Files sha256 equals "a00a54e3fb8cb83fab38f8714f240ecc13ab9c492584aa571aec5fc71b48732d"
OR Files sha256 equals "c584d1000591efa391386264e0d43ec35f4dbb146cad9390f73358d9c84ee78d"
OR Files sha256 equals "8bdb662843c1f4b120fb4c25a5636008085900cdf9947b1dadb9b672ea6134dc"
OR Files sha256 equals "c830cde8f929c35dad42cbdb6b28447df69ceffe99937bf420d32424df4d076a"
OR Files sha256 equals "6ae3b0cb657e051f97835a6432c2b0f50a651b36b6d4af395bbe9060bb4ef4b2"
OR Files sha256 equals "535e19bf14d8c76ec00a7e8490287ca2e2597cae2de5b8f1f65eb81ef1c2a4c6"
OR Files sha256 equals "42de36e61d454afff5e50e6930961c85b55d681e23931efd248fd9b9b9297239"
OR Files sha256 equals "4f53e4d52efcccdc446017426c15001bb0fe444c7a6cdc9966f8741cf210d997"
OR Files sha256 equals "df00277045338ceaa6f70a7b8eee178710b3ba51eac28c1142ec802157492de6"
OR Files sha256 equals "28433734bd9e3121e0a0b78238d5131837b9dbe26f1a930bc872bad44e68e44e"
OR Files sha256 equals "cf65f0d33640f2cd0a0b06dd86a5c6353938ccb25f4ffd14116b4884181e0392"
OR Files sha256 equals "5bb84e110d5f18cee47021a024d358227612dd6dac7b97fa781f85c6ad3ccee4"
OR Files sha256 equals "ccf02bb919e1a44b13b366ea1b203f98772650475f2a06e9fac4b3c957a7c3fa"
OR Files sha256 equals "815a73e20e90a413662eefe8594414684df3d5723edcd76070e1a5aee864616e"
OR Files sha256 equals "10ef331115cbbd18b5be3f3761e046523f9c95c103484082b18e67a7c36e570c"
OR Files sha256 equals "dc815be299f81c180aa8d2924f1b015f2c46686e866bc410e72de75f7cd41aae"
OR Files sha256 equals "9275f5d57709e2204900d3dae2727f5932f85d3813ad31c9d351def03dd3d03d"
OR Files sha256 equals "f35ccc9978797a895e5bee58fa8c3b7ad6d5ee55386e9e532f141ee8ed2e937d"
OR Files sha256 equals "5256517e6237b888c65c8691f29219b6658d800c23e81d5167c4a8bbd2a0daa3"
OR Files sha256 equals "d4485176aea67cc85f5ccc45bb66166f8bfc715ae4a695f0d870a1f8d848cc3d"
OR Files sha256 equals "3fcc4c1f2f806acfc395144c98b8ba2a80fe1bf5e3ad3397588bbd2610a37100"
OR Files sha256 equals "057a48fe378586b6913d29b4b10162b4b5045277f1be66b7a01fb7e30bd05ef3"
OR Files sha256 equals "5dbd6bb2381bf54563ea15bc9fbb6d7094eaf7184e6975c50f8996f77bfc3f2c"
OR Files sha256 equals "c39b0ea14e7766440c59e5ae5f48adee038d9b1c7a1375b376e966ca12c22cd3"
OR Files sha256 equals "6f38a25482d82cd118c4255f25b9d78d96821d22bab498cdce9cda7a563ca992"
OR Files sha256 equals "54962835992e303928aa909730ce3a50e311068c0960c708e82ab76701db5e6b"
OR Files sha256 equals "e5e9b0f8d72f4e7b9022b7a83c673334d7967981191d2d98f9c57dc97b4caae1"
OR Files sha256 equals "68d793940c28ddff6670be703690dfdf9e77315970c42c4af40ca7261a8570fa"
OR Files sha256 equals "9da0f5ca7c8eab693d090ae759275b9db4ca5acdbcfe4a63d3871e0b17367463"
OR Files sha256 equals "006fc6623fbb961084243cfc327c885f3c57f2eba8ee05fbc4e93e5358778c85"
源自
GitHub的版本的
Log4j 2.x 文件哈希。
识别安装有易受攻击的版本且按文件名安装的
Log4j 系统。例如:文件和 HostInfo 主机(其中包含
log4j 文件名称)。
各版本之间的文件名可能有所不同,或者如果
Log4j 是通过供应商解决方案提供的。
识别与已知注解域的出站通信尝试。
确定与漏洞利用负载相关的威胁指标。
注意: 在 Linux 上,默认情况下,
.JAR 文件将从文件哈希中排除。为了在您的环境中提供准确的可见性,请从您的 EDR 策略文件中删除
.JAR哈希,
忽略 Linux 设置上的扩展 。此更改不需要完全 rehashed 文件系统。
- SIEM
我们已发布了漏洞利用内容包版本 4.1.0 ,现在可从规则服务器进行下载。此内容包包含一个新警报,标题为 "漏洞利用 Log4Shell 漏洞。" 此警报会查看特定 jndi 字符串的 URL 和 User_Agent 字段,以表示可能存在漏洞利用尝试。
有关 SIEM 漏洞利用内容包 4.1.0 的详细信息,请参阅 KB85403-SIEM 内容包以供利用。
注意:所引用的内容仅可供已登录的 ServicePortal 用户使用。 要查看内容,请单击该链接并在出现提示时登录。
威胁情报:
确定为超出范围的产品功能:
- ENS 漏洞利用防护。有关利用漏洞利用防护专家规则功能和按需内存扫描的详细信息,请参阅上述 "检测和响应" 部分。